Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3138392e302f32342d3234203d3e20323135383137.roa
File: 3230302e3134312e3138392e302f32342d3234203d3e20323135383137.roa (raw, json)
Hash identifier: E9aFG+oMT5dXtxtVYt5U17kK/E4Y6hrmZn9waQ9cnes=
Subject key identifier: E6:70:C9:85:8F:94:68:66:03:74:2D:B2:09:3F:ED:C1:ED:F0:90:97
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 39C30844C28EAD07B94EF29BAABFB2AC84031D3C
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3138392e302f32342d3234203d3e20323135383137.roa
Signing time: Wed 16 Sep 2026 15:35:02 +0000
ROA not before: Wed 16 Sep 2026 15:30:02 +0000
ROA not after: Wed 15 Sep 2027 15:35:02 +0000
asID: 215817
IP address blocks: 200.141.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:c3:08:44:c2:8e:ad:07:b9:4e:f2:9b:aa:bf:b2:ac:84:03:1d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:02 2026 GMT
Not After : Sep 15 15:35:02 2027 GMT
Subject: CN=E670C9858F94686603742DB2093FEDC1EDF09097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9c:28:44:88:79:27:90:a4:3d:23:e7:bc:fd:
6d:7d:f2:07:17:bd:84:6c:0f:b8:32:8e:d8:f5:f5:
c7:c0:1b:aa:3b:bd:d0:07:18:79:eb:87:d5:29:75:
1f:7a:fb:e2:25:36:47:13:47:80:ab:f5:3f:9d:75:
21:e6:d8:6c:12:de:d4:30:c0:ea:17:af:ed:1d:e0:
b2:74:71:1d:7a:75:3e:cb:a9:c3:d4:24:25:73:24:
51:a6:aa:77:1d:bf:86:9a:d1:a7:91:03:80:2b:49:
e8:72:cd:02:6e:10:f6:43:f6:ac:59:59:81:ea:d7:
9f:cd:93:48:19:ad:a7:5a:c5:f0:02:da:f9:7d:ae:
01:48:99:34:fd:1a:93:b7:6b:51:d6:41:36:c7:4e:
49:10:ee:10:5d:97:e7:31:9e:58:8e:f4:e4:2c:3e:
e1:33:52:84:05:02:63:8e:d3:a8:d3:69:fe:76:d8:
08:2d:6d:60:82:d3:13:32:03:a1:4f:cf:07:bb:90:
d2:3a:8c:c4:6f:94:cc:e5:7e:e8:9f:92:de:ec:89:
c0:d2:ed:f6:a4:e2:c8:5e:3d:96:90:7a:54:48:d6:
5f:d4:9e:98:65:a3:e2:90:5a:00:b0:1e:a3:57:cf:
66:79:e4:66:e6:a2:db:4d:43:df:f2:3b:cb:1f:95:
47:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:70:C9:85:8F:94:68:66:03:74:2D:B2:09:3F:ED:C1:ED:F0:90:97
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3138392e302f32342d3234203d3e20323135383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.141.189.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:de:2b:ea:70:45:0b:ab:73:4a:bf:a4:43:cc:f8:34:11:5c:
2b:16:89:83:cb:8a:46:38:6b:c9:d8:5e:e1:00:bd:b6:7c:a2:
15:a3:80:37:f7:46:6a:4e:f6:15:aa:39:2f:69:4b:0b:32:73:
48:54:ae:a0:59:8d:4a:7a:63:d4:c1:6c:3e:a3:de:30:03:9b:
59:60:d4:b1:49:35:2b:e2:92:55:e5:04:38:c1:21:6d:29:04:
86:89:71:7c:49:aa:67:e6:b5:75:18:4f:b1:f3:22:05:c6:ad:
be:52:b2:ff:7d:ed:c2:91:cd:d2:f7:ef:ed:74:ff:aa:48:77:
00:b9:cd:f3:d6:28:33:6a:23:c8:ef:0f:2b:41:e7:e9:30:0f:
57:bd:21:fa:90:85:bf:93:98:82:5c:ab:6c:41:21:fd:ab:49:
79:06:6f:49:04:c1:95:c4:0f:80:a4:48:fe:de:6b:23:19:30:
e7:e3:df:73:24:7d:02:3d:6d:29:9f:ef:68:3d:ba:5f:33:1a:
95:43:20:01:83:bf:6c:cd:af:8e:66:fa:9e:a3:d8:f4:c6:8e:
74:7c:8d:d3:3a:00:b2:bf:e6:9b:60:4c:d2:0e:9b:54:6a:98:
ea:c4:5a:4e:ec:39:a8:8e:97:45:f8:7c:94:13:18:2e:27:4b:
8c:99:e4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:54 2026 by rpki-client