Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3139302e302f32342d3234203d3e20323134343833.roa
File: 3230302e3134312e3139302e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: slguiRalbfQVwWAzIZ3/mIANU2WYA/aIDJT5zbLcqwM=
Subject key identifier: 81:44:21:8D:D9:FD:2E:4E:56:50:56:1D:8C:AD:F4:49:AF:4C:A2:02
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 7EC07DEE41305D344B55FD4442361689C7BECFF1
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3139302e302f32342d3234203d3e20323134343833.roa
Signing time: Wed 16 Sep 2026 15:34:58 +0000
ROA not before: Wed 16 Sep 2026 15:29:58 +0000
ROA not after: Wed 15 Sep 2027 15:34:58 +0000
asID: 214483
IP address blocks: 200.141.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:c0:7d:ee:41:30:5d:34:4b:55:fd:44:42:36:16:89:c7:be:cf:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:58 2026 GMT
Not After : Sep 15 15:34:58 2027 GMT
Subject: CN=8144218DD9FD2E4E5650561D8CADF449AF4CA202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a1:7e:24:22:72:5f:29:a9:08:bb:ae:6c:da:
a0:41:65:51:83:bf:23:3c:41:13:41:5d:f4:c3:fb:
30:59:28:77:dc:ef:65:d6:01:db:2a:4f:e3:dc:9c:
45:7c:f1:fe:88:07:1c:02:bc:3d:c7:cd:53:eb:df:
4e:0e:6a:96:a6:5d:65:85:74:a3:dc:80:6e:eb:41:
a2:12:96:1a:d8:dd:c1:8e:ad:87:7e:87:80:1e:78:
90:14:8c:47:73:c7:92:16:20:bd:68:3e:54:70:49:
08:1d:3f:2a:21:a2:95:d2:49:35:11:a5:05:59:d0:
8c:99:6b:81:d4:93:c4:5b:1d:2a:2a:39:31:47:dd:
b3:04:0b:12:97:72:b6:bb:5e:17:44:4a:e0:d3:45:
2f:fd:59:8c:5d:bb:12:85:f8:c8:3c:b5:4c:c4:a4:
85:f6:ea:73:88:36:f9:3b:0d:dd:7d:10:85:87:9c:
95:5e:03:30:ba:50:db:91:54:4b:2c:5d:73:39:d7:
a1:98:78:36:60:76:1f:29:1a:9c:5a:41:29:17:8d:
d8:47:40:64:d5:e8:ab:65:e7:fa:67:46:98:ca:43:
47:fc:24:d1:3e:59:ec:4a:bd:38:a9:1e:0b:79:13:
53:e4:43:a7:7d:d4:c0:9b:ef:3a:47:32:82:08:d4:
af:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:44:21:8D:D9:FD:2E:4E:56:50:56:1D:8C:AD:F4:49:AF:4C:A2:02
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3139302e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.141.190.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:a7:d4:0f:0b:a1:0f:fe:94:68:1c:b8:f8:02:f8:d7:1d:4e:
7f:a7:47:4e:2f:80:2f:65:3d:85:57:39:f8:cd:e7:9f:d9:9d:
42:29:8b:a5:72:c8:53:a5:29:3a:a6:75:4e:52:27:2d:77:38:
da:ae:24:b5:9d:7b:a2:86:db:d3:13:c0:9c:91:69:3e:7c:d0:
5c:e7:b2:e2:af:ca:7a:74:e8:22:bc:9c:6f:43:a5:03:23:94:
e4:be:70:b4:df:42:ff:00:74:21:3d:1f:9f:7a:53:e5:db:96:
67:1f:33:45:57:14:ea:6f:f2:01:60:7e:8f:d9:26:62:3d:57:
5e:a4:d7:93:50:cc:15:32:6b:0c:2c:00:ab:df:be:1b:43:c8:
e7:67:25:9f:07:19:15:c4:e7:70:7b:79:9e:0a:19:31:ee:ec:
68:5f:ab:09:fe:84:f3:c1:fc:bc:67:a2:ce:23:e1:b4:f3:df:
df:49:2f:1c:f9:e4:c4:a7:ce:84:24:43:b9:49:9b:4f:1d:43:
88:f8:78:b2:b5:dc:3d:d9:b9:83:e3:74:42:a9:cb:4c:7c:f7:
09:30:fa:6f:cc:aa:a9:03:06:4f:59:ba:e9:e6:b9:f5:e9:d5:
1f:86:92:f7:cd:ed:a6:55:cd:a1:b9:f8:3e:3a:25:59:e5:05:
7e:02:ea:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:17 2026 by rpki-client