Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3139312e302f32342d3234203d3e20313532313739.roa
File: 3230302e3134312e3139312e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: MLLZA8oWiLw2zrIGX6oct5wybc7ZwSt5/pIBJVPmW0o=
Subject key identifier: E3:45:06:2F:2A:89:EB:56:4A:39:1A:C2:8D:92:0A:B3:EC:C1:79:41
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 756482692664928608ADC2B9483F324AFF2DDA8E
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3139312e302f32342d3234203d3e20313532313739.roa
Signing time: Wed 16 Sep 2026 15:34:59 +0000
ROA not before: Wed 16 Sep 2026 15:29:59 +0000
ROA not after: Wed 15 Sep 2027 15:34:59 +0000
asID: 152179
IP address blocks: 200.141.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:64:82:69:26:64:92:86:08:ad:c2:b9:48:3f:32:4a:ff:2d:da:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:59 2026 GMT
Not After : Sep 15 15:34:59 2027 GMT
Subject: CN=E345062F2A89EB564A391AC28D920AB3ECC17941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:db:12:fc:86:d0:4a:22:59:79:61:e4:05:46:
f0:2d:19:e8:6b:ce:27:06:6a:3b:bd:be:53:03:50:
ad:6e:37:99:aa:16:55:46:c5:ce:a9:84:d0:e4:c8:
b0:81:e7:7e:9c:bc:d9:f4:52:95:cd:3f:1e:b9:91:
ea:7c:3e:cc:89:7f:e3:cf:50:6f:e4:3c:ec:64:b4:
c9:1e:20:96:7c:31:f4:e8:8b:f8:6e:54:7d:84:93:
dc:11:e0:ab:ce:6f:a0:8f:57:1e:15:2e:8d:7d:0b:
4a:ce:83:cd:b2:c6:fc:5b:84:43:73:bf:f7:2c:0f:
b2:18:e9:e1:14:97:18:ef:e1:8b:dd:76:f7:22:fb:
98:dd:3b:85:66:20:73:3d:0e:75:16:d5:68:ac:87:
16:3b:7a:6c:6c:6d:28:46:5f:e2:ac:52:0a:6d:f5:
19:fd:93:df:ce:e7:67:5e:bc:aa:46:f9:2b:c6:28:
4e:0b:d4:16:49:ca:ec:e7:b5:48:f3:c5:f7:a0:37:
2f:60:f2:7a:2f:59:94:b6:56:c2:eb:57:18:b9:f4:
cd:a9:6c:63:c5:4d:f6:20:1b:06:b3:1f:6c:9f:da:
ea:60:91:28:84:ab:d8:7a:78:4d:2d:72:d9:7d:ad:
ab:5a:ba:96:a0:84:19:1e:36:76:43:e0:7a:5b:6f:
61:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:45:06:2F:2A:89:EB:56:4A:39:1A:C2:8D:92:0A:B3:EC:C1:79:41
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3139312e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.141.191.0/24
Signature Algorithm: sha256WithRSAEncryption
84:1a:a3:d0:19:ed:34:18:71:d4:dc:69:ee:63:fd:94:c3:56:
c7:c1:10:7c:1f:66:d1:3c:b2:dd:c3:32:61:8d:fb:0a:69:b5:
34:ed:6b:a8:b7:8c:a7:4f:bd:9d:be:da:fb:2c:79:0d:57:12:
a0:38:48:67:79:e2:c9:27:5d:9b:be:29:e2:af:32:7b:a9:c3:
b8:c7:0d:98:66:17:b9:c2:21:ba:fe:f7:cf:64:fa:cc:3f:ad:
46:d4:93:4e:07:55:cb:f3:ba:62:2e:49:59:da:85:a5:ab:60:
4d:3b:dd:df:bf:8e:39:48:62:ac:45:7b:f0:99:40:d5:d2:d4:
ef:3f:a8:36:d9:ef:08:16:b8:c5:24:05:75:18:29:18:6b:2c:
35:a4:d4:23:05:70:b8:bc:de:15:98:c5:7f:7b:a2:3f:1f:48:
88:bd:59:e6:3e:b5:2c:5a:24:82:f0:27:4d:53:59:af:46:38:
eb:1f:13:50:c8:dc:55:20:e6:9e:e3:b5:d0:5f:e1:8b:a3:43:
0f:52:52:77:3e:c5:d8:ae:15:9f:99:67:23:44:1c:37:1d:56:
79:57:2e:e0:1c:6d:5c:c5:85:5e:d9:72:43:73:30:1e:83:09:
33:f5:05:54:81:d5:91:13:22:d1:15:2e:b0:34:63:e8:c5:ab:
56:9e:43:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:31 2026 by rpki-client