Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134392e3137362e302f32312d3234203d3e20323134343332.roa
File: 3230302e3134392e3137362e302f32312d3234203d3e20323134343332.roa (raw, json)
Hash identifier: lUVImb3fLsb7pwun+oDeTZIVMx+RU2gvUmv3lKJG/Sk=
Subject key identifier: 86:9C:15:D2:5B:CC:B9:6A:F5:D8:EC:9E:C8:E1:DE:74:73:CF:F1:D7
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 2DE265C402508C98D08AAC3556FF9288828163FA
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134392e3137362e302f32312d3234203d3e20323134343332.roa
Signing time: Wed 16 Sep 2026 15:34:58 +0000
ROA not before: Wed 16 Sep 2026 15:29:58 +0000
ROA not after: Wed 15 Sep 2027 15:34:58 +0000
asID: 214432
IP address blocks: 200.149.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:e2:65:c4:02:50:8c:98:d0:8a:ac:35:56:ff:92:88:82:81:63:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:58 2026 GMT
Not After : Sep 15 15:34:58 2027 GMT
Subject: CN=869C15D25BCCB96AF5D8EC9EC8E1DE7473CFF1D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:39:b9:aa:20:45:be:b3:70:57:9b:c5:e0:46:
14:27:60:db:c6:36:00:30:1c:37:66:d4:b1:2c:86:
10:f5:96:9c:1a:9f:3d:71:9d:af:dc:8f:8e:ca:fb:
f2:03:47:be:35:fa:5a:c5:bc:76:da:12:16:1b:d6:
05:25:54:68:1e:fd:e4:c2:bc:90:6d:e1:cf:49:69:
a2:97:d8:27:e6:a0:f3:51:38:53:21:5b:22:b5:75:
f1:48:22:fa:2e:19:99:53:af:3b:68:72:d4:90:cd:
64:c7:8a:c8:43:04:72:01:bd:21:b3:4a:e0:a0:79:
78:b8:42:0b:94:62:2e:d3:56:8b:05:29:0b:4e:2a:
fe:b6:06:2e:58:93:f0:40:22:6c:fc:25:9f:a9:5f:
14:4f:6a:3a:60:52:b7:56:49:c7:9e:df:54:ce:11:
c2:b4:6d:95:aa:00:99:21:a6:49:fd:43:3d:69:f8:
0c:c0:6a:0b:d3:52:b9:5d:97:40:4e:8e:df:e9:8d:
7a:cd:ea:3c:a4:45:dc:18:a2:d6:6e:d0:7e:03:63:
bc:64:64:c2:86:cc:5e:be:b0:cb:38:d7:d4:91:0e:
7a:17:2f:c5:10:e6:57:76:dd:f2:e2:a8:36:ec:16:
05:2f:df:b2:13:7d:b9:6a:bf:7b:31:ad:67:e9:cd:
6a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9C:15:D2:5B:CC:B9:6A:F5:D8:EC:9E:C8:E1:DE:74:73:CF:F1:D7
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134392e3137362e302f32312d3234203d3e20323134343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.149.176.0/21
Signature Algorithm: sha256WithRSAEncryption
78:68:52:5c:47:a6:80:e5:f3:98:b6:31:c7:43:45:78:0a:ac:
ff:6a:f2:7f:01:f3:12:ca:79:fe:97:06:15:35:17:0c:5a:2f:
05:89:9b:d6:0f:55:02:70:14:23:d0:f5:fc:fe:bb:cd:a0:52:
93:b6:4d:ae:98:8e:39:55:06:08:c9:14:a4:2f:80:46:1b:d4:
3a:34:d2:87:65:ed:29:d2:69:06:8e:84:55:66:9c:ef:0a:af:
24:54:da:f3:85:61:93:1d:52:a1:da:e6:72:c0:a2:90:93:3a:
f5:b3:c4:67:a2:fc:9f:4c:fa:24:cd:a3:9e:07:4d:6c:14:19:
b3:f9:cd:52:99:68:20:ab:13:05:36:61:07:87:1d:5d:da:99:
8a:81:28:e5:6a:9f:0a:4e:a9:fa:80:79:f8:d7:98:95:f8:f2:
35:d8:6d:eb:f2:92:fa:d0:cb:1f:d5:1b:b2:12:a4:40:e7:fa:
b2:ac:79:7a:1c:d0:19:37:39:49:e9:63:75:8a:25:7a:ce:9e:
93:43:ff:3a:8c:c4:b7:58:3f:20:e1:81:72:9e:9f:72:3c:d1:
97:76:e3:bc:f3:17:af:c3:0e:8b:db:81:0d:2f:81:d8:c4:ee:
c5:de:ca:c2:04:78:f7:25:ee:65:22:ea:e6:ae:70:2e:5e:a0:
73:8d:1f:5b
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIULeJlxAJQjJjQiqw1Vv+SiIKBY/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIxMTMzNTM3MGQ5MmI2ZTczM2UzOGE2ZmU4M2YxOTIw
YmM4NjNiNTAeFw0yNjA5MTYxNTI5NThaFw0yNzA5MTUxNTM0NThaMDMxMTAvBgNV
BAMTKDg2OUMxNUQyNUJDQ0I5NkFGNUQ4RUM5RUM4RTFERTc0NzNDRkYxRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ObmqIEW+s3BXm8XgRhQnYNvG
NgAwHDdm1LEshhD1lpwanz1xna/cj47K+/IDR741+lrFvHbaEhYb1gUlVGge/eTC
vJBt4c9JaaKX2CfmoPNROFMhWyK1dfFIIvouGZlTrztoctSQzWTHishDBHIBvSGz
SuCgeXi4QguUYi7TVosFKQtOKv62Bi5Yk/BAImz8JZ+pXxRPajpgUrdWScee31TO
EcK0bZWqAJkhpkn9Qz1p+AzAagvTUrldl0BOjt/pjXrN6jykRdwYotZu0H4DY7xk
ZMKGzF6+sMs419SRDnoXL8UQ5ld23fLiqDbsFgUv37ITfblqv3sxrWfpzWq9AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUhpwV0lvMuWr12OyeyOHedHPP8dcwHwYDVR0j
BBgwFoAUAhEzU3DZK25zPjim/oPxkgvIY7UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYtMjkzMC00MDA3LWJkNmEtYmFmZjUxNjlh
NjNmLzAvMDIxMTMzNTM3MEQ5MkI2RTczM0UzOEE2RkU4M0YxOTIwQkM4NjNCNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0FoRXpVM0RaSzI1elBqaW1fb1B4a2d2
SVk3VS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYt
MjkzMC00MDA3LWJkNmEtYmFmZjUxNjlhNjNmLzAvMzIzMDMwMmUzMTM0MzkyZTMx
MzczNjJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMyMzEzNDM0MzMzMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA8iVsDANBgkqhkiG9w0BAQsFAAOCAQEAeGhSXEemgOXzmLYxx0NFeAqs/2ry
fwHzEsp5/pcGFTUXDFovBYmb1g9VAnAUI9D1/P67zaBSk7ZNrpiOOVUGCMkUpC+A
RhvUOjTSh2XtKdJpBo6EVWac7wqvJFTa84Vhkx1SodrmcsCikJM69bPEZ6L8n0z6
JM2jngdNbBQZs/nNUploIKsTBTZhB4cdXdqZioEo5WqfCk6p+oB5+NeYlfjyNdht
6/KS+tDLH9UbshKkQOf6sqx5ehzQGTc5SeljdYoles6ek0P/OozEt1g/IOGBcp6f
cjzRl3bjvPMXr8MOi9uBDS+B2MTuxd7KwgR49yXuZSLq5q5wLl6gc40fWw==
-----END CERTIFICATE-----
Generated at Sat Sep 19 02:58:01 2026 by rpki-client