Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134392e3137362e302f32312d3234203d3e2039333034.roa
File: 3230302e3134392e3137362e302f32312d3234203d3e2039333034.roa (raw, json)
Hash identifier: UgupDVYJWDuedcNAZjoidmzdBtHulecEUTy2JAn/zpU=
Subject key identifier: 89:99:34:97:C1:35:B7:33:04:11:30:0F:4C:76:8F:F8:B9:E9:76:69
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 0BE630940E2C3F4E9DA49A80B0795495AB62E9F6
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134392e3137362e302f32312d3234203d3e2039333034.roa
Signing time: Wed 16 Sep 2026 15:34:59 +0000
ROA not before: Wed 16 Sep 2026 15:29:59 +0000
ROA not after: Wed 15 Sep 2027 15:34:59 +0000
asID: 9304
IP address blocks: 200.149.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:e6:30:94:0e:2c:3f:4e:9d:a4:9a:80:b0:79:54:95:ab:62:e9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:59 2026 GMT
Not After : Sep 15 15:34:59 2027 GMT
Subject: CN=89993497C135B7330411300F4C768FF8B9E97669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d4:fe:c2:a6:a6:ce:59:9d:79:58:e7:5e:af:
61:3b:5c:51:46:f0:65:88:e6:88:ab:eb:b7:6b:04:
4e:d6:13:4e:73:06:e5:c5:95:3e:6e:61:80:28:49:
24:15:e3:79:8c:23:44:4d:95:74:5c:a3:2d:1c:8f:
19:e2:33:99:39:d0:7e:6f:d6:72:4d:bf:d5:62:21:
75:bf:f4:84:23:be:64:b2:8c:d4:1f:02:19:c5:2b:
50:20:5d:93:e3:d3:d7:4f:28:68:c7:d9:99:23:70:
44:93:23:4a:f2:ad:13:6e:63:4e:bf:4b:e6:30:27:
6d:9f:87:7f:95:f9:99:cd:32:b6:79:d7:de:be:21:
5e:5f:69:5a:40:3a:4e:39:95:34:b2:f1:15:7a:5b:
8e:4d:61:83:a1:36:c1:c9:3e:c0:89:69:09:08:ab:
ae:96:f5:98:cf:dc:05:da:4e:84:ef:af:6a:f4:16:
a3:78:b0:c1:74:26:3c:3c:6c:47:dd:ed:1f:20:5b:
22:3a:b4:21:c7:ee:59:74:31:ad:e4:ee:d1:56:41:
58:c2:7b:b5:93:20:41:83:fe:da:9e:00:1a:87:2e:
d4:b7:fa:3e:26:63:78:b3:72:48:98:50:90:85:cb:
85:bc:c9:d6:37:18:2b:0b:a4:f8:50:76:bf:48:b5:
97:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:99:34:97:C1:35:B7:33:04:11:30:0F:4C:76:8F:F8:B9:E9:76:69
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134392e3137362e302f32312d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.149.176.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:31:27:b0:00:32:72:86:f2:df:af:45:ab:42:db:10:40:ae:
11:05:cf:b6:90:81:de:e4:b8:60:16:77:2a:55:e9:92:81:68:
20:7b:b9:cc:b9:cd:a4:e6:56:f2:ac:7a:71:6b:76:9f:60:1b:
de:6b:27:9d:aa:b5:5f:8e:fe:f9:bb:7f:9a:b9:06:09:ba:e8:
f9:fd:fe:85:1b:74:d4:6b:0a:7e:04:ce:e0:c9:5b:9d:8e:5d:
38:45:2f:6f:16:ba:c2:f0:24:d3:94:8b:a4:53:a4:6d:59:7c:
54:9b:ce:3c:db:fc:e2:89:5d:ee:d1:c3:c4:90:89:1d:78:78:
e5:2e:c6:fd:8e:b9:46:4b:d5:0b:1c:ad:b8:85:ab:64:18:f9:
c6:02:cd:81:8b:f0:26:1e:bb:5e:b8:3a:fb:42:1b:9a:47:48:
08:9e:45:96:3c:fd:e7:a1:ec:ca:9b:81:3c:19:b0:4f:5b:c4:
0a:e1:19:88:1a:c9:a7:37:cd:bc:cd:48:8d:a0:6a:e3:f3:c9:
6e:51:30:c7:17:fd:cc:a1:fc:8f:5e:f1:54:7d:21:c0:bf:5d:
44:0c:fe:83:15:67:c9:51:50:c6:1e:b1:db:6d:30:0b:76:c0:
63:78:1c:5a:28:62:ce:f6:02:cd:27:09:71:42:00:73:d8:8e:
16:d4:30:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:16 2026 by rpki-client