Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3138302e3136302e302f32312d3234203d3e20313531333331.roa
File: 3230302e3138302e3136302e302f32312d3234203d3e20313531333331.roa (raw, json)
Hash identifier: Lm1R07YGu002nCkpfGa4ICNj7dqJkFC8RKuIECKNPgw=
Subject key identifier: 3B:58:CC:AF:55:03:AE:A9:FC:F9:7F:7A:69:78:69:C9:FF:6B:EA:96
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 6E8D0415A98FE69949B6C55B07546F8666BCD65B
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3138302e3136302e302f32312d3234203d3e20313531333331.roa
Signing time: Wed 16 Sep 2026 15:34:59 +0000
ROA not before: Wed 16 Sep 2026 15:29:59 +0000
ROA not after: Wed 15 Sep 2027 15:34:59 +0000
asID: 151331
IP address blocks: 200.180.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 20:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:8d:04:15:a9:8f:e6:99:49:b6:c5:5b:07:54:6f:86:66:bc:d6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:59 2026 GMT
Not After : Sep 15 15:34:59 2027 GMT
Subject: CN=3B58CCAF5503AEA9FCF97F7A697869C9FF6BEA96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:40:7c:8e:b6:55:5c:a9:f0:73:ca:cc:89:ad:
29:ff:1d:91:61:c1:84:c8:3a:ed:de:dc:63:27:4a:
14:1e:66:7b:8f:1d:56:eb:6a:bf:da:c7:57:50:a4:
6d:56:7e:2a:b4:3b:52:9b:33:e7:01:c4:35:0b:c6:
f2:3d:e9:75:ba:01:7a:50:29:30:e5:08:fb:76:e9:
f5:94:d2:99:7e:26:3c:14:c9:08:84:8f:b1:06:5d:
6a:57:e2:8a:6c:4f:a5:26:1f:0f:db:be:c1:b8:dd:
e6:86:39:51:28:55:25:45:c3:fa:c5:cc:51:6e:f0:
1f:d4:09:84:1e:02:88:4f:2c:bc:31:1c:ab:74:e5:
04:ed:5c:84:be:a6:c8:ba:bd:d9:43:13:16:be:21:
a6:04:90:35:f3:28:cc:79:71:bd:88:bc:73:88:4c:
fb:2b:27:16:d0:c8:65:d2:5e:88:61:01:9f:ea:70:
24:73:73:90:8c:99:4d:cc:b9:11:ad:e6:7c:8a:42:
77:5e:b2:23:27:ca:d7:aa:8a:ad:40:c6:28:0d:93:
39:58:7d:da:8e:72:4d:63:a1:c7:71:91:51:e5:c5:
1b:75:ca:98:42:fd:fc:33:9d:68:89:43:6b:4d:98:
1e:66:18:71:b8:59:0c:df:99:ad:a6:71:69:fb:2a:
7c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:58:CC:AF:55:03:AE:A9:FC:F9:7F:7A:69:78:69:C9:FF:6B:EA:96
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3138302e3136302e302f32312d3234203d3e20313531333331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.180.160.0/21
Signature Algorithm: sha256WithRSAEncryption
09:81:c6:e1:bf:b3:40:a1:bd:97:3b:6b:cf:3e:ad:23:45:a2:
6b:02:5a:47:8d:2c:97:1a:d5:d9:1e:17:e6:8a:2b:58:3f:ae:
06:d2:57:73:0a:a5:73:d3:ce:f0:52:2f:f5:88:49:78:d7:ea:
77:0a:02:17:f9:72:5a:b9:09:03:aa:41:e8:ef:02:23:30:60:
ca:e2:81:49:03:bb:22:71:fb:dc:b8:f0:7f:13:f9:53:3d:c8:
c4:0e:c7:da:43:39:a3:ad:5d:87:d9:94:b1:5f:26:a2:69:ba:
b5:85:ef:01:b5:f6:e6:8e:76:9c:8a:12:fd:35:e7:bf:a5:af:
4b:21:56:46:f9:0a:94:5f:db:6f:85:ca:db:55:fc:6d:a4:1b:
6b:37:15:8f:6f:54:c4:3d:9e:cb:78:a8:11:7b:4b:b7:52:30:
62:ae:28:16:01:94:36:df:51:22:75:88:50:e6:7f:6c:c9:d4:
6a:91:62:1e:79:9e:e4:4f:2b:04:f5:ca:63:02:56:61:5a:39:
81:ed:11:b0:e1:a5:36:1c:d9:5c:b3:a3:45:a0:26:d4:da:fd:
2e:fe:79:d2:6e:02:4b:d9:52:2a:32:52:8f:99:0a:c4:dc:0c:
2a:5a:8b:40:d8:cb:6a:7b:d0:3c:a3:05:66:2e:04:02:2b:a9:
8c:78:0d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 04:01:12 2026 by rpki-client