Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3138302e3136302e302f32312d3234203d3e20313939343336.roa
File: 3230302e3138302e3136302e302f32312d3234203d3e20313939343336.roa (raw, json)
Hash identifier: 6VlSy78EXLts3m52KdfH1bvFr0WCFgj7yOOFdiifcTE=
Subject key identifier: C1:86:56:6F:A0:15:A8:03:C6:2E:5A:C7:AC:35:84:1A:0B:1B:EA:57
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 513CB45DFCCE78C6C0AFC259A434AC5A43D1FB85
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3138302e3136302e302f32312d3234203d3e20313939343336.roa
Signing time: Wed 16 Sep 2026 15:35:00 +0000
ROA not before: Wed 16 Sep 2026 15:30:00 +0000
ROA not after: Wed 15 Sep 2027 15:35:00 +0000
asID: 199436
IP address blocks: 200.180.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:3c:b4:5d:fc:ce:78:c6:c0:af:c2:59:a4:34:ac:5a:43:d1:fb:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:00 2026 GMT
Not After : Sep 15 15:35:00 2027 GMT
Subject: CN=C186566FA015A803C62E5AC7AC35841A0B1BEA57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:99:12:00:6d:87:9f:54:87:15:25:e6:ba:cd:
2b:ca:df:83:b1:ff:c5:e0:50:4f:ef:0a:b1:ae:fb:
20:72:5b:6b:b2:90:c6:81:3a:f3:c4:d3:8f:15:76:
e8:79:b4:06:e6:a9:ba:fb:04:57:f9:c9:70:99:4f:
ef:91:c7:e7:08:83:0c:7d:a7:be:f5:55:b4:62:df:
5a:c9:19:60:3d:e2:3f:a4:4b:6c:8e:18:93:b6:88:
29:b3:fe:c6:25:9c:bc:05:ac:1c:a0:cb:72:e4:ef:
5e:a6:78:f7:b7:cf:11:7e:4f:4f:1f:07:f1:b0:d4:
19:28:58:fd:24:91:2b:e7:e9:64:13:46:6e:48:0b:
45:e3:ba:51:9f:ad:86:27:80:96:a5:55:57:37:73:
63:e0:66:4c:0c:99:ee:8c:c3:54:a1:7e:4b:e1:7c:
89:85:e3:ec:aa:24:4d:7b:b6:5a:1c:0e:76:92:2c:
32:c2:b0:93:bf:8d:fa:bf:2b:5a:ae:83:ae:16:b1:
7f:b7:70:52:94:07:d5:7a:95:3c:68:b3:40:b3:d4:
15:40:70:08:9e:31:bc:12:99:c7:c9:66:de:5e:d7:
3c:85:2f:84:10:b8:d1:92:e5:75:f8:99:14:36:eb:
66:52:b5:3a:a5:81:bb:65:93:15:72:e4:75:b5:fd:
fc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:86:56:6F:A0:15:A8:03:C6:2E:5A:C7:AC:35:84:1A:0B:1B:EA:57
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3138302e3136302e302f32312d3234203d3e20313939343336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.180.160.0/21
Signature Algorithm: sha256WithRSAEncryption
74:c6:75:6c:46:f5:77:a5:80:ce:58:7b:cb:4d:a3:fc:69:0c:
55:ff:a6:0c:53:dc:56:74:1c:70:ec:36:2c:fb:9a:4f:aa:a1:
8e:6c:70:ba:0a:f0:9f:32:e4:42:c4:a8:3f:12:63:69:f8:db:
53:67:0e:e2:8a:c0:2e:48:24:66:bb:c9:e9:3c:66:ec:c5:0d:
67:85:d6:42:49:fc:80:da:c6:c8:88:d5:c1:36:e6:f1:2e:e3:
72:6b:10:62:b4:a6:76:d3:85:78:12:aa:7f:64:0a:08:1d:ab:
12:da:ea:2e:54:ac:5c:85:e5:14:7e:ae:50:d7:43:b1:89:ba:
b7:f2:a7:94:0e:11:e2:18:d0:be:7f:fd:25:42:89:67:3f:cc:
9b:84:7f:47:b3:57:42:8f:42:18:6e:11:ef:50:43:07:8a:c9:
3d:e7:34:70:59:5f:8e:25:a1:f4:af:06:3a:d6:57:10:89:81:
82:d8:ac:36:f5:cc:c2:84:40:93:30:3d:dd:b5:fa:c1:10:42:
a6:fe:cc:2d:a1:e6:35:59:02:28:fd:04:47:c8:32:ee:9b:89:
8c:94:b0:e8:e7:fb:e7:90:c5:f1:4a:56:8f:af:c4:5d:a3:86:
5e:aa:f2:3c:74:5a:de:99:d6:87:02:e7:6a:b0:2d:22:5a:71:
5e:4c:96:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:35 2026 by rpki-client