Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3138302e3136302e302f32312d3234203d3e20323135303233.roa
File: 3230302e3138302e3136302e302f32312d3234203d3e20323135303233.roa (raw, json)
Hash identifier: JgQLWhOybdMoYCTT8Z4Dr3ScDMDO1QSUBy27ch6mucg=
Subject key identifier: A6:9F:69:09:4C:17:49:D8:4A:D3:87:1F:6B:F8:4D:90:30:CD:3A:D9
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 1A53F9D09D772BD91156D33A58C388D6BC52F3E6
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3138302e3136302e302f32312d3234203d3e20323135303233.roa
Signing time: Wed 16 Sep 2026 15:34:58 +0000
ROA not before: Wed 16 Sep 2026 15:29:58 +0000
ROA not after: Wed 15 Sep 2027 15:34:58 +0000
asID: 215023
IP address blocks: 200.180.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:53:f9:d0:9d:77:2b:d9:11:56:d3:3a:58:c3:88:d6:bc:52:f3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:58 2026 GMT
Not After : Sep 15 15:34:58 2027 GMT
Subject: CN=A69F69094C1749D84AD3871F6BF84D9030CD3AD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8a:97:53:cb:bd:77:7c:e4:bd:87:a4:06:be:
85:63:c9:02:5d:8c:b4:e5:88:79:37:18:44:e0:5b:
c3:23:6a:8e:de:84:dc:94:da:21:ba:6c:45:32:6e:
16:f9:c0:eb:c9:c2:85:86:44:5e:9c:78:f1:5e:9f:
ca:b5:40:ae:ba:f1:eb:e0:01:fa:ca:14:d3:de:7f:
04:08:cb:ff:4e:b3:4e:ab:7d:36:7b:75:b2:98:fb:
cf:28:03:fb:0d:de:7c:16:0b:3e:d8:c2:51:84:49:
f8:e5:72:91:81:a3:4b:8d:6e:95:60:e2:e1:a8:7f:
d3:35:a6:a5:61:1b:97:70:5e:8d:27:3e:7f:3e:49:
9a:62:99:de:62:f7:c2:63:87:ef:11:32:c7:6f:e6:
a0:f0:91:2e:00:06:53:27:b9:0c:4b:5e:1e:08:29:
a2:7d:c1:f0:98:99:d8:ac:0a:74:fa:6f:cb:e5:18:
8b:73:4b:0f:5a:2e:46:1e:71:ca:7c:5a:d6:b4:1e:
06:dd:12:53:91:f9:87:df:65:b2:bb:49:f4:01:86:
2a:f9:53:13:9a:30:35:5f:db:f9:01:81:7f:02:3c:
43:ee:d2:05:49:85:dc:93:9a:87:6a:78:e5:39:e9:
f3:21:22:8c:32:9e:43:6c:af:6c:11:d2:81:d9:39:
b2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9F:69:09:4C:17:49:D8:4A:D3:87:1F:6B:F8:4D:90:30:CD:3A:D9
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3138302e3136302e302f32312d3234203d3e20323135303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.180.160.0/21
Signature Algorithm: sha256WithRSAEncryption
a7:dd:02:d6:87:bf:75:19:53:e4:f2:87:f3:52:46:7f:3e:a7:
09:1f:26:48:81:07:93:fa:68:2d:51:93:9b:69:85:81:65:80:
83:4f:09:ce:01:02:ba:14:24:86:ab:a5:2b:e3:05:eb:ea:ae:
38:d1:65:46:1f:d3:e3:8e:72:e2:81:bc:f1:c0:e2:f3:8d:94:
91:47:c7:3b:79:3c:5f:cb:66:99:50:06:6b:45:07:29:2e:65:
68:86:b8:52:79:03:c4:35:bd:fb:68:56:66:63:0f:5d:db:0a:
44:03:eb:7e:bf:05:2e:a4:cf:b6:98:ab:d1:3c:99:b0:d3:93:
c2:75:0e:48:fa:42:c3:2a:76:9e:4c:b8:ff:35:88:f9:b6:49:
1c:ff:aa:e1:9a:f5:0e:90:8f:b5:53:e0:ba:8b:a9:63:ae:cf:
ed:05:81:c3:8b:74:61:29:48:a9:39:55:6a:e1:d7:34:a8:9e:
e1:c9:d3:c2:f6:f7:ae:9f:6e:06:59:8c:03:3a:12:2c:de:09:
9f:9c:ec:5d:94:0a:ea:8b:55:ee:35:15:29:d5:91:63:5d:fb:
91:2b:30:1f:f6:6e:fd:45:47:de:b6:44:55:72:db:29:73:9a:
47:6d:e3:05:6f:67:ae:6b:00:2f:cc:45:cb:42:d8:36:d7:9c:
0f:36:67:c7
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUGlP50J13K9kRVtM6WMOI1rxS8+YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIxMTMzNTM3MGQ5MmI2ZTczM2UzOGE2ZmU4M2YxOTIw
YmM4NjNiNTAeFw0yNjA5MTYxNTI5NThaFw0yNzA5MTUxNTM0NThaMDMxMTAvBgNV
BAMTKEE2OUY2OTA5NEMxNzQ5RDg0QUQzODcxRjZCRjg0RDkwMzBDRDNBRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTipdTy713fOS9h6QGvoVjyQJd
jLTliHk3GETgW8Mjao7ehNyU2iG6bEUybhb5wOvJwoWGRF6cePFen8q1QK668evg
AfrKFNPefwQIy/9Os06rfTZ7dbKY+88oA/sN3nwWCz7YwlGESfjlcpGBo0uNbpVg
4uGof9M1pqVhG5dwXo0nPn8+SZpimd5i98Jjh+8RMsdv5qDwkS4ABlMnuQxLXh4I
KaJ9wfCYmdisCnT6b8vlGItzSw9aLkYeccp8Wta0HgbdElOR+YffZbK7SfQBhir5
UxOaMDVf2/kBgX8CPEPu0gVJhdyTmodqeOU56fMhIowynkNsr2wR0oHZObJTAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUpp9pCUwXSdhK04cfa/hNkDDNOtkwHwYDVR0j
BBgwFoAUAhEzU3DZK25zPjim/oPxkgvIY7UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYtMjkzMC00MDA3LWJkNmEtYmFmZjUxNjlh
NjNmLzAvMDIxMTMzNTM3MEQ5MkI2RTczM0UzOEE2RkU4M0YxOTIwQkM4NjNCNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0FoRXpVM0RaSzI1elBqaW1fb1B4a2d2
SVk3VS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYt
MjkzMC00MDA3LWJkNmEtYmFmZjUxNjlhNjNmLzAvMzIzMDMwMmUzMTM4MzAyZTMx
MzYzMDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMyMzEzNTMwMzIzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA8i0oDANBgkqhkiG9w0BAQsFAAOCAQEAp90C1oe/dRlT5PKH81JGfz6nCR8m
SIEHk/poLVGTm2mFgWWAg08JzgECuhQkhqulK+MF6+quONFlRh/T445y4oG88cDi
842UkUfHO3k8X8tmmVAGa0UHKS5laIa4UnkDxDW9+2hWZmMPXdsKRAPrfr8FLqTP
tpir0TyZsNOTwnUOSPpCwyp2nky4/zWI+bZJHP+q4Zr1DpCPtVPguoupY67P7QWB
w4t0YSlIqTlVauHXNKie4cnTwvb3rp9uBlmMAzoSLN4Jn5zsXZQK6otV7jUVKdWR
Y137kSswH/Zu/UVH3rZEVXLbKXOaR23jBW9nrmsAL8xFy0LYNtecDzZnxw==
-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:54 2026 by rpki-client