Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3138302e3136302e302f32312d3234203d3e203336353330.roa
File: 3230302e3138302e3136302e302f32312d3234203d3e203336353330.roa (raw, json)
Hash identifier: 9gFp7L4EVR2AOnCZNx3rjlrEioLeoEoqktUxPRG+wjI=
Subject key identifier: 4E:43:39:6B:51:C9:03:21:F8:91:34:D2:7F:ED:67:18:C7:70:DD:E5
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 1BA578FB9193F42229DFCE129F21D0A64C6F58C8
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3138302e3136302e302f32312d3234203d3e203336353330.roa
Signing time: Wed 16 Sep 2026 15:35:01 +0000
ROA not before: Wed 16 Sep 2026 15:30:01 +0000
ROA not after: Wed 15 Sep 2027 15:35:01 +0000
asID: 36530
IP address blocks: 200.180.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:a5:78:fb:91:93:f4:22:29:df:ce:12:9f:21:d0:a6:4c:6f:58:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:01 2026 GMT
Not After : Sep 15 15:35:01 2027 GMT
Subject: CN=4E43396B51C90321F89134D27FED6718C770DDE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dd:ad:36:0b:63:28:11:a5:1f:39:02:b4:db:
45:f6:97:f5:b9:4a:99:f1:bb:c4:d6:f8:2f:00:99:
53:4a:a0:b4:2f:50:1e:81:28:48:43:e0:aa:af:79:
2e:3c:ad:c4:9e:46:ce:f9:90:df:dd:3d:ae:49:f2:
d3:45:9e:cf:15:10:38:8b:c7:8b:c5:5c:a2:01:67:
ea:2a:81:d7:71:a2:39:3c:e1:f5:b3:a1:a9:51:f3:
71:8d:78:70:2f:4f:de:7e:9d:3d:fb:88:0e:3f:61:
1d:5a:86:e8:47:92:75:52:40:02:0e:15:c7:70:f9:
97:08:7b:af:15:d8:64:b5:2d:55:bd:ed:d8:7d:a2:
0e:08:ef:13:02:ce:6a:0e:15:b7:16:b3:29:ee:35:
57:80:04:89:0e:5b:b2:95:0c:6e:6d:af:ee:73:5f:
c8:b7:4f:fc:a1:93:f7:aa:a5:26:6c:ee:cf:a2:08:
1c:27:d8:40:a5:b6:36:b4:55:a2:90:28:74:21:d3:
45:91:31:cb:22:8e:bc:41:1e:50:e0:30:d2:16:26:
7b:d5:03:9b:12:97:de:55:8c:e0:09:ef:8d:ca:89:
d4:b8:80:3f:d4:48:cd:b7:14:01:6d:c3:ff:14:b1:
b8:c9:5f:ff:a5:51:2e:3f:63:45:d4:e1:bd:3d:73:
ef:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:43:39:6B:51:C9:03:21:F8:91:34:D2:7F:ED:67:18:C7:70:DD:E5
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3138302e3136302e302f32312d3234203d3e203336353330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.180.160.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:55:cd:84:2f:ea:58:ea:45:72:19:1e:13:5b:79:08:28:97:
de:55:2b:92:17:e9:7d:8b:d7:8b:53:df:8b:9a:e0:ff:b4:5e:
0f:69:b4:c8:94:60:e1:08:e6:84:3d:84:61:c4:16:58:a5:ee:
4b:19:0b:78:6d:d9:26:b5:67:7e:9a:8b:4c:d7:b7:ec:c1:86:
57:fe:3b:a7:a0:c8:4d:40:dd:f9:64:a9:04:c6:f8:91:20:c6:
c5:5a:47:35:68:d4:08:89:e0:be:e9:0a:55:53:24:fc:2a:0b:
50:be:40:b6:fe:f4:aa:32:ce:ee:6c:19:aa:b2:c6:18:1e:2d:
f1:e9:9e:58:2a:bb:1a:22:67:b6:bc:c6:49:9f:df:42:0e:6b:
34:62:32:66:32:77:e3:de:7c:c5:50:f2:b8:21:3a:df:6c:34:
eb:d8:7f:93:b0:b0:41:6d:ce:d2:a9:b3:32:10:e6:23:0d:ba:
cf:16:d8:57:6d:ef:b9:ce:2b:ac:50:6b:d0:39:9e:57:e6:22:
a9:a3:e8:fd:e6:52:42:46:41:34:28:dc:43:80:e7:06:3a:32:
52:e4:a8:8f:4e:bf:47:50:12:3a:0e:26:b3:f5:62:d0:58:58:
2d:fb:b9:6d:72:5e:5a:9c:2b:15:b7:d8:86:bb:a8:39:4e:a3:
5e:8d:f8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:56:59 2026 by rpki-client