Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3138302e3136302e302f32312d3234203d3e20343031373736.roa
File: 3230302e3138302e3136302e302f32312d3234203d3e20343031373736.roa (raw, json)
Hash identifier: 49txmzZNLvCPr15ARV3WbmTYeadLhmZy34zOlOEzRrU=
Subject key identifier: B0:9C:ED:3A:00:4F:7E:5D:CC:3F:71:CE:2D:2A:C4:1F:77:29:42:87
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 08C0A379CD9C9FA457B469EF5634F4C425FEA37A
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3138302e3136302e302f32312d3234203d3e20343031373736.roa
Signing time: Wed 16 Sep 2026 15:34:59 +0000
ROA not before: Wed 16 Sep 2026 15:29:59 +0000
ROA not after: Wed 15 Sep 2027 15:34:59 +0000
asID: 401776
IP address blocks: 200.180.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:c0:a3:79:cd:9c:9f:a4:57:b4:69:ef:56:34:f4:c4:25:fe:a3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:59 2026 GMT
Not After : Sep 15 15:34:59 2027 GMT
Subject: CN=B09CED3A004F7E5DCC3F71CE2D2AC41F77294287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d6:38:55:57:82:22:98:50:23:38:09:3f:cf:
3b:87:07:16:02:4c:a9:07:9d:b9:3d:a2:61:ee:42:
8f:96:34:5e:83:f4:29:52:28:81:7f:72:97:91:49:
2f:8d:2b:46:01:9d:9d:be:45:55:d6:ce:c6:f1:6d:
47:b7:c3:e9:9e:1c:84:94:b7:44:64:27:1d:fa:cf:
76:01:c1:94:02:a4:eb:ee:a1:99:da:64:20:3a:db:
cd:69:9f:18:fa:a8:9a:8c:3b:61:ee:75:43:8c:13:
61:9e:f0:4d:37:14:e7:5e:b2:85:50:bd:9c:bd:28:
d1:3f:5d:da:30:e7:1a:b1:35:09:d9:a6:51:6c:ac:
f4:62:02:af:df:80:36:01:48:36:d6:92:f0:37:be:
e9:8a:38:3e:69:02:a5:8b:2b:80:3e:40:9e:2b:cc:
d3:5f:f5:9b:4e:b4:a0:31:c8:26:bf:bb:42:56:b2:
26:0c:45:ed:8c:8c:8a:12:65:46:b1:4b:fe:d8:22:
42:15:30:b0:85:71:aa:7f:1b:9f:60:e3:19:63:97:
e9:3b:d7:a7:37:ff:6e:2a:bf:0a:54:0d:ff:4f:96:
6b:27:6c:3e:60:31:f9:b7:4a:de:55:16:aa:78:d8:
61:ac:cb:e4:60:06:5d:4d:4c:c2:55:f0:8c:c3:28:
c4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9C:ED:3A:00:4F:7E:5D:CC:3F:71:CE:2D:2A:C4:1F:77:29:42:87
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3138302e3136302e302f32312d3234203d3e20343031373736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.180.160.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:54:ba:da:2a:d0:8d:79:4d:38:fb:61:3a:bc:5e:fb:cf:bf:
bb:b1:c1:d9:90:6c:09:8a:b0:bc:33:4c:73:fd:a7:49:9c:98:
33:0c:cc:f9:2c:a0:cd:ee:2d:94:87:b1:9c:60:21:4f:b7:28:
fe:f6:21:63:66:ff:59:f3:44:3e:78:5a:a2:d5:5b:22:f2:62:
c7:04:bc:d1:87:d1:c2:70:a9:e7:4a:c0:aa:a3:8d:58:59:85:
55:7d:6e:d7:b7:02:91:93:77:4a:cc:ba:11:45:19:6b:97:49:
aa:63:88:35:c1:5a:75:90:36:5e:13:b8:ad:e2:8a:4f:2a:e6:
33:59:9d:38:ad:cf:be:ae:46:12:7f:c3:1d:cc:44:65:20:2d:
88:f0:af:e8:89:95:2b:78:e5:26:d2:df:3f:09:53:30:21:fe:
7b:33:9e:d6:a6:be:15:49:56:dc:4f:d2:28:5b:64:ea:9a:6d:
a5:af:1a:42:ce:b8:63:37:29:33:9e:bb:61:0b:77:65:71:cc:
52:4e:48:2e:02:b5:1f:43:a0:f2:85:6b:39:63:c1:50:8a:47:
7f:0c:3a:72:f6:65:a1:19:f3:7b:09:79:a4:a5:49:40:45:6b:
64:bd:37:c4:98:17:0b:23:c5:83:03:25:8d:9f:07:54:6e:39:
ad:bb:c0:61
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUCMCjec2cn6RXtGnvVjT0xCX+o3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIxMTMzNTM3MGQ5MmI2ZTczM2UzOGE2ZmU4M2YxOTIw
YmM4NjNiNTAeFw0yNjA5MTYxNTI5NTlaFw0yNzA5MTUxNTM0NTlaMDMxMTAvBgNV
BAMTKEIwOUNFRDNBMDA0RjdFNURDQzNGNzFDRTJEMkFDNDFGNzcyOTQyODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY1jhVV4IimFAjOAk/zzuHBxYC
TKkHnbk9omHuQo+WNF6D9ClSKIF/cpeRSS+NK0YBnZ2+RVXWzsbxbUe3w+meHISU
t0RkJx36z3YBwZQCpOvuoZnaZCA6281pnxj6qJqMO2HudUOME2Ge8E03FOdesoVQ
vZy9KNE/Xdow5xqxNQnZplFsrPRiAq/fgDYBSDbWkvA3vumKOD5pAqWLK4A+QJ4r
zNNf9ZtOtKAxyCa/u0JWsiYMRe2MjIoSZUaxS/7YIkIVMLCFcap/G59g4xljl+k7
16c3/24qvwpUDf9PlmsnbD5gMfm3St5VFqp42GGsy+RgBl1NTMJV8IzDKMSpAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUsJztOgBPfl3MP3HOLSrEH3cpQocwHwYDVR0j
BBgwFoAUAhEzU3DZK25zPjim/oPxkgvIY7UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYtMjkzMC00MDA3LWJkNmEtYmFmZjUxNjlh
NjNmLzAvMDIxMTMzNTM3MEQ5MkI2RTczM0UzOEE2RkU4M0YxOTIwQkM4NjNCNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0FoRXpVM0RaSzI1elBqaW1fb1B4a2d2
SVk3VS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYt
MjkzMC00MDA3LWJkNmEtYmFmZjUxNjlhNjNmLzAvMzIzMDMwMmUzMTM4MzAyZTMx
MzYzMDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM0MzAzMTM3MzczNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA8i0oDANBgkqhkiG9w0BAQsFAAOCAQEAjVS62irQjXlNOPthOrxe+8+/u7HB
2ZBsCYqwvDNMc/2nSZyYMwzM+Sygze4tlIexnGAhT7co/vYhY2b/WfNEPnhaotVb
IvJixwS80YfRwnCp50rAqqONWFmFVX1u17cCkZN3Ssy6EUUZa5dJqmOINcFadZA2
XhO4reKKTyrmM1mdOK3Pvq5GEn/DHcxEZSAtiPCv6ImVK3jlJtLfPwlTMCH+ezOe
1qa+FUlW3E/SKFtk6pptpa8aQs64YzcpM567YQt3ZXHMUk5ILgK1H0Og8oVrOWPB
UIpHfww6cvZloRnzewl5pKVJQEVrZL03xJgXCyPFgwMljZ8HVG45rbvAYQ==
-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:46 2026 by rpki-client