Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3138302e3136302e302f32312d3234203d3e20343032363238.roa
File: 3230302e3138302e3136302e302f32312d3234203d3e20343032363238.roa (raw, json)
Hash identifier: VX52D13T3rJk+Y+H+h/oenE4mh7mWRd72nOjMprbcBw=
Subject key identifier: 84:BE:05:51:A4:E7:DF:34:3F:1D:29:D9:7A:93:20:A8:A5:17:7A:6B
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 03F5621DF8CD9AD9AE2EC2F0EE0CCB493A719FC1
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3138302e3136302e302f32312d3234203d3e20343032363238.roa
Signing time: Wed 16 Sep 2026 15:35:00 +0000
ROA not before: Wed 16 Sep 2026 15:30:00 +0000
ROA not after: Wed 15 Sep 2027 15:35:00 +0000
asID: 402628
IP address blocks: 200.180.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:f5:62:1d:f8:cd:9a:d9:ae:2e:c2:f0:ee:0c:cb:49:3a:71:9f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:00 2026 GMT
Not After : Sep 15 15:35:00 2027 GMT
Subject: CN=84BE0551A4E7DF343F1D29D97A9320A8A5177A6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:be:7f:ee:7a:e5:16:c8:55:0c:1b:c2:96:80:
31:6c:09:92:1c:2e:d3:af:5c:41:0b:4b:41:c8:64:
04:e0:86:bd:9c:81:da:80:bb:8c:bc:3c:da:65:80:
96:b7:27:46:49:07:c6:cc:63:b5:9f:ce:99:36:8d:
1b:db:39:83:eb:7b:88:52:6d:83:88:eb:ab:c9:5a:
28:98:15:5a:2b:f1:3b:5c:76:aa:f2:3f:4b:e6:85:
6f:4c:c6:17:e9:ce:65:35:db:3c:6f:21:64:2f:4f:
55:49:25:b8:03:80:02:71:23:f4:da:f3:8a:7a:c8:
84:97:85:17:4b:a6:5c:2c:17:01:8f:b6:36:6e:8d:
3e:54:dc:15:61:cd:60:6f:b3:a2:72:da:9a:a1:7e:
fc:97:6d:a9:7c:96:7e:8f:1b:92:6b:7f:80:95:03:
95:c5:6b:3d:84:af:8c:79:16:77:cf:f0:44:00:d3:
9f:7e:b4:ae:10:3a:ef:07:3a:f9:4c:06:e5:38:92:
1b:2f:da:78:cc:4c:70:2b:53:ae:34:a8:1d:bd:cb:
db:05:ca:18:6c:bb:aa:f8:b9:f0:a9:de:f1:e0:fe:
4d:89:bf:00:c8:ed:62:e1:7d:df:43:77:74:98:1f:
ba:1a:00:c7:d9:ab:00:c2:d5:ae:a4:33:9c:31:f4:
ec:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BE:05:51:A4:E7:DF:34:3F:1D:29:D9:7A:93:20:A8:A5:17:7A:6B
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3138302e3136302e302f32312d3234203d3e20343032363238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.180.160.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:19:88:47:03:e6:55:bc:dc:f6:76:4b:ef:13:e7:7c:72:df:
13:89:81:33:6c:dd:8f:30:55:a9:ad:36:be:8b:74:4a:cc:4d:
a6:39:7b:b1:a5:87:f4:c2:2e:0a:55:dd:b5:10:5e:93:6b:2a:
ed:e1:5a:f0:65:60:d5:ff:a8:5a:86:5a:c2:97:81:69:5a:be:
a9:ed:b0:51:6b:91:fb:4a:7c:06:90:80:6b:d2:a7:f2:9b:2d:
fa:42:b4:75:72:14:d3:ad:10:1d:d6:af:c6:2f:1d:2d:e9:a1:
eb:db:58:a6:2d:ab:54:23:fb:2d:d9:78:b4:fc:aa:4c:5a:be:
61:78:c9:34:cf:35:60:e6:f3:32:7d:db:c7:7e:81:80:69:5f:
05:a9:33:e2:97:ce:c3:a9:0e:71:9b:dd:66:47:a2:85:49:9f:
2a:81:49:85:3a:ac:d2:5a:de:75:26:8c:46:d7:dd:fa:3e:8c:
ec:a7:0f:6e:2e:fb:0e:70:8a:db:62:4c:e2:2e:58:d3:64:ab:
50:03:1e:09:bb:97:c0:04:cd:e9:04:c0:51:ee:cf:be:90:c0:
10:2e:e2:00:c4:61:9d:65:81:ee:22:fd:34:21:fb:8b:e8:2f:
20:15:7a:0d:c2:f7:12:59:64:f3:7e:7d:0d:01:76:5e:62:f5:
f2:e6:6e:5b
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUA/ViHfjNmtmuLsLw7gzLSTpxn8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIxMTMzNTM3MGQ5MmI2ZTczM2UzOGE2ZmU4M2YxOTIw
YmM4NjNiNTAeFw0yNjA5MTYxNTMwMDBaFw0yNzA5MTUxNTM1MDBaMDMxMTAvBgNV
BAMTKDg0QkUwNTUxQTRFN0RGMzQzRjFEMjlEOTdBOTMyMEE4QTUxNzdBNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfvn/ueuUWyFUMG8KWgDFsCZIc
LtOvXEELS0HIZATghr2cgdqAu4y8PNplgJa3J0ZJB8bMY7Wfzpk2jRvbOYPre4hS
bYOI66vJWiiYFVor8TtcdqryP0vmhW9MxhfpzmU12zxvIWQvT1VJJbgDgAJxI/Ta
84p6yISXhRdLplwsFwGPtjZujT5U3BVhzWBvs6Jy2pqhfvyXbal8ln6PG5Jrf4CV
A5XFaz2Er4x5FnfP8EQA059+tK4QOu8HOvlMBuU4khsv2njMTHArU640qB29y9sF
yhhsu6r4ufCp3vHg/k2JvwDI7WLhfd9Dd3SYH7oaAMfZqwDC1a6kM5wx9OyZAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUhL4FUaTn3zQ/HSnZepMgqKUXemswHwYDVR0j
BBgwFoAUAhEzU3DZK25zPjim/oPxkgvIY7UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYtMjkzMC00MDA3LWJkNmEtYmFmZjUxNjlh
NjNmLzAvMDIxMTMzNTM3MEQ5MkI2RTczM0UzOEE2RkU4M0YxOTIwQkM4NjNCNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0FoRXpVM0RaSzI1elBqaW1fb1B4a2d2
SVk3VS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYt
MjkzMC00MDA3LWJkNmEtYmFmZjUxNjlhNjNmLzAvMzIzMDMwMmUzMTM4MzAyZTMx
MzYzMDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM0MzAzMjM2MzIzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA8i0oDANBgkqhkiG9w0BAQsFAAOCAQEALhmIRwPmVbzc9nZL7xPnfHLfE4mB
M2zdjzBVqa02vot0SsxNpjl7saWH9MIuClXdtRBek2sq7eFa8GVg1f+oWoZawpeB
aVq+qe2wUWuR+0p8BpCAa9Kn8pst+kK0dXIU060QHdavxi8dLemh69tYpi2rVCP7
Ldl4tPyqTFq+YXjJNM81YObzMn3bx36BgGlfBakz4pfOw6kOcZvdZkeihUmfKoFJ
hTqs0lredSaMRtfd+j6M7KcPbi77DnCK22JM4i5Y02SrUAMeCbuXwATN6QTAUe7P
vpDAEC7iAMRhnWWB7iL9NCH7i+gvIBV6DcL3Ellk8359DQF2XmL18uZuWw==
-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:44 2026 by rpki-client