Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230312e32342e3232342e302f32312d3234203d3e20383334.roa
File: 3230312e32342e3232342e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: NMIITU7JPPN7Yq0wjiJzFYWMHoQCHs4lD2eWxbbWik4=
Subject key identifier: 3B:5B:F7:ED:F6:6B:28:05:90:EB:82:BE:38:2B:63:21:E9:1C:EB:1B
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 5F33DF8C7A971B2CE16D51D2876EAB1F8175A5EC
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230312e32342e3232342e302f32312d3234203d3e20383334.roa
Signing time: Wed 16 Sep 2026 15:34:58 +0000
ROA not before: Wed 16 Sep 2026 15:29:58 +0000
ROA not after: Wed 15 Sep 2027 15:34:58 +0000
asID: 834
IP address blocks: 201.24.224.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:33:df:8c:7a:97:1b:2c:e1:6d:51:d2:87:6e:ab:1f:81:75:a5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:58 2026 GMT
Not After : Sep 15 15:34:58 2027 GMT
Subject: CN=3B5BF7EDF66B280590EB82BE382B6321E91CEB1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9d:05:03:05:62:89:db:6c:4f:54:3a:60:c6:
32:97:3d:41:d7:67:77:d0:9d:6e:6c:92:62:18:3b:
29:0e:b7:e0:75:cb:81:56:1f:1c:f2:ee:58:62:af:
1f:79:94:fd:7d:87:d8:cc:20:1a:2b:99:d3:7e:97:
f0:c3:0f:f5:32:c2:82:fb:f3:5f:47:1d:a8:44:cc:
b1:93:b9:3c:18:85:a9:57:e0:05:ee:b5:29:19:62:
4b:be:94:00:4a:ce:db:91:0a:6b:ae:7a:7a:c3:1a:
89:59:52:ac:a2:35:ba:3d:dd:80:b8:d5:cd:12:70:
79:9d:c4:60:7e:88:65:70:b9:4c:7d:a4:80:d7:f0:
73:73:19:9c:e8:b0:8d:13:ce:d0:0d:e1:c9:5d:9e:
72:95:f0:06:d7:76:09:2a:4d:65:a9:f5:a1:0d:4b:
be:dc:94:aa:39:27:cf:f6:6e:a4:51:1e:42:f1:2a:
55:1d:6f:06:d5:25:b5:21:71:78:8f:7a:ee:80:56:
ec:82:9b:38:52:16:d8:a4:7d:49:e8:b9:3b:cb:32:
7b:f1:81:77:47:4c:7c:3b:e3:ef:86:cc:1a:f4:1e:
60:a2:f9:20:b2:16:d4:18:d0:38:58:ad:e7:3a:53:
ad:a8:dd:99:53:6f:13:49:8b:e6:74:fb:91:07:a6:
47:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5B:F7:ED:F6:6B:28:05:90:EB:82:BE:38:2B:63:21:E9:1C:EB:1B
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230312e32342e3232342e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.24.224.0/21
Signature Algorithm: sha256WithRSAEncryption
b0:d6:88:13:8f:2c:4f:58:ea:4c:83:2f:2e:8f:d2:40:6b:a4:
e1:f0:ad:36:3e:18:32:84:5e:68:78:10:f1:ce:bf:ae:61:20:
6e:d9:52:e1:54:56:ef:97:cb:fd:2a:2a:42:3f:44:60:e4:99:
02:13:ec:90:2c:5e:fd:1c:df:e7:5e:11:9d:72:7e:c8:14:53:
9c:0d:59:06:c6:7d:6b:ee:c7:92:07:42:8c:28:1e:0a:db:a9:
67:2b:d2:82:67:0c:7d:68:3d:d9:52:a2:67:bb:07:e7:e2:fc:
59:3b:2b:1a:71:7c:fc:5e:bb:3c:97:67:33:a9:fa:99:39:bc:
f2:c2:08:92:99:78:0b:b4:f3:8e:64:4c:70:2d:81:e4:ea:29:
d6:a3:bd:75:4e:66:ff:15:fb:21:c3:53:15:1c:80:56:1e:8f:
57:f5:67:7c:7c:ab:68:c8:8f:65:51:7d:c2:bf:13:62:86:20:
7b:cb:24:8c:89:23:10:b8:37:04:87:0b:21:56:87:78:a8:f3:
98:d5:ec:02:e1:6f:29:5e:99:6a:23:7f:2a:6a:2f:50:6c:27:
8f:61:c6:81:55:12:f9:ae:91:bc:d0:33:53:49:04:84:f1:e3:
c8:c6:21:15:b1:2d:31:d1:8c:d2:0e:8b:fa:ff:10:fe:04:65:
07:99:92:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:56:04 2026 by rpki-client