Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230312e32342e3233332e302f32342d3234203d3e20343032383636.roa
File: 3230312e32342e3233332e302f32342d3234203d3e20343032383636.roa (raw, json)
Hash identifier: sJzK1GmwqKGbS4fQGhwpeZ5Wv0EZxFrDS00cslc1GRY=
Subject key identifier: 3C:7E:AD:16:C7:68:6E:6B:B1:C4:F6:C4:37:FD:E7:6C:A8:4B:F9:36
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 5167EBBA711A039F0A071C4AC5A67F621B40D935
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230312e32342e3233332e302f32342d3234203d3e20343032383636.roa
Signing time: Thu 17 Sep 2026 04:11:56 +0000
ROA not before: Thu 17 Sep 2026 04:06:56 +0000
ROA not after: Thu 16 Sep 2027 04:11:56 +0000
asID: 402866
IP address blocks: 201.24.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 20:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:67:eb:ba:71:1a:03:9f:0a:07:1c:4a:c5:a6:7f:62:1b:40:d9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 17 04:06:56 2026 GMT
Not After : Sep 16 04:11:56 2027 GMT
Subject: CN=3C7EAD16C7686E6BB1C4F6C437FDE76CA84BF936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:90:fa:2a:24:8a:35:c9:fb:7a:17:f9:95:
01:b2:33:e7:ca:74:b5:7e:94:98:e5:48:cb:8c:a8:
43:75:f9:32:ed:42:b9:10:2e:f6:16:16:b0:41:16:
f4:a5:32:42:5f:17:fb:3f:b3:7e:10:c1:37:1f:26:
51:66:37:55:5d:09:f3:fe:65:4a:fc:54:68:88:ee:
95:c3:ed:fc:d8:73:e7:86:80:8a:6c:da:5c:7d:c0:
ea:9a:cd:67:ab:b4:ab:0a:39:c4:17:cb:d6:1c:b7:
b6:f3:a7:09:3d:49:8d:e9:11:d2:2a:95:9f:45:18:
8b:0d:20:66:a0:00:6a:ef:f0:cb:41:6b:d4:49:a2:
b4:1d:75:24:af:82:7d:c4:25:f7:77:fe:26:15:22:
6f:85:8f:11:6f:1e:3d:d0:f4:19:3b:ce:dd:5e:e8:
45:1f:3a:26:f7:13:26:fd:ee:0e:96:1d:28:18:b9:
ea:a0:c9:54:38:96:50:0e:1c:cc:15:9b:3f:3c:ac:
be:b3:63:e3:28:52:8f:16:70:4d:fa:e1:81:ee:ef:
a4:55:9e:33:15:39:9f:b7:06:e0:5a:f9:aa:c6:69:
30:20:57:56:3e:5d:74:7d:d1:fc:72:16:42:4f:c8:
02:10:a5:9a:ed:d4:d5:33:5f:1f:9a:dd:7c:88:d1:
f1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7E:AD:16:C7:68:6E:6B:B1:C4:F6:C4:37:FD:E7:6C:A8:4B:F9:36
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230312e32342e3233332e302f32342d3234203d3e20343032383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.24.233.0/24
Signature Algorithm: sha256WithRSAEncryption
29:e8:b7:9e:f3:a7:67:e5:49:e3:17:f9:d6:f4:c6:38:18:e6:
13:d4:a2:dc:c3:93:39:e0:5d:39:d1:58:82:98:a6:28:d1:a9:
17:5b:1b:24:36:39:6e:2f:0d:7e:f5:ef:43:01:0f:b9:f2:90:
4e:23:d9:7c:32:54:35:94:06:35:7e:51:8f:5d:73:a9:b1:19:
cd:0c:07:c9:a8:a1:13:8c:83:3d:66:12:fd:7c:e4:16:46:c8:
2d:b2:f9:87:fc:f0:de:24:61:7c:ef:fd:5e:ce:0c:e0:4b:5c:
ff:f2:1d:ca:21:c7:b7:7b:70:c9:3a:4b:e9:1f:12:14:83:47:
ff:ba:50:51:a6:a7:d2:04:14:f7:85:fa:41:96:3a:55:91:40:
fb:8b:b3:72:5e:4b:a8:8a:70:5f:e9:41:7d:7c:62:f0:05:59:
97:b3:55:02:c9:15:83:a4:a8:6e:ff:a6:c5:0b:24:d8:aa:05:
bd:7c:3d:11:f6:e2:15:aa:41:fc:f0:5d:e9:65:4c:a7:2b:04:
a9:53:9b:ea:99:c7:51:8d:d4:f8:82:ce:a2:c8:10:63:b1:31:
f5:1e:92:b1:66:0d:6f:a2:f7:c6:47:53:e4:19:d8:ef:02:63:
01:c9:b2:c3:3d:6a:fe:9c:62:3b:46:1b:60:4e:e8:ff:38:05:
8a:81:ec:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:03:37 2026 by rpki-client