Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230312e32342e3233342e302f32342d3234203d3e20343032383636.roa
File: 3230312e32342e3233342e302f32342d3234203d3e20343032383636.roa (raw, json)
Hash identifier: ccX5qrKYh/YkqjM7ElEriOGnnR8jkS/pCOet6DX056I=
Subject key identifier: AB:1D:56:BE:6A:64:43:9D:1E:12:B0:DB:67:E4:AC:8A:F2:61:B4:B2
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 566B563E5242E664314EDA66B4B6C39B7241C599
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230312e32342e3233342e302f32342d3234203d3e20343032383636.roa
Signing time: Thu 17 Sep 2026 05:10:48 +0000
ROA not before: Thu 17 Sep 2026 05:05:48 +0000
ROA not after: Thu 16 Sep 2027 05:10:48 +0000
asID: 402866
IP address blocks: 201.24.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:6b:56:3e:52:42:e6:64:31:4e:da:66:b4:b6:c3:9b:72:41:c5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 17 05:05:48 2026 GMT
Not After : Sep 16 05:10:48 2027 GMT
Subject: CN=AB1D56BE6A64439D1E12B0DB67E4AC8AF261B4B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:86:45:19:91:0f:91:3e:cc:65:d0:9a:fa:54:
63:ce:c8:bd:c1:76:b7:f7:af:fd:45:00:fe:08:40:
97:e8:48:62:f0:c1:bf:70:97:47:30:16:b5:07:f8:
e9:42:b9:e9:5e:10:14:c3:e4:f7:c1:08:48:07:31:
7e:94:ee:4b:f2:72:6e:df:3b:1a:f2:2d:5f:1a:cf:
ec:ba:9f:6b:99:dc:c5:dc:4f:f8:8d:0d:d4:71:24:
59:5b:40:31:33:e6:66:92:48:84:53:aa:c8:72:ce:
22:38:1c:3d:8a:18:24:55:d0:df:e1:5c:31:f5:ef:
f7:9b:d3:95:a6:9d:a5:e3:44:5f:e9:a0:1d:ef:99:
f2:03:cc:70:c4:7a:d8:43:81:4b:d1:67:6a:e4:51:
f2:02:c7:a5:6f:c8:99:27:d2:c0:41:73:30:6d:0d:
b2:7a:37:2e:6c:09:3d:a5:75:32:84:a6:3b:d9:03:
ce:99:ac:82:d8:8a:6c:13:95:7e:4a:c8:f2:e4:0e:
6f:10:79:60:a7:e2:db:96:28:58:81:51:83:57:e5:
b7:02:a8:a6:9e:0e:9d:d9:e6:be:87:2d:94:f9:02:
67:91:b4:b5:ad:1a:b4:dc:67:22:8f:cf:8b:e9:32:
35:b2:9f:41:4e:82:d2:6d:ab:1b:c9:3c:db:e7:31:
e6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1D:56:BE:6A:64:43:9D:1E:12:B0:DB:67:E4:AC:8A:F2:61:B4:B2
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230312e32342e3233342e302f32342d3234203d3e20343032383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.24.234.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:0f:97:bc:d4:04:7e:b2:d0:da:69:9f:97:c6:b5:ef:46:cf:
c6:ed:63:b9:ac:76:f6:e7:3f:f1:79:3a:d1:bb:12:89:60:9f:
e3:21:a0:6b:48:4f:47:05:62:fe:64:26:a3:3f:1e:1c:99:64:
06:f3:d2:4f:7a:6f:f7:71:1d:04:f2:0b:bd:a8:c1:67:70:97:
07:ea:7d:c7:dd:20:10:12:d1:66:aa:e3:08:15:5f:f6:aa:9e:
6f:d0:d3:f1:27:82:d0:8a:be:5e:e5:5c:b1:63:16:f8:b4:08:
63:50:35:bd:b1:7b:d6:ba:84:17:5a:c1:47:e3:0b:f4:61:ec:
60:89:4f:5d:2a:f4:60:24:11:ee:06:fb:5e:0a:f5:1e:89:79:
bd:20:3a:37:05:2a:85:16:62:dc:03:a3:a6:e4:1b:2a:28:11:
14:4b:66:53:f7:fe:1e:8f:15:2f:56:ce:91:9d:1f:1e:16:de:
83:82:34:e1:1d:c1:ea:3e:2c:97:33:d7:90:53:c6:36:42:f6:
1f:37:2c:62:20:3f:e3:43:d1:56:da:c9:d9:e4:34:9f:a2:a9:
7f:14:17:0b:e9:c9:9e:8a:5e:0c:7c:0f:24:11:41:31:58:f8:
e7:1a:7b:d1:05:8c:82:b2:78:b6:12:3d:21:97:4d:2c:71:ec:
9d:e3:bf:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:56:15 2026 by rpki-client