Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137382e302f32342d3234203d3e20313532373236.roa
File: 3130392e3131302e3137382e302f32342d3234203d3e20313532373236.roa (raw, json)
Hash identifier: cSJay/IL0p3IviXMRCFqc0vXA0X1c+QDp9nhtVn0SAw=
Subject key identifier: 11:82:2D:00:BE:BD:2B:51:8B:C9:2D:A8:76:27:98:B3:92:9C:AA:B8
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 13088AB265D0DB7E5DF8CFB716281662ED7AA5C0
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137382e302f32342d3234203d3e20313532373236.roa
Signing time: Sat 17 Oct 2026 05:23:02 +0000
ROA not before: Sat 17 Oct 2026 05:18:02 +0000
ROA not after: Sat 16 Oct 2027 05:23:02 +0000
asID: 152726
IP address blocks: 109.110.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 21:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:08:8a:b2:65:d0:db:7e:5d:f8:cf:b7:16:28:16:62:ed:7a:a5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Oct 17 05:18:02 2026 GMT
Not After : Oct 16 05:23:02 2027 GMT
Subject: CN=11822D00BEBD2B518BC92DA8762798B3929CAAB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:eb:75:5d:32:2b:ba:02:e5:b9:a6:f5:fc:be:
59:fd:3b:2c:5c:5f:0c:18:1c:c0:44:2a:3b:fd:a3:
18:75:6c:48:59:0e:2f:91:73:b1:af:c5:48:3a:4a:
87:01:96:f2:1a:13:c5:d5:c8:97:0a:33:8c:0f:3b:
fb:cd:b2:b8:9f:4e:0a:e7:35:cd:ac:fd:a3:21:7a:
fd:00:1a:8b:3b:e8:29:f0:7c:92:65:14:f9:6d:35:
37:29:2b:a1:22:9b:9e:c4:4e:ec:d0:af:25:ff:fa:
f7:f6:8b:47:d1:c1:7b:b0:ea:f2:b0:ef:6e:49:1b:
64:10:3a:ba:ea:d8:c8:06:3a:88:eb:32:88:82:e8:
c6:84:f7:21:2e:6a:11:c9:5a:ef:86:16:82:0c:73:
b6:61:24:4a:1d:f5:c1:bc:e8:5e:bc:a2:e6:30:04:
a6:4d:e5:8d:15:eb:a9:6a:98:4f:0b:52:05:59:82:
2c:9a:6d:ab:74:e3:41:7f:e2:53:e8:fb:8f:58:32:
33:10:5f:17:53:a7:00:3e:c2:dd:65:7c:75:96:77:
ba:1b:59:86:8c:24:97:ed:07:25:31:00:07:a3:ed:
31:d1:75:b5:1c:ca:34:13:ed:18:00:33:d4:5d:17:
8b:aa:8d:20:b7:73:1a:0d:06:3f:c5:c5:7d:ba:48:
ff:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:82:2D:00:BE:BD:2B:51:8B:C9:2D:A8:76:27:98:B3:92:9C:AA:B8
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137382e302f32342d3234203d3e20313532373236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.178.0/24
Signature Algorithm: sha256WithRSAEncryption
55:f5:08:c7:23:f0:63:85:ac:e5:80:c4:de:da:ca:3e:ef:ec:
f6:91:02:d5:26:51:c3:9f:e0:d4:eb:a9:3c:ec:a4:52:d3:34:
b2:94:91:63:99:8b:ad:8b:b5:e7:84:96:8d:88:bb:14:dd:aa:
bf:aa:ec:d4:e0:48:b2:fa:06:88:0e:8f:45:11:75:4e:ab:08:
6f:78:25:0f:4e:6a:89:61:a5:b8:67:30:7d:b7:ee:22:d7:31:
5d:88:89:b3:81:0a:b8:d4:67:69:69:69:09:5c:c1:f8:ba:01:
a6:ba:f6:98:e1:a0:f9:76:af:55:6a:dd:c8:7a:ef:2a:5a:f6:
67:a1:c6:fa:55:2a:4f:be:b6:3a:2e:22:52:97:e9:79:44:2f:
26:5c:df:b4:9c:f3:be:af:c5:8b:9c:e9:5d:79:7c:00:1b:f0:
4c:9b:fd:77:d4:69:39:89:0e:ef:4d:1b:10:2e:a6:98:89:32:
7a:be:74:b4:38:3e:04:19:89:2f:24:96:a6:8b:05:73:66:b7:
56:e4:71:99:29:dc:e8:51:b9:53:04:61:94:02:c1:95:4b:61:
d4:e9:96:1c:d4:12:d2:7b:1c:53:6a:ae:ba:94:48:c9:03:19:
ea:24:07:98:a9:9b:35:e5:bc:7e:ef:b5:b9:38:48:3f:c4:16:
d6:3d:70:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:42:05 2026 by rpki-client