Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137382e302f32342d3234203d3e20313939303330.roa
File: 3130392e3131302e3137382e302f32342d3234203d3e20313939303330.roa (raw, json)
Hash identifier: ANojcIEHc3rLMLBzoOXZXbpgMJOlQj6RGOo+cSVP2hU=
Subject key identifier: 87:9D:1B:98:FA:11:68:50:CC:18:8F:AA:13:1B:81:7B:1E:21:16:15
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 2FA3250B48606A31E3690CDFD724389AF3F18CB2
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137382e302f32342d3234203d3e20313939303330.roa
Signing time: Sat 17 Oct 2026 05:20:25 +0000
ROA not before: Sat 17 Oct 2026 05:15:25 +0000
ROA not after: Sat 16 Oct 2027 05:20:25 +0000
asID: 199030
IP address blocks: 109.110.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 16:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:a3:25:0b:48:60:6a:31:e3:69:0c:df:d7:24:38:9a:f3:f1:8c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Oct 17 05:15:25 2026 GMT
Not After : Oct 16 05:20:25 2027 GMT
Subject: CN=879D1B98FA116850CC188FAA131B817B1E211615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8b:2a:e8:03:7d:a3:4a:a3:0b:77:d6:e8:14:
be:f1:4a:88:24:5b:eb:71:70:24:ab:b3:17:93:3b:
8c:51:e4:ad:ba:44:1a:b2:cd:db:01:3f:f1:2a:f3:
7d:53:0d:1f:4e:e0:67:55:2d:72:fb:69:f3:f4:77:
99:f8:98:ce:35:42:65:0a:92:ee:ba:a2:7b:ab:49:
ec:bc:32:d3:b5:e1:af:e9:4a:46:9b:a6:73:5c:32:
54:7b:31:1a:a6:2b:5b:3c:a6:36:d7:23:59:0b:64:
41:85:7f:f6:2e:ea:c3:3f:b1:58:d0:5f:cd:5f:7a:
f0:d7:eb:92:8d:db:d8:c1:1d:c0:c5:d5:89:9a:27:
6b:4b:60:35:55:3e:24:8c:d6:73:51:6f:a7:b6:49:
4a:6e:13:c0:b3:97:50:fe:38:ca:b0:fd:1d:27:53:
d4:2c:20:d0:3a:38:d1:8c:55:e8:f1:2a:4d:34:4e:
65:bd:ab:72:64:18:a7:eb:d0:c4:e7:b4:f7:fb:ae:
00:1c:4e:e4:89:74:2f:67:f3:34:32:b0:73:99:a1:
c2:e9:e1:ee:48:f8:ab:a9:61:4c:a5:9b:87:f3:df:
f3:c8:51:2d:e4:df:ea:39:83:9c:58:e8:dc:22:51:
b3:ad:02:d5:cc:78:d6:e9:6c:a2:34:55:21:e4:e4:
0b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9D:1B:98:FA:11:68:50:CC:18:8F:AA:13:1B:81:7B:1E:21:16:15
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137382e302f32342d3234203d3e20313939303330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.178.0/24
Signature Algorithm: sha256WithRSAEncryption
52:eb:6b:0e:d6:e3:05:de:b5:26:ea:3e:96:a9:cc:94:c6:c6:
27:0a:30:4b:56:90:de:0e:b8:16:e3:dd:89:ef:58:11:04:3e:
a8:e5:64:12:15:03:c5:e4:42:82:72:bc:20:ae:8f:73:71:32:
3e:b9:83:9e:4c:15:ed:de:57:b6:1e:4a:41:a6:eb:ee:f4:d5:
c7:44:df:93:43:e9:d9:75:44:f7:32:68:95:9f:90:7a:00:af:
f2:f2:6b:a9:ee:5b:02:0d:0e:23:48:20:bb:8e:93:82:ad:c9:
89:af:c2:fd:d8:33:6c:0b:13:fa:55:44:14:25:3f:1f:64:cd:
65:53:2a:97:2b:4d:88:71:0e:21:70:ca:a4:a1:d0:30:b3:ff:
2e:47:a8:f5:cb:7b:ef:1d:32:b2:b8:cb:9a:a5:cf:cd:b6:9e:
25:46:52:19:87:fe:b0:5c:1b:46:c5:60:98:48:c6:1a:cf:9f:
1a:d2:ba:ea:1d:a8:07:34:f6:0b:71:ac:a8:e6:48:6e:14:3a:
01:18:e6:27:ff:14:6d:59:e8:a6:28:6e:06:1c:30:d9:35:90:
f5:c0:0a:02:5f:85:bc:ed:95:43:63:44:2f:97:d2:7b:42:9b:
eb:14:f6:02:0c:8d:be:87:76:cf:dc:33:f6:fe:d3:ee:18:15:
d5:de:b2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:13:59 2026 by rpki-client