Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138302e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3138302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: qFxIIXjpHD39srdMMoPlqIou+3YeffQPCzimJvHQpxM=
Subject key identifier: A2:11:F0:11:CE:07:2C:D6:42:D2:87:4F:32:76:57:50:AD:93:2E:F9
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 4EAA675AE405B970FF97C7779BAE4B96BAA9DFF7
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138302e302f32342d3234203d3e20383334.roa
Signing time: Sat 03 Oct 2026 00:08:18 +0000
ROA not before: Sat 03 Oct 2026 00:03:18 +0000
ROA not after: Sat 02 Oct 2027 00:08:18 +0000
asID: 834
IP address blocks: 109.110.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:aa:67:5a:e4:05:b9:70:ff:97:c7:77:9b:ae:4b:96:ba:a9:df:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Oct 3 00:03:18 2026 GMT
Not After : Oct 2 00:08:18 2027 GMT
Subject: CN=A211F011CE072CD642D2874F32765750AD932EF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fc:c5:6f:59:6f:5f:17:e6:2c:3d:77:bb:e9:
23:09:9b:67:6b:62:51:f6:83:90:7a:51:e1:79:9e:
36:d0:75:39:f7:1a:16:6e:ce:36:3a:12:b5:8d:c7:
2c:d9:34:d5:cf:2d:ad:ce:f4:c5:ea:99:c3:98:fe:
48:1c:05:98:85:85:0d:59:44:cc:19:20:08:09:84:
50:96:03:c6:55:a9:b5:48:ce:63:2d:b6:24:00:d3:
82:e1:08:07:c8:6a:0f:f9:69:81:a2:a2:00:ec:15:
6e:b2:a4:ee:ae:3e:04:d5:01:0c:42:cb:c0:1c:9d:
4d:65:24:74:e4:bd:d3:8b:18:56:43:de:39:4f:1a:
a8:ad:6f:f7:b6:52:87:02:26:12:6f:85:7c:9f:2b:
c1:72:ef:e6:12:cb:8c:e4:fe:9e:7c:67:96:65:66:
73:a8:31:d1:4c:a6:b9:6d:79:6a:cc:b1:68:ae:be:
ac:d1:65:37:8c:45:6c:fb:21:44:6b:8d:93:73:c3:
6c:85:9d:f8:53:5a:8f:42:fe:45:fc:4c:58:df:6f:
13:12:f8:8f:3d:ed:b1:1e:86:2b:32:65:7e:cf:0a:
5a:c3:6e:a0:3e:7b:c0:a1:ad:35:ca:bf:26:5b:8f:
a1:56:f1:05:54:b3:28:66:7a:df:b3:8b:b9:3a:91:
ec:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:11:F0:11:CE:07:2C:D6:42:D2:87:4F:32:76:57:50:AD:93:2E:F9
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.180.0/24
Signature Algorithm: sha256WithRSAEncryption
61:4d:10:0f:01:1d:3c:d3:8c:c1:22:18:30:e1:f6:3e:72:fa:
ec:dd:c8:9c:e9:0b:1f:6f:3d:72:bb:40:88:9f:d1:90:01:02:
3b:28:28:f2:97:21:5d:f4:36:21:57:6e:d1:e8:b7:f7:3f:b5:
ba:d0:d1:40:9f:04:05:c4:21:e7:7c:f3:55:9a:a2:e9:b8:0b:
7b:2f:40:ac:8b:b2:97:05:70:9b:dc:ed:dd:ce:b6:f3:4e:52:
55:67:2c:9b:86:ae:46:c5:9e:bb:36:32:c1:c7:1d:65:2f:6f:
76:9c:e5:44:75:55:35:9f:31:6f:5e:08:f3:67:bd:4b:b5:6f:
19:7a:06:72:8e:27:af:be:a4:0c:e2:91:1a:ed:f3:e1:65:a8:
ad:26:97:fe:18:a8:fe:ff:1a:bd:3a:61:ed:1b:dd:73:2a:be:
a2:47:95:fa:75:64:f1:a0:d1:ec:62:3e:7d:fe:77:be:be:b4:
fb:48:7e:94:e2:6e:e4:a6:69:9f:ca:ee:24:f1:f9:f5:b0:cf:
80:85:84:6d:0f:db:8b:90:d4:f3:df:da:7e:2d:41:52:63:d0:
cc:d8:f7:dc:60:4b:95:ec:61:16:f4:1a:8f:e7:e5:d7:de:ec:
cd:83:a0:15:d3:82:47:ce:ab:7d:e4:2d:5d:86:84:2f:66:18:
b5:03:91:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:54:44 2026 by rpki-client