Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3230382e302f32342d3234203d3e203331383938.roa
File: 3130392e3233342e3230382e302f32342d3234203d3e203331383938.roa (raw, json)
Hash identifier: LDqZZoLow0mbDS+Axbw5uzgHB6hrJjPXmfZptqZ1ClQ=
Subject key identifier: 51:6E:59:F7:37:41:1D:22:01:1D:13:53:F0:70:37:F6:49:77:0C:F3
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 4CE4191A2B0E392AF4EF8DCDC6BB2D6BC77B1892
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3230382e302f32342d3234203d3e203331383938.roa
Signing time: Thu 06 Aug 2026 08:49:19 +0000
ROA not before: Thu 06 Aug 2026 08:44:19 +0000
ROA not after: Thu 05 Aug 2027 08:49:19 +0000
asID: 31898
IP address blocks: 109.234.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 15:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:e4:19:1a:2b:0e:39:2a:f4:ef:8d:cd:c6:bb:2d:6b:c7:7b:18:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Aug 6 08:44:19 2026 GMT
Not After : Aug 5 08:49:19 2027 GMT
Subject: CN=516E59F737411D22011D1353F07037F649770CF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fd:26:c8:76:69:8a:10:67:76:57:85:f7:bf:
3b:52:08:f0:91:df:37:40:8c:94:4f:05:52:0c:ce:
c2:92:40:bb:62:b1:16:93:5a:a7:22:c6:30:55:43:
fa:b4:33:9e:9e:25:d1:d3:a4:43:0e:00:a7:77:b1:
d6:92:38:f3:44:85:df:f7:dd:f1:85:b9:4b:90:61:
f9:b5:4f:e5:c2:db:89:c3:bc:45:bb:9b:43:2e:36:
96:28:6e:c4:3e:27:d7:47:c9:27:f2:9c:8b:c7:65:
c4:56:cb:29:8e:07:86:ad:54:07:6d:af:64:9e:56:
86:40:ea:aa:7d:77:a5:2d:22:1b:c5:59:42:e9:a0:
51:f2:08:86:49:26:31:ac:54:70:81:da:ef:2b:77:
67:1c:4c:13:ff:75:bc:6b:f0:e9:90:3b:40:47:55:
cf:d6:58:80:d5:fe:91:65:44:59:01:9e:54:17:e2:
92:9f:4e:5c:a4:8e:06:ed:e9:3a:21:14:d4:92:48:
74:6e:34:64:f8:86:e0:8e:81:04:0f:69:3e:30:98:
49:90:55:67:b0:87:b3:f5:3d:1c:bb:f2:8b:74:d0:
78:80:07:e1:04:b3:71:1b:b5:aa:d0:b9:d1:a9:41:
88:a8:94:e8:0d:3f:39:c9:c0:de:d8:4e:89:41:a0:
f4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6E:59:F7:37:41:1D:22:01:1D:13:53:F0:70:37:F6:49:77:0C:F3
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3230382e302f32342d3234203d3e203331383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.208.0/24
Signature Algorithm: sha256WithRSAEncryption
41:90:02:f5:66:52:a1:55:14:1c:d0:ad:ac:8f:b9:c4:8a:43:
1c:7c:45:6e:9d:2e:26:33:f1:ca:4e:24:3f:4b:61:9f:ca:2a:
08:f7:f1:47:11:f6:57:72:5f:49:f3:5e:e3:cb:fb:4b:ff:f9:
3d:db:74:22:d5:3d:c8:fd:2f:57:3d:5a:ff:3b:c2:5b:66:3e:
0a:0b:df:ea:04:78:20:8b:db:f8:68:78:b7:5d:c9:5f:f5:4a:
94:98:77:c6:8c:95:28:aa:8c:f0:7d:9d:ff:4f:fe:61:d9:8e:
5a:ee:84:f9:7c:96:0e:49:c1:7a:66:2a:f9:ce:db:9e:94:09:
85:03:08:c2:c0:08:cd:c2:c9:f9:a3:9e:96:4f:98:22:44:8c:
ab:c5:a2:74:05:37:64:ca:7e:21:e5:30:95:df:a6:8a:6c:1a:
ee:2f:ad:ac:1e:22:29:ad:e0:ce:ce:41:7c:b0:16:86:50:a3:
12:e8:c9:7e:5a:6e:55:12:59:cf:60:62:f0:cb:c3:34:8e:fc:
d3:73:c7:e2:38:17:cd:cb:4f:b1:f3:1d:f6:ee:f3:63:6c:ba:
47:90:f0:54:43:d6:c5:23:2a:af:43:fe:7b:9a:6c:68:f7:2b:
d0:b1:2b:42:19:07:cc:d6:23:54:d7:be:0a:42:28:6e:d9:9d:
53:22:aa:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:51:57 2026 by rpki-client