Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3230392e302f32342d3234203d3e20333935373933.roa
File: 3130392e3233342e3230392e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: O58U7PWZy8imeyXfNYpolxNqqGk5vQ/pfpTujarGxIw=
Subject key identifier: 5D:36:C7:2C:90:61:F4:88:D5:5B:6A:E4:C9:00:97:90:24:05:65:F2
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 53B5135317CBA45D29DF3863B41674B873ADEBE2
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3230392e302f32342d3234203d3e20333935373933.roa
Signing time: Sun 16 Aug 2026 12:49:28 +0000
ROA not before: Sun 16 Aug 2026 12:44:28 +0000
ROA not after: Sun 15 Aug 2027 12:49:28 +0000
asID: 395793
IP address blocks: 109.234.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 18:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:b5:13:53:17:cb:a4:5d:29:df:38:63:b4:16:74:b8:73:ad:eb:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Aug 16 12:44:28 2026 GMT
Not After : Aug 15 12:49:28 2027 GMT
Subject: CN=5D36C72C9061F488D55B6AE4C9009790240565F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:a6:a1:56:37:07:5a:fb:f7:cf:52:c2:f7:
18:f2:f8:97:6b:bd:4a:cd:d7:44:58:cc:f7:a4:35:
6d:88:be:b1:35:f9:6d:d9:a8:f3:31:4d:af:ae:7b:
28:03:b6:0e:68:c8:80:6f:ad:da:47:d6:89:69:3b:
68:65:56:a0:5b:c1:93:35:41:a9:80:87:17:a5:3d:
19:f9:4d:14:11:97:28:0b:22:fb:94:72:d8:f8:2d:
d4:d1:ee:e8:c4:b5:20:6f:6e:dc:b1:92:fe:e0:44:
db:ee:97:d5:73:dd:cb:f1:a4:8c:28:54:f7:6f:f2:
8f:10:75:59:34:d2:8f:d1:cc:cd:dc:ea:be:5f:c9:
69:ef:73:92:95:9f:23:47:8e:1c:4f:99:8d:cb:ef:
e7:2d:e3:b7:ef:24:1b:78:55:d1:a9:28:49:c6:cc:
7a:85:f5:91:95:63:ba:3e:f3:43:f8:0d:84:2e:a7:
de:c4:32:e5:60:f7:49:f1:d3:85:c9:cc:c5:4a:b2:
ea:87:69:bc:24:23:de:ee:f8:9c:54:5a:0a:69:13:
f9:35:57:e2:52:8f:3e:bc:62:fd:b6:f9:0c:15:52:
a7:ef:97:7b:96:39:e9:ac:c7:e2:ef:56:47:c5:7d:
32:18:54:ec:45:c2:9a:5d:c2:fd:bc:06:af:d7:41:
cb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:36:C7:2C:90:61:F4:88:D5:5B:6A:E4:C9:00:97:90:24:05:65:F2
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3230392e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.209.0/24
Signature Algorithm: sha256WithRSAEncryption
34:d8:c5:c9:ca:d4:63:0c:1a:de:d4:e0:0a:66:f8:af:7d:0a:
a0:bc:dc:f9:11:29:69:ba:5a:98:26:82:ff:28:08:fe:73:76:
16:95:79:43:f0:83:79:ad:c1:c0:16:02:e5:ed:81:1f:78:79:
21:07:92:a9:32:7c:bf:f3:f4:61:30:98:a5:c1:a0:ff:73:82:
ee:fb:30:73:0f:6e:ee:c3:cb:05:ca:3e:c6:11:ac:ca:d4:b4:
3a:01:93:1a:cb:b1:b3:30:a5:7b:1a:36:5d:0e:f2:f8:aa:c0:
c7:bc:c1:04:9f:a6:4b:20:e9:bb:1f:15:a3:de:b0:b5:3a:f1:
62:e7:73:e9:9b:6d:08:f9:66:65:d5:63:23:11:8e:2b:b8:b1:
9d:c5:98:f1:71:82:9b:09:be:df:5e:df:79:63:93:f6:19:e6:
0e:63:bb:6b:92:1d:d8:59:10:22:ea:2d:a1:a6:08:d2:ea:ab:
35:ee:8c:cb:48:fd:18:1c:eb:49:43:68:25:5a:97:4c:90:3d:
d9:f7:a7:df:02:7d:e5:a2:89:f8:8a:db:e6:25:69:1c:2a:ea:
39:e6:34:34:0a:73:df:0e:53:fc:1a:a3:a4:5b:34:f0:fe:31:
77:00:4e:a6:f7:32:ea:3e:73:7a:3e:33:89:03:cb:75:ef:b6:
5a:c1:53:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:09:45 2026 by rpki-client