Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3231322e302f32342d3234203d3e20313734.roa
File: 3130392e3233342e3231322e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier: 9HNBf+LUgxtel5YdAqtqWUZ01j9gnH5Sgj9ujQE2GCs=
Subject key identifier: 80:BA:E5:45:F0:66:E2:B5:4F:B4:02:CD:DB:07:D1:C2:2E:9B:67:C2
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 56EF75FC016BF15AA06B43EDBF8504C54409CE7F
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3231322e302f32342d3234203d3e20313734.roa
Signing time: Wed 02 Sep 2026 12:16:59 +0000
ROA not before: Wed 02 Sep 2026 12:11:59 +0000
ROA not after: Wed 01 Sep 2027 12:16:59 +0000
asID: 174
IP address blocks: 109.234.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 15:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ef:75:fc:01:6b:f1:5a:a0:6b:43:ed:bf:85:04:c5:44:09:ce:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Sep 2 12:11:59 2026 GMT
Not After : Sep 1 12:16:59 2027 GMT
Subject: CN=80BAE545F066E2B54FB402CDDB07D1C22E9B67C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:fd:19:ae:8c:c5:26:02:db:34:51:5d:a5:
af:4d:90:63:05:6e:cf:6f:df:0d:9c:a2:b4:27:78:
4b:0a:cf:fd:f3:77:20:fd:64:8c:cc:43:aa:d2:4b:
f1:6b:2d:f9:36:14:12:05:7c:e0:ca:c2:18:6c:fc:
d4:14:d1:6e:56:3d:4f:f1:93:0d:e1:11:be:d6:3e:
31:2d:80:29:fb:75:ba:45:45:4d:86:bd:cc:ff:84:
77:c3:2c:63:fd:67:64:c3:ac:b6:65:79:09:91:22:
e2:c1:33:bb:ec:79:be:7a:a0:56:dc:07:a4:21:4c:
7e:29:dc:77:71:22:af:5c:58:65:44:80:fc:41:fe:
0d:90:e7:56:23:18:0c:ca:fd:dc:ce:a1:f5:0e:0d:
ec:e1:53:0e:f3:22:36:30:c6:99:80:32:fd:b6:60:
d2:67:97:47:47:90:92:b7:30:6b:9e:20:8a:dd:68:
d8:d9:8e:73:93:6a:7c:11:37:a3:e8:40:58:68:3e:
d6:b6:c7:64:4e:71:81:fb:ba:87:98:8f:fa:88:f4:
22:cc:bd:3f:0f:43:01:73:86:f7:45:3e:b1:b9:9c:
35:0f:40:f4:09:58:c7:ff:c4:5c:91:a3:83:d8:48:
6b:0b:c5:1d:ea:5e:46:4f:34:84:d2:2e:00:da:0e:
0e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BA:E5:45:F0:66:E2:B5:4F:B4:02:CD:DB:07:D1:C2:2E:9B:67:C2
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3231322e302f32342d3234203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.212.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:70:61:35:e2:94:4b:9d:91:79:b8:fb:30:94:a6:3e:a4:b8:
72:51:8c:dd:49:44:ad:52:b7:4f:d5:21:08:4e:49:af:da:a7:
81:62:cc:74:38:8e:cd:79:53:91:f9:1a:cd:a6:1c:4a:af:ff:
40:07:24:a6:f0:69:50:07:7c:b4:48:1a:42:a8:ac:a4:6a:23:
cb:42:0f:3d:e8:06:34:34:1c:3c:ae:8f:59:27:0e:66:d7:c8:
e8:53:84:2a:ae:cb:a7:46:22:d5:3f:2e:9a:69:30:6f:2f:b2:
d5:e8:66:f6:44:d3:25:10:f1:81:41:0d:8c:02:ff:3c:75:e1:
ae:e5:b1:38:43:46:42:95:d1:c7:2e:7e:05:b8:35:f9:ef:36:
ea:3d:6c:10:1d:c8:54:7d:b8:cd:90:69:57:5f:39:92:67:3f:
0b:63:69:c6:00:2a:57:87:8f:0e:85:9d:e9:b3:b9:85:10:9b:
fb:0c:ab:b1:aa:c2:6b:06:84:0d:4e:62:f2:a4:74:96:53:83:
e1:34:be:05:7b:ea:38:3d:c9:5c:47:16:f6:4c:c7:26:14:e1:
0f:d4:81:92:e7:2f:5b:fe:4a:27:ef:95:e6:da:a6:fa:e8:a9:
8d:8c:9b:7a:d8:7b:57:ea:8f:8e:67:d7:b3:eb:35:1c:fa:96:
ac:fe:99:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:49:22 2026 by rpki-client