Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3231342e302f32342d3234203d3e203433363431.roa
File: 3130392e3233342e3231342e302f32342d3234203d3e203433363431.roa (raw, json)
Hash identifier: +GFq+rHPW2NmU2P7WwLI7nlzu1G6+ACKfZdceph6rto=
Subject key identifier: 0D:C3:4F:E6:F0:72:79:9C:7D:7E:02:AE:DB:36:7C:CA:95:A8:32:32
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 1F2F1F18A7FC871754F0661E3D0F5838BD2D8585
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3231342e302f32342d3234203d3e203433363431.roa
Signing time: Thu 16 Jul 2026 13:49:12 +0000
ROA not before: Thu 16 Jul 2026 13:44:12 +0000
ROA not after: Thu 15 Jul 2027 13:49:12 +0000
asID: 43641
IP address blocks: 109.234.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 13:21:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:2f:1f:18:a7:fc:87:17:54:f0:66:1e:3d:0f:58:38:bd:2d:85:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Jul 16 13:44:12 2026 GMT
Not After : Jul 15 13:49:12 2027 GMT
Subject: CN=0DC34FE6F072799C7D7E02AEDB367CCA95A83232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:55:58:5b:5c:c3:d2:3e:ad:14:bb:1e:09:f0:
82:1e:4c:56:a5:dc:47:02:90:81:fc:de:f7:73:27:
15:76:27:91:8d:aa:94:ab:ff:64:57:cb:b8:11:20:
ed:ce:9a:33:b9:d1:d9:d9:62:ba:24:93:15:0c:e4:
2d:7d:cb:42:36:dd:05:30:1f:d0:71:7a:27:55:ab:
17:ad:1d:38:99:b5:97:b5:27:c3:99:d0:dd:de:b1:
ce:48:f2:db:e4:4d:f5:46:dd:d4:72:f1:ff:1b:b2:
26:6c:f3:09:12:d6:30:1a:ab:44:c7:a1:b4:35:66:
a2:92:37:b3:89:a5:1d:8a:12:64:0c:8a:d3:a9:f1:
c0:ca:4d:62:0e:65:b6:4f:ef:12:d2:b5:89:6f:5b:
2f:06:e8:01:52:3f:91:0b:09:a7:6b:fd:fe:42:41:
4c:c1:7c:4b:8b:c9:a6:89:2e:e7:7d:13:47:44:96:
99:0e:5d:c9:da:26:61:84:57:51:a1:6b:8f:ee:75:
5f:df:de:68:6b:9e:53:67:5b:d4:fc:ad:03:42:b9:
cf:0f:64:be:e5:76:b9:b6:f2:b5:09:82:c6:d0:73:
85:93:66:9f:26:d4:55:17:30:7f:04:71:d2:26:e7:
3f:d3:94:83:2c:c0:97:3f:ac:65:5b:9e:b5:08:03:
3f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C3:4F:E6:F0:72:79:9C:7D:7E:02:AE:DB:36:7C:CA:95:A8:32:32
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3231342e302f32342d3234203d3e203433363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.214.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:67:f9:ca:89:4a:b7:9b:51:4f:10:b7:82:dd:23:e6:05:a6:
07:de:91:80:29:da:49:37:3a:d1:5e:ca:0b:a5:57:9d:22:df:
02:75:ad:42:9b:79:85:ca:f3:68:80:a5:ef:9f:a4:ae:44:54:
db:ac:55:1f:58:2c:bc:f9:e9:ca:05:83:db:f3:3d:fa:f8:8a:
a0:d2:c1:1f:45:88:2b:4b:b3:0e:16:96:2f:c7:f8:66:2c:a9:
db:b4:67:78:a0:48:fd:cf:4d:8f:22:07:d3:48:e9:fc:49:99:
2d:5c:90:df:5a:52:33:79:ec:3b:8b:2f:b6:aa:e6:25:9a:8c:
06:bf:6e:a2:b0:78:8b:6d:43:47:63:db:ee:2c:b2:7b:bf:c9:
f5:24:7d:03:79:2f:99:45:ce:c9:10:5d:72:ee:0c:85:53:e6:
ba:8c:61:d7:91:78:66:bf:a7:88:8c:16:c3:2c:b2:33:21:36:
a0:0c:15:75:61:48:3a:0d:ad:5c:91:32:6e:01:0f:13:35:bb:
6d:98:22:5a:a4:a2:24:58:16:dd:70:94:5d:a7:f8:70:81:0c:
99:d9:f6:48:20:b7:44:76:dc:d4:f4:cc:40:62:d9:2a:25:f4:
30:4c:ab:e5:8c:4c:af:7c:eb:ce:2a:1b:92:88:ce:87:06:66:
d2:ef:d3:08
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUHy8fGKf8hxdU8GYePQ9YOL0thYUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk
MTZjZWVkMzAeFw0yNjA3MTYxMzQ0MTJaFw0yNzA3MTUxMzQ5MTJaMDMxMTAvBgNV
BAMTKDBEQzM0RkU2RjA3Mjc5OUM3RDdFMDJBRURCMzY3Q0NBOTVBODMyMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxVVhbXMPSPq0Uux4J8IIeTFal
3EcCkIH83vdzJxV2J5GNqpSr/2RXy7gRIO3OmjO50dnZYrokkxUM5C19y0I23QUw
H9BxeidVqxetHTiZtZe1J8OZ0N3esc5I8tvkTfVG3dRy8f8bsiZs8wkS1jAaq0TH
obQ1ZqKSN7OJpR2KEmQMitOp8cDKTWIOZbZP7xLStYlvWy8G6AFSP5ELCadr/f5C
QUzBfEuLyaaJLud9E0dElpkOXcnaJmGEV1Gha4/udV/f3mhrnlNnW9T8rQNCuc8P
ZL7ldrm28rUJgsbQc4WTZp8m1FUXMH8EcdIm5z/TlIMswJc/rGVbnrUIAz+NAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUDcNP5vByeZx9fgKu2zZ8ypWoMjIwHwYDVR0j
BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0
NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G
czd0TS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGNjMDg3Mzct
OTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0NGVkLzAvMzEzMDM5MmUzMjMzMzQyZTMy
MzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzMzNjM0MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABt6tYwDQYJKoZIhvcNAQELBQADggEBAJ5n+cqJSrebUU8Qt4LdI+YFpgfekYAp
2kk3OtFeygulV50i3wJ1rUKbeYXK82iApe+fpK5EVNusVR9YLLz56coFg9vzPfr4
iqDSwR9FiCtLsw4Wli/H+GYsqdu0Z3igSP3PTY8iB9NI6fxJmS1ckN9aUjN57DuL
L7aq5iWajAa/bqKweIttQ0dj2+4ssnu/yfUkfQN5L5lFzskQXXLuDIVT5rqMYdeR
eGa/p4iMFsMssjMhNqAMFXVhSDoNrVyRMm4BDxM1u22YIlqkoiRYFt1wlF2n+HCB
DJnZ9kggt0R23NT0zEBi2Sol9DBMq+WMTK98684qG5KIzocGZtLv0wg=
-----END CERTIFICATE-----
Generated at Tue Jul 21 01:35:52 2026 by rpki-client