Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/3130392e37342e3134342e302f32302d3234203d3e203239343035.roa
File: 3130392e37342e3134342e302f32302d3234203d3e203239343035.roa (raw, json)
Hash identifier: xohX/Ehc0bh3gDMEqDdvV2NRcW4FHqeBZZSuJrMdXQI=
Subject key identifier: 11:BA:E2:0B:B5:B7:7A:EE:51:BC:E7:9D:97:13:D0:63:E3:F6:18:14
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 6086B9D378DDCB52EAE417CAE06B7CA0A07F64F7
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/3130392e37342e3134342e302f32302d3234203d3e203239343035.roa
Signing time: Tue 08 Sep 2026 07:20:17 +0000
ROA not before: Tue 08 Sep 2026 07:15:17 +0000
ROA not after: Tue 07 Sep 2027 07:20:17 +0000
asID: 29405
IP address blocks: 109.74.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:86:b9:d3:78:dd:cb:52:ea:e4:17:ca:e0:6b:7c:a0:a0:7f:64:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:15:17 2026 GMT
Not After : Sep 7 07:20:17 2027 GMT
Subject: CN=11BAE20BB5B77AEE51BCE79D9713D063E3F61814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d7:66:18:ac:14:3f:d7:b6:29:45:21:00:22:
48:1b:5a:9c:da:69:f5:a4:34:1b:41:d7:a2:38:31:
2c:17:f7:3d:ee:7f:53:af:24:01:d7:6d:9f:45:c4:
1d:98:3b:94:ff:1c:b2:46:6f:f6:a5:7c:7d:4e:29:
ed:62:b0:3a:8f:34:f3:a8:02:a9:67:13:b2:cd:f3:
b6:c0:e1:b0:28:1f:18:19:37:30:08:b0:b6:fb:53:
3e:68:2d:14:68:78:82:00:c3:e4:23:95:16:ef:c5:
76:c2:fb:a7:a2:ec:6b:a0:00:05:d4:44:f4:5f:86:
53:cf:50:91:43:50:15:68:24:77:e6:09:d0:fc:93:
65:95:0d:d8:81:12:13:94:48:fd:7c:ba:ae:20:cc:
c3:d1:01:b4:a4:7b:91:fa:18:9d:a8:5c:42:89:ee:
c0:a3:7e:a5:a3:4b:8b:5b:25:ae:68:bb:16:c5:22:
cd:c8:fa:b5:93:a9:ce:cb:4e:50:d0:5e:a2:2e:6c:
e6:8b:39:68:ae:35:77:32:85:84:12:17:6c:fa:a2:
11:ce:38:55:96:2f:02:6d:74:32:56:2a:a5:ff:00:
01:a6:2e:b2:3c:f0:fb:e8:26:d7:32:66:8c:5e:bc:
7f:62:e9:2c:bb:f7:f2:ac:8a:44:88:cf:51:ed:58:
ab:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BA:E2:0B:B5:B7:7A:EE:51:BC:E7:9D:97:13:D0:63:E3:F6:18:14
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/3130392e37342e3134342e302f32302d3234203d3e203239343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.74.144.0/20
Signature Algorithm: sha256WithRSAEncryption
84:23:36:ce:2a:84:8f:3f:b7:14:a1:8e:31:ad:5f:12:48:12:
4a:d3:a1:c9:80:92:28:93:f1:fe:81:1a:98:44:bf:b4:da:6e:
57:a7:71:90:d5:cc:21:ec:1d:d9:19:79:58:77:64:63:55:5f:
13:10:19:f1:82:b3:67:ab:95:11:0d:d6:f7:30:9e:09:d6:7c:
47:8e:19:bb:6a:e6:33:96:19:cb:f7:fd:ab:ea:60:aa:11:d6:
e2:91:57:4e:59:05:b5:8b:bc:6e:c4:e9:35:f2:04:cc:a7:bf:
a4:7e:71:e3:25:ab:37:bf:e4:9a:b4:db:64:ed:57:2a:a2:45:
80:8b:7a:d1:a1:91:25:eb:fd:85:ab:be:f3:39:ff:24:b6:a5:
cc:05:05:9f:87:2b:9e:40:72:a2:95:bd:54:93:54:de:93:54:
91:f6:10:2f:60:45:0d:92:46:b2:59:cd:28:d6:dc:e8:3f:8c:
87:05:59:50:5c:ce:61:95:f9:64:55:8b:96:ba:13:5e:4b:e7:
32:47:34:5d:e6:b7:99:75:25:d4:6f:aa:3f:91:f4:2a:dd:b2:
09:d5:14:23:63:40:34:6d:90:f6:5b:d0:17:d6:82:83:e2:7d:
f6:e5:53:31:ba:2c:01:64:23:df:16:47:5d:6f:5c:43:fd:18:
1f:f4:52:74
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUYIa503jdy1Lq5BfK4Gt8oKB/ZPcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWMwY2UzZTZhOWRiY2ZhMjUxZTU2ZTUwMDJlYzRiYmJj
YjA1Yjg2NjAeFw0yNjA5MDgwNzE1MTdaFw0yNzA5MDcwNzIwMTdaMDMxMTAvBgNV
BAMTKDExQkFFMjBCQjVCNzdBRUU1MUJDRTc5RDk3MTNEMDYzRTNGNjE4MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw12YYrBQ/17YpRSEAIkgbWpza
afWkNBtB16I4MSwX9z3uf1OvJAHXbZ9FxB2YO5T/HLJGb/alfH1OKe1isDqPNPOo
AqlnE7LN87bA4bAoHxgZNzAIsLb7Uz5oLRRoeIIAw+QjlRbvxXbC+6ei7GugAAXU
RPRfhlPPUJFDUBVoJHfmCdD8k2WVDdiBEhOUSP18uq4gzMPRAbSke5H6GJ2oXEKJ
7sCjfqWjS4tbJa5ouxbFIs3I+rWTqc7LTlDQXqIubOaLOWiuNXcyhYQSF2z6ohHO
OFWWLwJtdDJWKqX/AAGmLrI88PvoJtcyZoxevH9i6Sy79/KsikSIz1HtWKs3AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUEbriC7W3eu5RvOedlxPQY+P2GBQwHwYDVR0j
BBgwFoAUrAzj5qnbz6JR5W5QAuxLu8sFuGYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzVhMGVmZjItYjQ1Yy00MjlmLTkwMDEtMjM0MWQ0NmI2
M2UwLzAvQUMwQ0UzRTZBOURCQ0ZBMjUxRTU2RTUwMDJFQzRCQkJDQjA1Qjg2Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JBemo1cW5iejZKUjVXNVFBdXhMdThz
RnVHWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzVhMGVmZjIt
YjQ1Yy00MjlmLTkwMDEtMjM0MWQ0NmI2M2UwLzAvMzEzMDM5MmUzNzM0MmUzMTM0
MzQyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM5MzQzMDM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE
bUqQMA0GCSqGSIb3DQEBCwUAA4IBAQCEIzbOKoSPP7cUoY4xrV8SSBJK06HJgJIo
k/H+gRqYRL+02m5Xp3GQ1cwh7B3ZGXlYd2RjVV8TEBnxgrNnq5URDdb3MJ4J1nxH
jhm7auYzlhnL9/2r6mCqEdbikVdOWQW1i7xuxOk18gTMp7+kfnHjJas3v+SatNtk
7VcqokWAi3rRoZEl6/2Fq77zOf8ktqXMBQWfhyueQHKilb1Uk1Tek1SR9hAvYEUN
kkayWc0o1tzoP4yHBVlQXM5hlflkVYuWuhNeS+cyRzRd5reZdSXUb6o/kfQq3bIJ
1RQjY0A0bZD2W9AX1oKD4n325VMxuiwBZCPfFkddb1xD/Rgf9FJ0
-----END CERTIFICATE-----
Generated at Thu Sep 10 13:03:13 2026 by rpki-client