
Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32342d3234203d3e2036303739.roa
File: 3130392e3131302e3136302e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier: +2BRUVpQ3Qlqyv28W2GAoy4d0/4OxecQjnSXtkMWKbY=
Subject key identifier: E5:8D:B4:7B:C7:C3:3D:F6:61:24:BB:63:FC:93:D0:A8:10:97:47:9F
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 7B700721B6BB6CED344126A4090E5B77715646CC
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32342d3234203d3e2036303739.roa
Signing time: Thu 20 Aug 2026 13:53:42 +0000
ROA not before: Thu 20 Aug 2026 13:48:42 +0000
ROA not after: Thu 19 Aug 2027 13:53:42 +0000
asID: 6079
IP address blocks: 109.110.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 08:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:70:07:21:b6:bb:6c:ed:34:41:26:a4:09:0e:5b:77:71:56:46:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Aug 20 13:48:42 2026 GMT
Not After : Aug 19 13:53:42 2027 GMT
Subject: CN=E58DB47BC7C33DF66124BB63FC93D0A81097479F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:10:ad:58:92:a2:26:ac:e1:83:7d:02:5e:ec:
d4:f9:80:0d:23:82:90:6f:58:ed:99:45:7a:a1:30:
ee:9a:28:e6:b7:36:13:05:00:6f:81:9d:29:46:91:
fc:68:fb:bd:81:fa:cc:60:2e:bc:a6:c2:1c:4b:31:
06:4d:4e:a9:ce:60:95:55:61:e3:ea:b1:6d:b1:a2:
49:3f:02:53:0d:74:d2:17:5a:11:a0:00:da:06:fe:
74:25:8e:38:7e:82:aa:e1:f6:38:67:5f:40:16:14:
33:4b:83:c5:c3:07:95:ab:29:4f:5b:de:44:c9:c4:
0e:02:d0:4d:d5:32:07:eb:96:af:f3:df:f8:48:0d:
cc:67:b0:91:4c:05:65:c7:8f:f8:47:96:06:30:75:
48:8f:14:1d:03:db:01:58:45:e9:05:8b:81:c7:15:
b0:82:27:2c:6f:c9:f9:ce:0e:30:3a:70:a5:26:27:
f5:3c:df:fe:f6:b3:50:d7:da:88:2c:8c:cf:0a:a5:
fe:b7:0a:d9:c5:9c:eb:40:a5:b2:6f:11:30:39:49:
f0:e8:87:05:53:6f:b9:f5:58:1b:d4:43:18:66:15:
50:7d:82:0e:40:59:2d:bf:13:9d:6b:7d:41:93:05:
db:9c:ff:e6:3b:05:c5:27:31:85:cd:c2:80:ec:22:
76:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8D:B4:7B:C7:C3:3D:F6:61:24:BB:63:FC:93:D0:A8:10:97:47:9F
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32342d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.160.0/24
Signature Algorithm: sha256WithRSAEncryption
71:7c:18:5b:b6:72:86:59:e1:e1:e0:a2:a3:e2:0c:07:8e:a8:
f3:a2:c2:e4:f2:20:03:e2:37:48:49:25:c0:72:c9:51:f4:28:
2c:54:bf:62:83:56:de:bf:7d:24:49:e4:74:ef:f3:52:c0:fa:
76:f7:ad:f6:6b:54:03:c1:5f:8a:6d:2d:1e:5b:b6:b4:4f:4a:
66:ec:c8:67:a0:e0:a9:f0:ab:d3:5e:cb:31:1c:b2:40:0d:07:
40:0b:f9:47:71:79:66:35:e9:f5:20:fc:d0:b9:07:21:58:1b:
51:9c:fa:4e:d3:10:5f:cc:32:20:10:bc:ef:1d:74:e2:b7:56:
25:e7:4f:d3:94:94:34:98:80:6b:73:23:f2:99:a1:57:80:07:
fd:96:09:a9:16:b5:d2:b0:cc:c8:17:a0:74:df:a9:f5:74:a5:
4b:98:7b:45:5e:0f:92:01:8a:53:2b:ef:c2:31:c6:d8:fc:73:
e6:8b:8b:2c:5e:3a:a6:65:3d:8d:29:36:88:7c:8d:66:f7:7d:
7b:7a:65:03:f0:a5:a3:5a:d5:8d:64:0b:39:70:90:af:7c:e3:
b3:bc:6b:2d:43:65:19:76:78:c4:3b:55:be:ff:5f:6c:ea:79:
07:cb:81:bf:65:74:10:57:cb:1e:e1:2e:73:48:ad:e3:58:02:
4e:cc:94:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:08:01 2026 by rpki-client