Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32342d3234203d3e2036303739.roa
File:                     3130392e3131302e3136302e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier:          +2BRUVpQ3Qlqyv28W2GAoy4d0/4OxecQjnSXtkMWKbY=
Subject key identifier:   E5:8D:B4:7B:C7:C3:3D:F6:61:24:BB:63:FC:93:D0:A8:10:97:47:9F
Certificate issuer:       /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial:       7B700721B6BB6CED344126A4090E5B77715646CC
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32342d3234203d3e2036303739.roa
Signing time:             Thu 20 Aug 2026 13:53:42 +0000
ROA not before:           Thu 20 Aug 2026 13:48:42 +0000
ROA not after:            Thu 19 Aug 2027 13:53:42 +0000
asID:                     6079
IP address blocks:        109.110.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Sep 2026 08:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:70:07:21:b6:bb:6c:ed:34:41:26:a4:09:0e:5b:77:71:56:46:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
        Validity
            Not Before: Aug 20 13:48:42 2026 GMT
            Not After : Aug 19 13:53:42 2027 GMT
        Subject: CN=E58DB47BC7C33DF66124BB63FC93D0A81097479F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:10:ad:58:92:a2:26:ac:e1:83:7d:02:5e:ec:
                    d4:f9:80:0d:23:82:90:6f:58:ed:99:45:7a:a1:30:
                    ee:9a:28:e6:b7:36:13:05:00:6f:81:9d:29:46:91:
                    fc:68:fb:bd:81:fa:cc:60:2e:bc:a6:c2:1c:4b:31:
                    06:4d:4e:a9:ce:60:95:55:61:e3:ea:b1:6d:b1:a2:
                    49:3f:02:53:0d:74:d2:17:5a:11:a0:00:da:06:fe:
                    74:25:8e:38:7e:82:aa:e1:f6:38:67:5f:40:16:14:
                    33:4b:83:c5:c3:07:95:ab:29:4f:5b:de:44:c9:c4:
                    0e:02:d0:4d:d5:32:07:eb:96:af:f3:df:f8:48:0d:
                    cc:67:b0:91:4c:05:65:c7:8f:f8:47:96:06:30:75:
                    48:8f:14:1d:03:db:01:58:45:e9:05:8b:81:c7:15:
                    b0:82:27:2c:6f:c9:f9:ce:0e:30:3a:70:a5:26:27:
                    f5:3c:df:fe:f6:b3:50:d7:da:88:2c:8c:cf:0a:a5:
                    fe:b7:0a:d9:c5:9c:eb:40:a5:b2:6f:11:30:39:49:
                    f0:e8:87:05:53:6f:b9:f5:58:1b:d4:43:18:66:15:
                    50:7d:82:0e:40:59:2d:bf:13:9d:6b:7d:41:93:05:
                    db:9c:ff:e6:3b:05:c5:27:31:85:cd:c2:80:ec:22:
                    76:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8D:B4:7B:C7:C3:3D:F6:61:24:BB:63:FC:93:D0:A8:10:97:47:9F
            X509v3 Authority Key Identifier:
                keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32342d3234203d3e2036303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.110.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:7c:18:5b:b6:72:86:59:e1:e1:e0:a2:a3:e2:0c:07:8e:a8:
         f3:a2:c2:e4:f2:20:03:e2:37:48:49:25:c0:72:c9:51:f4:28:
         2c:54:bf:62:83:56:de:bf:7d:24:49:e4:74:ef:f3:52:c0:fa:
         76:f7:ad:f6:6b:54:03:c1:5f:8a:6d:2d:1e:5b:b6:b4:4f:4a:
         66:ec:c8:67:a0:e0:a9:f0:ab:d3:5e:cb:31:1c:b2:40:0d:07:
         40:0b:f9:47:71:79:66:35:e9:f5:20:fc:d0:b9:07:21:58:1b:
         51:9c:fa:4e:d3:10:5f:cc:32:20:10:bc:ef:1d:74:e2:b7:56:
         25:e7:4f:d3:94:94:34:98:80:6b:73:23:f2:99:a1:57:80:07:
         fd:96:09:a9:16:b5:d2:b0:cc:c8:17:a0:74:df:a9:f5:74:a5:
         4b:98:7b:45:5e:0f:92:01:8a:53:2b:ef:c2:31:c6:d8:fc:73:
         e6:8b:8b:2c:5e:3a:a6:65:3d:8d:29:36:88:7c:8d:66:f7:7d:
         7b:7a:65:03:f0:a5:a3:5a:d5:8d:64:0b:39:70:90:af:7c:e3:
         b3:bc:6b:2d:43:65:19:76:78:c4:3b:55:be:ff:5f:6c:ea:79:
         07:cb:81:bf:65:74:10:57:cb:1e:e1:2e:73:48:ad:e3:58:02:
         4e:cc:94:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:08:01 2026 by rpki-client