Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3136302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: ZYJiyh4e0pH8Y+uR5a1MRtfHIcfR7zd5aAN8lheXNVI=
Subject key identifier: 4D:6A:85:A1:A6:E4:BE:EE:F4:52:9E:B6:E6:3F:77:E6:2B:B4:9A:E2
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 65572944AB8A49DFB043B1DE4CA96EF6A50F3733
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32342d3234203d3e20383334.roa
Signing time: Fri 07 Aug 2026 14:46:21 +0000
ROA not before: Fri 07 Aug 2026 14:41:21 +0000
ROA not after: Fri 06 Aug 2027 14:46:21 +0000
asID: 834
IP address blocks: 109.110.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 03:25:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:57:29:44:ab:8a:49:df:b0:43:b1:de:4c:a9:6e:f6:a5:0f:37:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Aug 7 14:41:21 2026 GMT
Not After : Aug 6 14:46:21 2027 GMT
Subject: CN=4D6A85A1A6E4BEEEF4529EB6E63F77E62BB49AE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b8:c9:57:f6:a5:90:62:52:35:4a:f2:4d:ac:
49:b9:76:00:29:b0:32:02:c7:87:65:71:d3:20:09:
15:0a:79:28:12:f9:4f:2f:21:e7:58:2d:66:35:23:
3f:87:b5:89:6b:94:13:83:eb:c5:24:76:d8:9a:27:
b8:4c:d5:b4:90:7d:f0:54:4d:6a:fc:20:22:6d:46:
ac:be:65:32:21:e4:c1:83:70:9b:59:27:77:0d:78:
8c:a2:b5:77:ac:00:01:a2:95:45:20:fb:80:4e:bf:
d9:ce:88:7f:91:69:4e:d6:ba:9b:6f:8f:b5:58:bf:
d9:3a:13:58:44:cb:e2:46:5e:ae:36:24:5f:ab:05:
9f:a4:5b:45:46:5f:b7:12:4c:c0:9e:54:aa:48:04:
26:bc:ec:6b:d5:31:ac:05:3b:cc:96:f5:df:1f:f5:
ef:62:1a:3d:ce:0b:5b:6b:74:11:1b:77:9b:c9:17:
ab:00:93:8c:e1:7f:72:df:a2:94:1c:50:b3:aa:26:
2d:c1:25:a1:74:47:a3:ba:7c:57:28:91:2c:8d:f6:
d5:8f:d5:ce:23:d6:bb:0a:78:17:65:44:ae:46:2b:
65:0f:7d:ab:4a:0f:d5:27:f0:af:39:56:8b:36:4f:
d6:7f:8a:6d:b0:5a:c0:bc:88:61:f1:bc:e8:cd:a9:
0b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6A:85:A1:A6:E4:BE:EE:F4:52:9E:B6:E6:3F:77:E6:2B:B4:9A:E2
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.160.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:db:43:17:54:33:ee:4c:b3:74:37:e2:9d:b8:5e:40:e7:eb:
ff:fd:ac:4c:df:cc:59:00:f1:58:fa:a4:91:ea:cc:8a:97:7d:
38:eb:89:18:2f:0a:e3:a3:5d:16:9f:8e:b7:83:19:86:f6:5b:
02:29:d2:05:fd:f4:b0:24:c9:77:00:89:c5:2e:57:18:c5:36:
27:29:fd:b4:e7:84:50:38:2a:08:0b:d9:55:f3:61:e5:de:da:
ed:d1:bc:cc:8e:43:e5:f7:0b:8c:44:ef:10:03:a1:ab:5d:99:
89:d2:bc:a1:2a:1c:59:19:77:ea:ed:32:8d:ab:22:9f:76:da:
ec:32:2a:b4:20:d0:d0:16:d7:27:ed:f0:6f:b4:11:2a:ca:40:
3c:75:94:a3:94:c7:81:e4:59:ce:a4:11:19:86:1d:e4:3b:c5:
55:5e:ff:de:13:50:d0:08:d9:ac:64:0a:2d:cd:2a:f4:52:dd:
75:bf:2c:b9:5d:8b:6d:f3:1b:f5:01:88:d4:ed:a4:5e:3c:70:
10:3c:8d:9c:e8:24:72:bd:5d:23:22:ca:25:07:fa:c0:40:9d:
fc:b2:ed:9f:15:56:22:98:73:98:c1:6f:57:fa:41:63:81:04:
23:42:f4:7b:c9:42:ca:06:70:26:cc:59:d6:ee:b8:05:83:cb:
01:29:65:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:58 2026 by rpki-client