Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136312e302f32342d3234203d3e20323132323338.roa
File: 3130392e3131302e3136312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: hnH62FYeslm4hG1BWIy7U3iD116SGjW6PFLXuy6dkLQ=
Subject key identifier: DE:C8:E2:23:AD:F7:36:95:77:C3:D4:2D:2A:06:81:DD:13:F0:3D:16
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 0DB369C850F3F131BEFAE268D3E0CD534ADB5359
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136312e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 06 Aug 2026 07:41:57 +0000
ROA not before: Thu 06 Aug 2026 07:36:57 +0000
ROA not after: Thu 05 Aug 2027 07:41:57 +0000
asID: 212238
IP address blocks: 109.110.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 08:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:b3:69:c8:50:f3:f1:31:be:fa:e2:68:d3:e0:cd:53:4a:db:53:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Aug 6 07:36:57 2026 GMT
Not After : Aug 5 07:41:57 2027 GMT
Subject: CN=DEC8E223ADF7369577C3D42D2A0681DD13F03D16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:21:b3:7b:a1:ce:32:fc:06:eb:77:df:2d:10:
17:16:f9:eb:51:43:a6:bd:0c:ab:bc:3a:50:71:c1:
1b:80:96:62:c2:67:3f:0a:4a:69:25:4a:29:d9:4e:
86:e2:3f:8f:0c:af:66:47:f2:67:78:ae:43:e6:d8:
19:0b:29:74:a9:be:e1:9c:ff:4f:80:be:f6:0d:81:
54:86:03:8b:3b:23:f6:57:47:f8:b7:3c:58:2a:78:
6e:24:b0:4e:b4:7c:b1:3b:b8:6f:76:a4:51:b5:0c:
6f:9f:46:f9:db:31:02:6c:53:83:ac:83:81:02:41:
f1:0d:b5:45:64:da:33:5d:50:d4:cd:de:08:d3:9f:
04:85:8a:92:1d:77:99:cc:23:4e:a2:07:fa:31:9e:
9d:9c:60:f0:09:62:f4:e3:c9:a9:7a:68:10:2e:2c:
6c:b6:2b:77:3e:a9:a9:f0:9f:f4:72:e7:14:34:0f:
52:70:36:3c:89:14:f7:20:45:b3:a1:60:e1:41:18:
08:a6:1d:22:b7:c1:a9:b2:69:09:b5:a4:10:ba:30:
65:3f:a9:75:c5:49:d4:bc:76:a7:d7:e5:fe:08:7b:
c0:e6:90:ff:67:ed:e1:de:67:18:92:ad:6b:7c:89:
fb:67:8d:d6:89:2b:81:dc:19:85:aa:7a:e7:52:c4:
9b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C8:E2:23:AD:F7:36:95:77:C3:D4:2D:2A:06:81:DD:13:F0:3D:16
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136312e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.161.0/24
Signature Algorithm: sha256WithRSAEncryption
42:cb:2c:e3:40:f4:d0:2b:18:5f:fe:bb:e2:fa:70:33:3d:e8:
95:ad:ee:3e:11:dd:df:ce:94:71:0b:95:dd:e1:c0:9f:b4:03:
cb:1e:20:96:1a:71:b3:47:54:87:f6:b0:10:95:02:c4:96:35:
2e:d9:f4:b4:8f:20:ca:f4:6c:8c:00:a0:d6:2d:6c:77:34:2c:
c0:a7:8b:ee:7c:df:b7:87:b0:38:34:e5:d5:f9:a2:d1:3d:78:
39:de:96:22:f5:65:6d:6d:74:c9:87:ec:28:e9:62:fc:99:64:
0e:02:56:8a:67:4d:9f:14:a6:e5:d7:33:2a:4c:4b:b8:87:19:
2b:83:d9:7b:3e:c4:db:89:c7:f4:07:b5:b1:42:9e:18:31:0c:
72:f2:ba:6f:12:f8:41:57:ec:f9:4d:8f:01:7b:95:a1:e8:be:
c0:e7:9b:79:9a:5e:f2:be:dd:03:ac:bf:0f:41:0c:bd:ce:77:
b5:f7:89:e0:38:d3:20:78:a5:32:29:7a:2e:98:fb:6f:09:cb:
b4:25:bc:66:c7:e9:71:ae:20:09:1f:0f:85:f0:5a:91:c7:0c:
0d:8a:77:fe:c8:af:25:8d:a9:7c:44:39:22:e8:04:03:5d:06:
b2:a2:b0:f9:1f:a3:8a:bc:68:11:6b:31:06:e9:26:64:1b:c6:
e5:c6:d8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 23:30:41 2026 by rpki-client