Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136312e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3136312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Y6UQkPrr4Z1sIrB28Zn179Z9sWBc5GvR884zIiSb37U=
Subject key identifier: 97:D4:C4:EA:0D:1C:F0:03:E8:2C:85:17:D6:83:9C:72:B7:AB:12:F4
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 4CC4E480183AB29C7F0E5D506568C9F2D009041A
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136312e302f32342d3234203d3e20383334.roa
Signing time: Tue 07 Jul 2026 14:53:41 +0000
ROA not before: Tue 07 Jul 2026 14:48:41 +0000
ROA not after: Tue 06 Jul 2027 14:53:41 +0000
asID: 834
IP address blocks: 109.110.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:c4:e4:80:18:3a:b2:9c:7f:0e:5d:50:65:68:c9:f2:d0:09:04:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jul 7 14:48:41 2026 GMT
Not After : Jul 6 14:53:41 2027 GMT
Subject: CN=97D4C4EA0D1CF003E82C8517D6839C72B7AB12F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:0a:f7:01:da:b7:b0:50:4b:88:ca:ff:49:
94:45:f2:dc:ca:6c:41:b8:68:64:c4:91:52:da:68:
67:16:7f:8c:da:28:91:a8:80:0e:dd:54:e4:4f:f2:
5e:53:43:47:16:bf:91:0b:8f:bd:76:fb:70:65:e2:
24:66:14:dc:c9:a9:f4:e7:b6:30:61:2c:c6:d9:61:
12:74:8e:ba:e3:aa:05:b5:6c:d0:6e:8b:df:49:0b:
0c:dd:a8:cc:a1:ac:37:d7:3a:2a:57:6b:0e:00:b5:
54:88:d6:08:02:3e:dd:19:3d:e2:c3:61:2c:b4:db:
03:f6:e3:2e:b3:e7:87:a2:94:69:d1:50:cd:ef:28:
5a:d7:13:65:df:2d:88:62:9e:f8:3b:fa:dd:1f:d2:
d8:f7:91:8d:86:bd:e4:38:89:0c:44:78:ac:3d:69:
aa:7e:ea:e8:e2:2a:88:d4:07:9c:04:4d:3e:73:a4:
dd:6b:83:a1:fc:de:0e:bf:26:c0:fc:a8:96:2a:d1:
a5:e9:f9:3d:b8:41:07:c1:8d:81:d6:d6:80:e7:0f:
9b:86:5f:25:38:46:2d:f7:a4:2b:71:d9:2e:46:9a:
f3:39:f1:b8:22:57:92:b8:32:0b:2c:23:cd:6b:17:
00:7d:86:40:38:99:b2:32:72:7c:00:6d:50:00:f7:
b2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D4:C4:EA:0D:1C:F0:03:E8:2C:85:17:D6:83:9C:72:B7:AB:12:F4
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.161.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:e6:b3:1c:08:0b:83:13:d9:2a:b2:bc:62:ab:8d:7b:61:c2:
ed:a1:2c:16:30:7e:b6:c7:ef:c2:8d:48:db:65:ef:88:c2:ae:
3c:7a:52:62:8c:30:4f:cf:4a:cd:aa:46:cd:11:d0:fb:40:4b:
d2:e9:81:27:6f:88:9f:cc:4c:af:27:c2:63:5c:47:87:40:88:
c8:03:67:fe:49:d9:96:26:f6:73:90:a1:29:21:97:bf:1b:f9:
64:6a:9f:7c:41:87:79:15:4a:06:23:66:80:56:62:aa:ba:0d:
ff:56:f3:87:92:23:08:f1:bc:b9:82:a9:d9:10:e1:b2:3d:97:
74:8a:e6:27:c7:8e:37:cc:10:79:05:ef:34:5e:42:58:d7:7d:
8d:74:6e:e0:32:1d:16:1b:d3:e4:88:ca:39:9b:db:b3:02:2a:
39:3b:49:5d:6f:53:ba:ee:09:d0:6e:fc:04:9a:32:d0:ec:f3:
a7:49:25:e8:fd:90:4d:d4:c5:ed:e5:99:13:d6:f3:86:0c:3b:
c4:10:a7:ec:a7:df:5a:5f:ef:89:8e:07:2b:e4:28:5e:91:cd:
e2:6b:52:24:79:7c:53:98:39:fb:b3:fc:47:08:66:43:36:aa:
96:6d:2d:73:ff:cb:4d:9a:7f:f8:31:fa:1d:54:65:80:fa:c2:
7c:38:13:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:54:16 2026 by rpki-client