Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136322e302f32342d3234203d3e20313937353238.roa
File: 3130392e3131302e3136322e302f32342d3234203d3e20313937353238.roa (raw, json)
Hash identifier: paBLh/KX4aQHKPcSQOQER2npLIaJsvGc7AMQ4NxLfoc=
Subject key identifier: CF:51:8E:BB:E3:0E:E7:2C:A8:2D:99:C2:D1:75:03:7B:C9:FF:06:BA
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 07E459A2F0761DCFC5E1B98B681AF0746BF44513
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136322e302f32342d3234203d3e20313937353238.roa
Signing time: Fri 17 Jul 2026 14:40:57 +0000
ROA not before: Fri 17 Jul 2026 14:35:57 +0000
ROA not after: Fri 16 Jul 2027 14:40:57 +0000
asID: 197528
IP address blocks: 109.110.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:e4:59:a2:f0:76:1d:cf:c5:e1:b9:8b:68:1a:f0:74:6b:f4:45:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jul 17 14:35:57 2026 GMT
Not After : Jul 16 14:40:57 2027 GMT
Subject: CN=CF518EBBE30EE72CA82D99C2D175037BC9FF06BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:c6:9e:ed:12:db:99:84:71:ab:4f:f9:54:
cb:86:38:4f:e3:c2:29:e9:27:43:90:94:da:a0:2c:
40:4c:1a:1a:aa:13:e4:c1:c8:d1:0a:26:7a:36:6b:
12:a8:3b:47:52:27:17:9d:a0:fd:68:df:36:8e:90:
80:6c:39:ec:60:e2:4e:bb:23:5a:66:1e:7a:97:a7:
7a:38:2a:f3:dd:2e:b6:22:78:34:89:aa:1e:cb:98:
b1:f1:47:44:35:1e:0a:c6:b8:fb:6f:89:46:4a:e2:
9f:58:d7:69:ec:9f:9a:99:d0:a1:b1:c7:69:c2:c7:
a2:f2:af:5c:88:a1:c2:c5:89:96:80:2a:a8:49:56:
fa:86:08:dc:f3:2a:da:64:49:d6:7e:86:fa:aa:c1:
da:4d:72:6f:c8:4d:87:96:bc:9b:67:32:f4:eb:9c:
24:19:a4:ad:5a:75:d0:48:0d:5d:7b:bf:eb:b4:9b:
ea:26:bd:e8:bd:e5:6d:40:4f:0d:69:d7:a9:c7:dd:
96:c9:ec:ca:4f:9c:6a:80:f6:67:bc:6b:45:00:14:
b8:49:90:ab:b1:4b:4b:73:8a:bf:50:9a:20:03:a2:
a5:a9:04:a0:16:e5:75:52:4e:70:d9:48:f9:5d:64:
cc:91:fc:b8:08:81:d4:92:c8:eb:fd:1c:7a:47:71:
5c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:51:8E:BB:E3:0E:E7:2C:A8:2D:99:C2:D1:75:03:7B:C9:FF:06:BA
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136322e302f32342d3234203d3e20313937353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.162.0/24
Signature Algorithm: sha256WithRSAEncryption
66:b8:63:9d:35:21:52:17:eb:4b:87:a7:93:2e:43:6e:07:97:
d0:d9:a0:78:f1:3a:89:6c:9a:e4:2b:0b:e8:93:1b:c9:87:6b:
4b:f5:3c:8f:61:dc:bb:d3:36:ff:c9:ac:66:ab:e1:fe:a6:49:
33:b3:61:3d:de:31:0c:70:e0:4c:6f:ba:06:63:a1:b1:c9:98:
07:0c:63:f2:82:48:95:24:d4:07:5f:0e:f3:11:c3:77:e5:c6:
c0:d4:31:01:84:b3:17:50:d0:26:46:44:42:af:d8:cc:2e:78:
e8:97:db:09:96:00:8f:52:a3:eb:6d:b9:fb:08:1f:2e:e3:f1:
62:6f:ff:a7:63:61:70:b9:ed:41:98:be:0a:b5:1f:34:fb:7e:
cc:42:5f:22:07:6e:4f:a9:bf:5f:d0:5f:60:b3:04:d4:df:75:
d8:d9:7b:a0:24:b4:ad:ff:0a:22:f2:d7:65:dd:9a:94:db:14:
f3:eb:d8:d4:8a:89:7f:d4:2b:c5:2b:ea:fd:e2:06:65:c8:4c:
17:22:17:ef:ab:b6:52:f2:83:45:2c:96:06:83:72:75:57:14:
57:4d:9a:d1:21:44:c8:59:d2:88:f9:ee:58:6e:c2:0e:7c:1d:
ef:c8:0e:25:87:d4:78:c0:68:41:be:c1:f0:19:03:51:68:f3:
80:63:9f:95
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUB+RZovB2Hc/F4bmLaBrwdGv0RRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNjA3MTcxNDM1NTdaFw0yNzA3MTYxNDQwNTdaMDMxMTAvBgNV
BAMTKENGNTE4RUJCRTMwRUU3MkNBODJEOTlDMkQxNzUwMzdCQzlGRjA2QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+/8ae7RLbmYRxq0/5VMuGOE/j
winpJ0OQlNqgLEBMGhqqE+TByNEKJno2axKoO0dSJxedoP1o3zaOkIBsOexg4k67
I1pmHnqXp3o4KvPdLrYieDSJqh7LmLHxR0Q1HgrGuPtviUZK4p9Y12nsn5qZ0KGx
x2nCx6Lyr1yIocLFiZaAKqhJVvqGCNzzKtpkSdZ+hvqqwdpNcm/ITYeWvJtnMvTr
nCQZpK1addBIDV17v+u0m+omvei95W1ATw1p16nH3ZbJ7MpPnGqA9me8a0UAFLhJ
kKuxS0tzir9QmiADoqWpBKAW5XVSTnDZSPldZMyR/LgIgdSSyOv9HHpHcVx9AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUz1GOu+MO5yyoLZnC0XUDe8n/BrowHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx
MzYzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzkzNzM1MzIzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAG1uojANBgkqhkiG9w0BAQsFAAOCAQEAZrhjnTUhUhfrS4enky5DbgeX0Nmg
ePE6iWya5CsL6JMbyYdrS/U8j2Hcu9M2/8msZqvh/qZJM7NhPd4xDHDgTG+6BmOh
scmYBwxj8oJIlSTUB18O8xHDd+XGwNQxAYSzF1DQJkZEQq/YzC546JfbCZYAj1Kj
6225+wgfLuPxYm//p2NhcLntQZi+CrUfNPt+zEJfIgduT6m/X9BfYLME1N912Nl7
oCS0rf8KIvLXZd2alNsU8+vY1IqJf9QrxSvq/eIGZchMFyIX76u2UvKDRSyWBoNy
dVcUV02a0SFEyFnSiPnuWG7CDnwd78gOJYfUeMBoQb7B8BkDUWjzgGOflQ==
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:49 2026 by rpki-client