Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136332e302f32342d3234203d3e20323030323630.roa
File: 3130392e3131302e3136332e302f32342d3234203d3e20323030323630.roa (raw, json)
Hash identifier: tJ1jfsNAjK1ABQnF/crLJwTG2686tVvCXwTEzaTrI6I=
Subject key identifier: CF:ED:C9:44:99:2D:42:B3:A7:12:24:DA:26:D5:A1:9F:42:2D:3A:3F
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 12332F60AC67F86A077A34A0B4A68050871E2AA3
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136332e302f32342d3234203d3e20323030323630.roa
Signing time: Fri 11 Sep 2026 21:49:35 +0000
ROA not before: Fri 11 Sep 2026 21:44:35 +0000
ROA not after: Fri 10 Sep 2027 21:49:35 +0000
asID: 200260
IP address blocks: 109.110.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:33:2f:60:ac:67:f8:6a:07:7a:34:a0:b4:a6:80:50:87:1e:2a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Sep 11 21:44:35 2026 GMT
Not After : Sep 10 21:49:35 2027 GMT
Subject: CN=CFEDC944992D42B3A71224DA26D5A19F422D3A3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dd:34:cb:28:4d:ad:27:30:fd:eb:14:78:5d:
4d:19:e3:c5:36:e6:eb:ed:a1:c2:5a:55:08:c7:58:
85:ab:9d:7e:02:8c:6e:89:92:df:dd:d6:45:cc:5b:
be:c6:ad:f7:43:c7:ee:6b:1c:4e:84:44:9e:52:a4:
76:50:31:17:3c:f5:0c:84:ea:18:54:3f:28:3a:fc:
92:11:09:a8:ff:85:3a:24:fe:21:cc:08:7f:14:7f:
e9:5f:0f:4e:fa:1f:26:c3:43:56:35:7c:5a:82:6d:
f1:50:c5:0b:30:9d:a7:0f:5e:b7:49:03:e4:d3:ea:
36:94:72:74:a5:31:10:42:b9:e4:da:b3:fe:16:6d:
c2:7c:39:44:96:f6:cc:90:80:b9:16:aa:1b:ca:a5:
60:b9:4d:93:50:71:8c:e0:c5:b9:9e:62:20:53:e8:
af:11:e4:5d:be:c4:91:73:66:28:87:b5:d0:12:55:
b0:5c:c0:6f:9d:a7:8d:d3:12:7c:63:c4:4b:2f:a1:
34:58:e9:38:24:8a:4e:86:b9:7e:f0:4b:d8:b2:94:
17:c5:64:86:ab:67:f0:f0:08:f2:7b:bc:81:5e:25:
29:ec:0d:2a:b1:b7:3d:76:da:30:57:27:26:bf:2d:
a2:fd:e5:c5:7a:df:b8:a2:75:4a:3a:f2:e8:51:44:
8c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:ED:C9:44:99:2D:42:B3:A7:12:24:DA:26:D5:A1:9F:42:2D:3A:3F
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136332e302f32342d3234203d3e20323030323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.163.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ef:c7:33:c8:2f:e7:ec:b4:76:68:c5:69:78:e1:ac:1d:e2:
ae:75:72:00:bc:0c:d2:00:eb:de:14:72:bb:2c:9c:ed:61:a0:
98:23:0a:ab:04:0f:bb:b6:60:54:bf:37:9c:ba:e2:a3:ce:4a:
8d:e7:2e:c8:8c:a9:4e:b6:0a:9a:2c:14:0f:8c:36:c4:cf:9c:
20:32:b8:63:87:88:89:4f:88:00:1c:ea:bc:6d:00:19:15:87:
fd:b5:79:18:5a:2d:37:95:8f:16:64:58:57:b0:74:59:91:a6:
15:6f:d5:a0:fe:0e:aa:66:6a:6b:2b:53:2d:5b:bb:78:e4:36:
86:4f:1f:d5:b6:d9:43:e8:ad:36:bd:ba:d2:21:01:77:76:7f:
1f:fb:cf:da:81:1e:74:a5:d6:aa:17:8e:d3:a9:ee:cc:e4:67:
fe:15:77:d4:bc:c4:5c:aa:5e:00:b1:d7:bd:86:30:a7:e9:23:
84:53:13:d3:a9:32:9a:76:61:49:5b:f8:bc:62:8a:2b:3a:44:
5c:37:8f:57:48:f9:e1:53:28:44:af:05:31:7b:1a:d8:f2:64:
70:f7:10:04:49:ff:f0:51:66:b3:42:2c:93:f0:df:d7:cc:73:
e1:fa:7a:8a:8f:15:ba:65:4f:5e:d0:10:6c:5e:36:5a:5e:15:
7f:7e:b7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:09:21 2026 by rpki-client