Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136372e302f32342d3234203d3e203239383032.roa
File: 3130392e3131302e3136372e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: KE0usK5KmurjiWFO6SkOR4MG+OSwoJQkU5N9SDI5ctM=
Subject key identifier: 80:AE:BB:15:03:6A:F6:2F:CB:45:9E:B6:19:E7:BA:D2:AD:EF:A7:50
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 3872928199B54332A1A729B17D9E5A7B550AD358
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136372e302f32342d3234203d3e203239383032.roa
Signing time: Mon 07 Sep 2026 17:49:33 +0000
ROA not before: Mon 07 Sep 2026 17:44:33 +0000
ROA not after: Mon 06 Sep 2027 17:49:33 +0000
asID: 29802
IP address blocks: 109.110.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:72:92:81:99:b5:43:32:a1:a7:29:b1:7d:9e:5a:7b:55:0a:d3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Sep 7 17:44:33 2026 GMT
Not After : Sep 6 17:49:33 2027 GMT
Subject: CN=80AEBB15036AF62FCB459EB619E7BAD2ADEFA750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:85:33:00:89:4f:d2:58:e3:9d:b6:a3:44:65:
e1:ec:3e:98:9c:8e:1e:d5:6f:4e:ae:86:fe:ba:14:
54:73:18:86:1a:f8:33:3a:f4:ca:44:45:f7:81:0e:
55:5f:71:05:f6:7c:ea:3f:90:b0:cd:c7:77:3e:d6:
c2:5c:6e:82:65:2e:a6:96:63:f9:2b:1d:5e:f8:61:
fa:12:ab:76:d5:42:f4:50:b0:07:a3:9e:44:9f:4e:
25:33:7e:c3:ab:b4:a1:f7:2c:7f:ff:d0:a7:2a:ef:
d9:27:f3:10:d2:3d:9a:2e:ab:9c:5c:5a:34:19:b3:
cd:1d:24:1a:01:f7:cc:7a:f9:04:c4:53:22:5c:c9:
da:55:37:a5:80:74:b5:f3:f4:e4:86:47:93:c2:6a:
ff:34:a6:70:be:08:de:c9:aa:25:9d:2c:26:a0:7b:
e0:dc:a0:79:a8:ae:25:c3:a8:07:25:4c:47:28:c9:
bc:ee:41:c2:9b:1d:ea:05:1d:30:10:f7:4f:39:c2:
37:18:27:63:a3:31:08:6e:4e:09:f2:12:e4:47:d5:
dd:80:f1:74:d0:ac:28:ce:00:10:0d:2e:2c:00:9e:
95:8a:89:dc:18:81:b3:ee:7b:2c:a0:39:2d:92:37:
74:ed:dc:15:29:65:e7:e4:93:bb:7c:73:4c:29:da:
5a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AE:BB:15:03:6A:F6:2F:CB:45:9E:B6:19:E7:BA:D2:AD:EF:A7:50
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136372e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.167.0/24
Signature Algorithm: sha256WithRSAEncryption
02:01:25:ec:f1:70:8f:5a:a3:06:03:02:1b:6a:ce:30:2a:ff:
8f:37:e2:38:06:97:fc:d3:83:0c:e2:2d:5a:37:eb:2f:f5:e6:
b0:e0:1a:45:77:85:64:5f:0a:8c:1e:a6:92:06:dc:a5:ba:f2:
b2:27:ce:d9:c8:5e:ab:ea:5c:60:2f:76:3a:1e:f9:1a:60:10:
cf:cf:48:bc:12:b1:b8:30:42:5b:e8:ba:2a:42:b8:dd:ee:1f:
7c:97:22:60:4c:7f:5d:9d:d1:d5:f4:bc:0d:fd:6f:ea:66:6a:
db:f9:05:a3:44:8a:ea:ba:70:7b:63:1d:6f:cd:b8:77:a7:d5:
0f:35:6f:56:9b:43:9f:e1:66:95:eb:b7:ac:b7:97:b2:56:60:
88:89:37:89:f3:87:66:7d:ef:18:fa:20:a2:e0:fa:fa:e6:65:
53:b5:ad:82:62:c5:52:da:dc:25:76:a2:20:c1:14:80:43:2c:
27:64:de:34:be:c6:72:93:e0:f1:71:0d:db:7e:91:5f:82:89:
e6:4c:48:55:8a:1e:a6:d2:1e:97:39:63:0d:f7:a1:45:62:4c:
c6:d2:80:ad:1c:08:02:d2:c1:d3:c4:e7:02:e0:b2:38:5c:80:
70:9b:06:9f:cd:59:2c:60:68:57:a9:b4:99:40:39:23:7b:17:
85:72:ca:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 05:34:03 2026 by rpki-client