Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136392e302f32342d3234203d3e20313939373431.roa
File: 3130392e3131302e3136392e302f32342d3234203d3e20313939373431.roa (raw, json)
Hash identifier: cC56+wA5xLochaRKHqKPhkqroLNzqf1yiJhYLIHckgY=
Subject key identifier: 48:C1:FC:A8:36:FA:91:A6:D3:C0:C7:06:17:01:95:32:B1:38:76:51
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 78A93E435B018D3EF5CE84844FF9894D504C7622
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136392e302f32342d3234203d3e20313939373431.roa
Signing time: Mon 10 Aug 2026 14:21:29 +0000
ROA not before: Mon 10 Aug 2026 14:16:29 +0000
ROA not after: Mon 09 Aug 2027 14:21:29 +0000
asID: 199741
IP address blocks: 109.110.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:a9:3e:43:5b:01:8d:3e:f5:ce:84:84:4f:f9:89:4d:50:4c:76:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Aug 10 14:16:29 2026 GMT
Not After : Aug 9 14:21:29 2027 GMT
Subject: CN=48C1FCA836FA91A6D3C0C70617019532B1387651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3f:14:74:37:00:28:28:56:cb:b9:6c:e6:eb:
22:46:63:a8:85:3d:f6:d4:21:50:92:82:1b:14:92:
cd:39:5c:db:be:86:25:dd:67:15:9a:91:fd:42:b6:
28:11:c3:ca:b5:2c:95:d5:84:68:29:d4:55:8b:27:
6b:e5:f1:0f:85:2a:39:01:b9:cd:d1:92:af:83:8b:
06:ff:9e:a3:e7:37:8a:90:f5:0d:ab:18:43:a8:2b:
30:49:b6:6c:0e:de:00:75:20:eb:dd:64:af:b3:5a:
9f:74:58:92:26:b7:0a:da:de:c8:68:fb:12:b3:10:
7a:fa:4e:a5:93:b6:68:c2:e6:2e:a1:32:7b:69:1c:
5c:79:81:88:c3:f6:7e:47:0f:2f:8b:3a:44:a0:ff:
f4:5d:d9:86:6b:d2:b5:9a:ef:a8:75:d1:74:5d:7d:
66:4d:56:ed:4c:45:93:4c:c8:e9:44:78:a8:06:16:
27:1e:38:e2:f3:8f:fa:c6:cf:20:dc:90:fc:8b:34:
dd:6b:75:5d:e9:86:c2:c4:3e:84:90:5a:ef:95:b0:
a3:8f:71:f8:bb:0e:d2:f4:80:a2:3a:22:bf:e9:b3:
ed:cf:e6:56:04:e2:80:17:8c:72:07:d0:75:f0:9c:
f4:65:ae:d4:d9:cc:92:4a:59:0f:72:e7:89:1e:3c:
b2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C1:FC:A8:36:FA:91:A6:D3:C0:C7:06:17:01:95:32:B1:38:76:51
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136392e302f32342d3234203d3e20313939373431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.169.0/24
Signature Algorithm: sha256WithRSAEncryption
90:c6:48:2e:ce:0a:4e:f2:19:54:01:54:bd:1f:e9:64:21:3c:
2a:48:49:f5:9a:3f:4d:f8:ad:5b:e3:d3:28:f2:76:c2:69:a6:
f4:e8:ce:4f:06:25:89:d6:10:e0:5d:dc:db:84:08:c9:7f:7e:
11:ee:61:7d:6d:e8:15:e0:25:2c:45:ad:8f:aa:9f:cd:a4:79:
86:71:bf:9f:c5:81:1e:f2:74:14:54:cb:83:45:0c:f1:04:28:
40:18:b9:09:ae:e7:eb:e9:d5:96:29:ec:4e:75:b0:29:c3:a9:
21:e1:bf:0b:01:12:89:0d:70:42:9f:04:0a:60:34:4e:46:c8:
fd:b8:16:71:11:b2:ab:ea:87:14:a2:5e:b4:d8:f1:19:59:fd:
46:17:fa:e4:76:5f:c1:f8:5e:37:6d:2a:7c:a2:8f:34:4d:75:
b0:e7:3f:3a:1b:2d:63:31:a3:6d:30:01:e8:8b:f3:63:6f:ea:
f0:9e:43:fb:f4:34:d6:73:85:1e:37:26:48:c7:7b:2f:c9:d9:
ac:2f:1b:92:ae:cd:7b:7b:79:7e:d4:33:e5:14:28:98:54:9d:
b1:d8:8f:17:fe:06:77:07:f4:6d:99:00:67:c9:e3:d8:c9:72:
67:a7:fe:d4:86:19:ec:16:6f:ab:8a:41:81:41:5e:cb:0c:8c:
7c:db:2c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 10:34:00 2026 by rpki-client