Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137302e302f32342d3234203d3e20323134363737.roa
File: 3130392e3131302e3137302e302f32342d3234203d3e20323134363737.roa (raw, json)
Hash identifier: nsfJF0AJcfwv76ALA533M9/Olrw8m68akIDQ7b/W1B4=
Subject key identifier: 7F:5B:57:6D:53:D7:A9:13:BB:71:E8:A8:03:F3:B4:88:86:65:90:68
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 2C8F197C94CBC33BE34836FCA909F9D37ACF0C7D
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137302e302f32342d3234203d3e20323134363737.roa
Signing time: Sun 18 Oct 2026 10:49:37 +0000
ROA not before: Sun 18 Oct 2026 10:44:37 +0000
ROA not after: Sun 17 Oct 2027 10:49:37 +0000
asID: 214677
IP address blocks: 109.110.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 21:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:8f:19:7c:94:cb:c3:3b:e3:48:36:fc:a9:09:f9:d3:7a:cf:0c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Oct 18 10:44:37 2026 GMT
Not After : Oct 17 10:49:37 2027 GMT
Subject: CN=7F5B576D53D7A913BB71E8A803F3B48886659068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fd:35:d3:dc:3d:fe:fb:b6:1c:b4:21:86:2a:
59:c2:67:20:09:dc:1e:0b:6d:f9:10:f7:0f:00:64:
ae:4a:76:00:aa:d7:48:27:dd:fc:08:52:b3:4e:15:
77:19:da:4e:17:34:a4:62:34:b6:53:9f:02:0c:30:
38:04:db:ed:46:b1:b9:2a:96:db:ad:a1:28:7f:48:
11:f7:95:d8:83:91:ef:36:f7:81:59:e4:78:ef:85:
80:f2:3e:b2:ac:0a:0f:52:95:0f:4e:ab:a1:8b:eb:
bf:1f:2e:a4:d0:12:e9:d1:62:c1:24:35:89:b2:6b:
5b:77:16:25:c7:82:e1:24:ca:11:da:a3:64:a0:53:
a5:ad:73:09:df:6a:7d:ce:3a:fe:da:b5:b1:93:2c:
be:be:50:e5:2d:17:c6:11:22:8c:07:2f:8c:a2:f1:
49:26:d6:43:d7:0e:01:41:bc:e2:bd:f4:4d:36:42:
f5:ea:c8:82:75:bc:d9:f2:06:62:02:43:51:3c:41:
f9:22:01:c2:6e:75:f4:a4:a3:c4:35:12:a0:03:49:
2d:bd:53:a8:5f:cf:f4:dc:81:6e:a3:9c:b0:94:7c:
9d:b7:89:1c:b5:2f:be:87:8c:64:d2:ff:d3:be:dc:
cb:ca:a4:2b:f2:72:22:1b:ed:1e:fe:9a:49:69:89:
d6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5B:57:6D:53:D7:A9:13:BB:71:E8:A8:03:F3:B4:88:86:65:90:68
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137302e302f32342d3234203d3e20323134363737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.170.0/24
Signature Algorithm: sha256WithRSAEncryption
79:22:e5:28:c0:07:ab:a5:ef:b9:90:9c:b9:b1:4b:0e:4b:ea:
eb:3b:d2:9a:cd:5b:34:7e:e8:05:9f:7f:37:00:f0:ea:32:54:
41:61:19:c2:20:2c:6b:8a:1f:58:ba:ab:27:ce:bf:83:14:41:
ba:69:cf:25:9b:ac:f0:cd:f1:b0:e2:76:ed:dd:e3:7c:c1:fb:
42:30:a0:55:51:2d:3d:10:44:29:da:98:a5:73:d4:cf:2d:93:
e1:ae:fd:7b:fe:a0:79:40:d3:24:68:a3:67:bb:57:04:e1:77:
ef:dd:f0:1c:af:82:06:9e:55:f1:15:dc:a3:ac:c6:9a:91:fa:
57:98:b0:0c:49:37:20:2a:f3:ae:4c:34:57:0d:3c:f1:92:72:
23:5d:60:a8:a5:82:56:d6:fb:d7:62:b6:58:50:b3:16:7f:ca:
5a:8a:b1:9f:d3:4b:6f:d5:6b:78:3d:16:dc:86:49:88:8a:d3:
38:de:b9:3d:3d:9f:cf:6b:8f:30:14:82:f1:a9:41:9a:32:f6:
09:84:4b:66:34:2d:62:69:8e:ae:e6:a8:bd:55:d3:52:ed:a6:
03:5f:5a:62:28:ce:89:d5:1d:12:9a:fd:35:40:80:09:f2:b1:
0e:56:c3:13:fa:89:d6:2b:5f:ba:c0:7a:5e:b4:63:59:35:e6:
23:76:9e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:25:31 2026 by rpki-client