Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137322e302f32342d3234203d3e20323135343430.roa
File: 3130392e3131302e3137322e302f32342d3234203d3e20323135343430.roa (raw, json)
Hash identifier: /g41Y1lKGBBLIMozqqMvavt99czB/mnj/UD4hMB/MX4=
Subject key identifier: 07:9D:5A:56:E1:6C:4D:AB:58:80:0E:C9:4E:D6:CB:68:1E:46:07:8B
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 7B5A2B8F416C287206ED9047BBCFF13EFBAF6B6C
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137322e302f32342d3234203d3e20323135343430.roa
Signing time: Wed 08 Jul 2026 17:49:03 +0000
ROA not before: Wed 08 Jul 2026 17:44:03 +0000
ROA not after: Wed 07 Jul 2027 17:49:03 +0000
asID: 215440
IP address blocks: 109.110.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:5a:2b:8f:41:6c:28:72:06:ed:90:47:bb:cf:f1:3e:fb:af:6b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jul 8 17:44:03 2026 GMT
Not After : Jul 7 17:49:03 2027 GMT
Subject: CN=079D5A56E16C4DAB58800EC94ED6CB681E46078B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:1c:3f:2a:c2:f8:89:0e:86:48:7a:09:41:
8b:26:0f:34:a9:f8:b0:fd:de:ef:7e:de:a9:a4:bf:
b9:2a:58:1f:7c:83:94:e6:98:0a:db:7a:a1:bb:87:
46:2d:e1:77:c1:d9:58:79:1d:03:f0:43:62:6b:8f:
92:dd:38:de:eb:b2:30:43:00:8c:66:fa:09:c8:fb:
86:4c:4d:36:60:99:66:88:f5:7b:0a:03:1c:2e:e8:
ba:a1:99:7b:f1:3b:08:71:62:0d:ad:a7:c2:16:eb:
6f:b8:1c:94:1f:68:d0:19:96:f0:d9:66:3b:f0:5e:
3c:3e:94:72:a1:48:63:57:50:df:41:2a:df:5e:11:
bb:56:87:2d:0d:9a:c9:f3:2c:7e:17:f1:1a:ad:f4:
9a:3e:a6:f1:f2:37:05:b6:7c:52:01:3a:b8:13:84:
53:a3:74:bd:01:25:4d:1c:ac:52:92:ee:c3:3d:d6:
a8:da:90:4d:0d:0c:d7:4a:d3:62:34:48:28:f6:ec:
8b:fe:65:e0:5c:3b:26:5b:74:ec:16:d9:70:ee:ff:
d4:ee:b4:88:4b:92:0e:4a:3b:a2:50:34:f9:46:4d:
c5:ee:90:e6:23:28:6c:3e:0e:b1:81:71:f5:46:1b:
74:be:ea:d9:ca:b5:9c:31:47:22:cd:4c:3b:d5:83:
b8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9D:5A:56:E1:6C:4D:AB:58:80:0E:C9:4E:D6:CB:68:1E:46:07:8B
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137322e302f32342d3234203d3e20323135343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.172.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:e2:ca:d9:3f:e8:32:56:25:4d:f3:0a:e4:0e:f9:00:41:e4:
ff:2d:c5:a2:5d:7f:09:c7:ff:12:54:8c:07:b8:9c:7d:31:5f:
dc:4a:5f:a2:bc:5b:46:c9:8e:e9:46:6e:82:b9:70:be:77:a3:
0f:38:24:7c:cd:84:3c:4c:c8:d3:fc:17:f0:0d:d0:b7:50:61:
b0:13:dc:d4:56:dc:bb:01:ae:9d:10:57:63:5f:40:34:d8:38:
f6:24:d9:31:a0:90:a6:66:c1:08:cd:06:d9:d9:d4:91:10:34:
f9:9c:51:76:68:40:81:55:e7:f0:00:fe:e5:3b:48:b3:9a:ca:
aa:9e:c0:3a:06:19:71:18:a1:74:e6:2d:63:fe:fa:f6:f4:75:
62:ad:b2:f1:43:ba:e8:f7:de:9d:d4:5d:63:73:8d:0b:d3:a9:
b3:88:32:4c:65:fd:de:62:23:65:50:8d:a3:98:20:83:1c:01:
cf:c3:5a:c3:9a:af:24:5d:fe:fc:f4:b6:de:ac:a4:9f:85:46:
31:83:87:e7:f3:65:3f:14:97:be:92:86:6a:8d:13:54:7e:85:
90:22:52:ea:b5:34:d1:61:e9:3b:38:1c:16:7b:1c:78:d0:ba:
45:04:8c:dd:ea:3a:8d:eb:d8:2a:e7:95:15:66:50:b5:16:d8:
35:f7:9f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:55:31 2026 by rpki-client