Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137342e302f32342d3234203d3e20323132363039.roa
File: 3130392e3131302e3137342e302f32342d3234203d3e20323132363039.roa (raw, json)
Hash identifier: ahK7WrjYj1+qoOYBn0pBAm53ANhjvmp5z3nf/4yuOhE=
Subject key identifier: 4B:02:83:82:A1:1B:01:DA:29:0B:EB:92:43:25:D6:94:B9:09:37:69
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 373BFE6A34BFD6045F2A0541EAE73B85424FE79D
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137342e302f32342d3234203d3e20323132363039.roa
Signing time: Thu 30 Jul 2026 09:32:24 +0000
ROA not before: Thu 30 Jul 2026 09:27:24 +0000
ROA not after: Thu 29 Jul 2027 09:32:24 +0000
asID: 212609
IP address blocks: 109.110.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 08:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:3b:fe:6a:34:bf:d6:04:5f:2a:05:41:ea:e7:3b:85:42:4f:e7:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jul 30 09:27:24 2026 GMT
Not After : Jul 29 09:32:24 2027 GMT
Subject: CN=4B028382A11B01DA290BEB924325D694B9093769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c5:d2:8c:bf:37:a6:0c:b9:29:0c:a4:3b:25:
82:60:f6:e8:26:24:77:89:b0:78:0a:3f:c1:59:0c:
01:f6:03:76:95:eb:03:43:fa:7e:b6:e4:50:5b:82:
2e:cb:c2:d8:1b:28:d9:e3:ca:cf:8e:89:71:98:9b:
f4:66:a0:42:2f:a8:e5:05:0f:78:17:6f:16:38:7c:
5d:d7:4c:73:37:12:e0:79:d9:39:5b:3c:3d:46:61:
21:83:81:4b:dd:3c:d9:85:43:e6:47:12:a0:2b:9e:
cc:7e:32:38:ea:33:40:e1:66:a2:42:ee:c9:91:0b:
c1:0e:ec:05:a6:15:4b:f3:38:77:64:c0:bf:d5:61:
c3:93:af:b2:29:75:d0:07:70:0c:f0:9e:e7:81:83:
f1:56:60:11:35:63:b8:54:f3:bb:ba:c3:80:ca:68:
dd:1b:17:e2:34:ae:69:8b:02:b8:3b:d2:57:9b:c6:
db:0a:5d:bf:46:27:4a:8f:c2:7d:70:74:83:54:18:
4a:4c:6b:d0:a0:c5:c7:dd:6d:6b:89:e4:f3:c5:1b:
39:8f:17:1f:08:22:72:d1:18:c4:85:76:95:ef:49:
dc:f6:f6:db:c0:e8:89:62:d6:7f:a6:8f:90:1c:64:
b1:8b:e0:16:e2:bc:a4:ec:77:f1:aa:fd:50:f3:4c:
ec:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:02:83:82:A1:1B:01:DA:29:0B:EB:92:43:25:D6:94:B9:09:37:69
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137342e302f32342d3234203d3e20323132363039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.174.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:60:93:f6:a1:18:6f:6e:6b:1b:af:ca:cd:34:b2:69:0e:a1:
01:03:35:2b:24:c6:ff:c0:c0:bf:0f:bd:3d:cd:bc:0c:c6:6c:
75:9c:27:57:7a:d3:67:1c:92:18:f1:5d:29:15:c8:46:30:09:
a4:ad:00:66:12:d4:eb:49:ee:dd:9b:34:5c:1a:39:a6:aa:8f:
25:38:91:a2:57:69:27:6e:c8:26:ff:ae:c5:c1:70:88:5f:28:
50:65:8f:a3:5f:30:96:4a:d6:dc:3b:fa:04:6a:2e:72:6e:ef:
19:96:9b:e2:02:17:6a:74:f3:f5:9e:e3:b3:7e:e1:e6:1d:85:
96:66:45:1a:e6:b7:fd:e0:b9:2e:45:07:a2:dd:94:51:c6:e5:
b2:08:77:27:60:3d:c5:4a:66:2d:1b:79:0b:a8:2e:0d:35:c4:
f3:a3:27:51:72:41:51:c8:e2:ed:5f:d5:c6:c3:de:c4:fd:44:
45:9e:79:15:55:3c:57:24:6c:1c:12:c7:8f:1a:7a:41:bc:ce:
2e:c3:dd:a2:c6:b4:f0:0a:c7:55:6f:59:61:c6:42:9f:db:0b:
96:b8:b3:dc:b8:51:56:b3:33:6a:cc:6f:a7:22:fa:ec:ee:0a:
66:31:90:e6:5b:d7:fe:dc:59:36:0f:2b:db:35:fe:f1:d0:32:
c0:52:fa:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 23:30:46 2026 by rpki-client