Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137352e302f32342d3234203d3e20313534303733.roa
File: 3130392e3131302e3137352e302f32342d3234203d3e20313534303733.roa (raw, json)
Hash identifier: NBihVeYdD4eqb/UBYSgabd5qYH1Y3Gejir2hzDqcWSk=
Subject key identifier: 52:FF:01:36:A9:38:DC:0B:99:D4:7C:6C:6D:57:52:D7:14:A2:F6:9B
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 4FAC5F7CA22CF6903AF11133F8A456A9FE5BE6F0
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137352e302f32342d3234203d3e20313534303733.roa
Signing time: Tue 25 Aug 2026 01:06:38 +0000
ROA not before: Tue 25 Aug 2026 01:01:38 +0000
ROA not after: Tue 24 Aug 2027 01:06:38 +0000
asID: 154073
IP address blocks: 109.110.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 08:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ac:5f:7c:a2:2c:f6:90:3a:f1:11:33:f8:a4:56:a9:fe:5b:e6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Aug 25 01:01:38 2026 GMT
Not After : Aug 24 01:06:38 2027 GMT
Subject: CN=52FF0136A938DC0B99D47C6C6D5752D714A2F69B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:48:eb:90:dd:8e:57:ea:d9:4a:4a:a9:db:fb:
81:fd:93:3b:87:fb:39:d1:90:58:1f:15:15:81:9a:
30:11:ae:43:4c:4f:47:32:5f:47:11:44:a2:fe:ef:
cc:e0:b5:d8:4d:d3:7c:59:24:23:cc:42:c4:c0:f5:
85:bb:f6:71:8e:b3:d6:41:73:f9:2e:99:35:de:01:
7f:c2:c1:2b:79:01:8c:72:67:1d:b5:2c:ce:f4:99:
26:21:e3:c8:69:a2:42:7e:58:d2:51:ec:67:44:3e:
f7:e3:ff:47:87:f1:5e:08:1f:58:92:0d:6c:75:0d:
a7:95:77:97:0e:a9:a1:35:82:eb:24:7e:d1:ff:c7:
d9:b2:4a:5d:12:de:5b:f7:13:cb:5d:1f:5e:bf:69:
58:47:f6:c2:11:f0:e9:bd:df:44:d8:40:f8:07:a9:
7e:a1:49:a7:d5:4a:4c:b5:ca:e6:72:39:64:50:0d:
10:af:77:da:0a:2a:55:19:76:0b:77:87:d0:3f:14:
4e:dc:27:27:b3:97:48:89:13:89:f7:04:91:ed:ad:
bb:44:ea:04:22:5f:94:0d:a8:04:cb:d1:6d:64:61:
4f:28:b9:8f:39:f8:87:ed:51:35:dd:18:36:d7:bc:
c8:44:2f:a5:59:95:a4:5e:e3:64:7f:a2:ba:54:a2:
7a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FF:01:36:A9:38:DC:0B:99:D4:7C:6C:6D:57:52:D7:14:A2:F6:9B
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137352e302f32342d3234203d3e20313534303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.175.0/24
Signature Algorithm: sha256WithRSAEncryption
38:21:49:11:03:85:96:5d:f0:16:c2:94:71:82:de:e0:6a:b2:
1c:73:cb:c3:13:0e:39:4b:bc:90:be:96:d8:c7:79:21:80:ab:
15:47:94:a1:fc:00:99:2b:65:45:8d:24:31:7c:82:21:a2:01:
af:41:11:a2:e0:fe:ee:3f:16:04:74:37:f4:b9:a6:e0:d5:ab:
1c:c5:6b:82:4c:8f:19:93:d8:04:24:af:bb:92:17:98:bd:01:
0d:f6:0f:4d:b3:1c:65:47:ce:30:0e:d0:44:c2:d6:0b:35:3a:
aa:ad:5c:04:59:c8:81:11:f1:b0:ea:f0:d2:0e:a2:20:63:15:
ee:48:cc:58:d8:40:ae:bd:f9:a3:ff:e4:21:d8:48:36:5a:cd:
83:d6:01:a9:c9:6c:e1:38:9d:53:1a:d0:28:7d:1a:57:dc:97:
99:5e:44:c2:f2:03:30:8a:72:72:d8:a7:b8:36:29:da:ff:33:
19:d6:8b:fa:dc:2e:71:ab:8b:5b:1f:88:15:69:5e:58:3d:2a:
17:82:2e:23:83:04:c0:2d:4f:b7:c0:03:66:ba:a8:a6:f3:50:
8b:a1:87:98:fa:b5:d0:d6:77:85:16:57:fd:52:e3:37:9f:6f:
4b:e7:d7:f8:7c:f6:c7:10:85:20:43:fc:b3:ba:87:12:bf:8e:
f4:94:f4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 23:30:45 2026 by rpki-client