Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32342d3234203d3e20313334343934.roa
File: 3130392e3131302e3137362e302f32342d3234203d3e20313334343934.roa (raw, json)
Hash identifier: JPZagNW/kNFz1NOXCt8GM3yh3NJ6QpL32Si5OZ75Ffc=
Subject key identifier: C8:4A:35:7A:C5:D4:86:2A:DE:CF:1A:A4:9F:53:03:26:80:68:53:AD
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 77953761E09FB2D70D83D2B275FC01333C194B58
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32342d3234203d3e20313334343934.roa
Signing time: Wed 05 Aug 2026 11:27:35 +0000
ROA not before: Wed 05 Aug 2026 11:22:35 +0000
ROA not after: Wed 04 Aug 2027 11:27:35 +0000
asID: 134494
IP address blocks: 109.110.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:47:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:95:37:61:e0:9f:b2:d7:0d:83:d2:b2:75:fc:01:33:3c:19:4b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Aug 5 11:22:35 2026 GMT
Not After : Aug 4 11:27:35 2027 GMT
Subject: CN=C84A357AC5D4862ADECF1AA49F530326806853AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ee:39:c1:75:ff:be:b9:ae:3a:88:15:66:3f:
91:34:12:57:0d:23:98:4d:aa:eb:18:9b:fe:03:2b:
8c:51:92:45:09:d2:3d:13:c1:22:73:09:10:0e:2d:
55:39:15:7e:ca:3c:6f:e1:3d:33:4b:83:6e:6e:1b:
ee:a6:2b:81:f5:36:f8:27:8c:73:79:88:e9:ec:c0:
17:0e:30:72:a8:96:fe:2a:05:7b:60:1f:7e:03:30:
64:93:ef:c3:a1:3d:29:8c:bb:90:ac:38:51:c0:63:
7b:08:9c:0f:21:18:ee:85:be:82:1d:ea:3a:05:8e:
85:d0:99:7b:aa:c9:32:7d:29:d4:19:0b:25:92:0b:
b5:31:1e:34:e7:e9:95:04:e8:41:91:89:c6:d7:a3:
97:ee:aa:62:54:50:de:89:e4:08:c8:fd:19:bb:a7:
ee:da:aa:fb:8c:59:5b:94:72:6a:5d:82:ad:85:9e:
af:d2:fe:f6:b5:d5:54:b7:c1:c0:c2:8a:33:99:bb:
14:98:39:b9:6f:43:c1:70:66:2f:83:03:3a:23:55:
e2:0c:45:c0:b9:53:32:4e:20:93:1a:75:20:99:74:
41:a0:3c:1b:1f:20:85:0f:e5:c0:23:b4:99:1c:80:
e9:4c:37:d4:27:c9:dc:01:ec:50:37:a4:b5:62:f5:
85:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4A:35:7A:C5:D4:86:2A:DE:CF:1A:A4:9F:53:03:26:80:68:53:AD
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32342d3234203d3e20313334343934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.176.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:08:e6:d2:d4:84:26:dc:3c:84:18:3b:8c:48:61:53:bb:c2:
00:11:89:61:dc:85:74:c6:e7:ca:bc:87:83:1f:93:89:ee:72:
ba:a3:e7:3d:fd:b2:61:c5:a6:fa:ec:5f:5f:66:9d:70:90:8c:
6e:c8:d8:55:3b:1a:9d:30:62:8e:33:fb:29:02:70:62:3c:3b:
b7:b3:4e:24:72:02:b5:9d:e3:24:b2:f0:a1:46:55:42:3b:6b:
ae:64:88:5b:fe:68:b6:2b:cf:96:f9:1f:6a:64:81:fb:10:0c:
65:4e:f0:5d:47:0e:b8:54:ec:63:85:11:07:ac:6e:75:dd:46:
82:02:3d:e5:9f:3b:7e:57:d0:01:c4:38:58:87:3e:44:79:f5:
ad:5e:3a:46:85:ba:3d:dd:74:66:e9:9f:53:71:d6:ce:02:86:
da:57:a9:d4:1a:b9:bc:9a:0c:3c:d4:38:66:81:ae:5c:74:d8:
d1:b1:c5:85:d7:df:22:38:66:4a:a8:36:aa:04:ed:7b:89:71:
e1:66:86:7f:aa:d3:08:0c:9d:f7:45:97:63:a3:c8:bd:58:04:
4e:6c:be:83:90:06:47:4e:fe:11:9d:64:49:14:04:b3:b7:61:
34:43:84:16:01:f1:fb:7c:9d:72:41:ad:39:c5:a5:9a:85:3d:
3d:fc:71:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 00:29:11 2026 by rpki-client