Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137372e302f32342d3234203d3e20343031333632.roa
File: 3130392e3131302e3137372e302f32342d3234203d3e20343031333632.roa (raw, json)
Hash identifier: QWx2oSa+SURMiPWavZEol87vxYxrtieV2rA7Os6BnT0=
Subject key identifier: CD:A8:D1:1E:35:66:8A:42:FD:84:82:1D:45:09:F7:C9:EB:6D:B1:A4
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 5854164EC59F960A5758AC6265E2D47D730AC516
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137372e302f32342d3234203d3e20343031333632.roa
Signing time: Wed 12 Aug 2026 07:43:00 +0000
ROA not before: Wed 12 Aug 2026 07:38:00 +0000
ROA not after: Wed 11 Aug 2027 07:43:00 +0000
asID: 401362
IP address blocks: 109.110.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 08:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:54:16:4e:c5:9f:96:0a:57:58:ac:62:65:e2:d4:7d:73:0a:c5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Aug 12 07:38:00 2026 GMT
Not After : Aug 11 07:43:00 2027 GMT
Subject: CN=CDA8D11E35668A42FD84821D4509F7C9EB6DB1A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:c0:ae:8f:3c:bf:68:7d:1a:13:a7:f1:1f:
6c:b0:d9:72:24:9c:25:9a:6e:22:39:04:8b:bf:7c:
ab:35:09:fe:30:fd:6b:94:cc:06:6d:cd:46:26:a8:
8b:c8:3f:97:76:d3:2d:f0:44:69:e2:e1:04:e2:40:
3b:2f:32:48:20:a8:3d:97:16:09:50:9c:2e:db:5d:
b5:5d:4e:21:d3:d6:a4:49:bc:f2:5e:63:33:66:4d:
51:5c:21:ae:89:63:e7:02:34:59:1f:41:ae:0d:23:
43:9e:3b:40:57:e9:48:34:05:1f:4c:ba:fc:4e:51:
04:55:77:67:6b:04:99:25:e7:20:57:ee:e2:af:59:
02:66:66:8d:a1:3e:24:1b:e0:0f:d0:7e:ca:78:a2:
f2:77:4c:42:1c:b5:1b:b2:e3:19:b9:17:b3:ae:d9:
fb:13:78:94:85:0e:80:e8:a4:3c:50:17:42:87:70:
21:f8:9d:51:43:2d:b7:72:fb:4f:84:eb:bb:83:f9:
0f:46:af:af:b5:63:3e:b0:68:b7:e0:20:a6:46:d1:
ae:91:bd:11:fc:ae:1f:a5:ce:22:78:f8:5c:58:38:
28:8d:d7:3a:82:b3:e4:bf:67:3e:4b:89:70:64:05:
6f:da:0f:fd:24:e4:a3:6d:86:7e:a9:d3:fc:81:94:
e5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A8:D1:1E:35:66:8A:42:FD:84:82:1D:45:09:F7:C9:EB:6D:B1:A4
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137372e302f32342d3234203d3e20343031333632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.177.0/24
Signature Algorithm: sha256WithRSAEncryption
43:49:ac:0a:68:ea:bb:0d:47:f4:e2:01:bb:72:ea:9c:21:76:
cc:ce:08:df:84:67:b7:0a:d4:15:97:d8:cf:af:5f:c0:e5:6d:
28:28:e0:7a:6b:c6:97:5d:b8:a0:42:9a:08:43:1d:a1:09:25:
af:6e:6d:45:61:7a:91:a2:c1:d9:c4:2e:ad:93:28:ec:8c:21:
14:e8:59:c8:ab:81:a2:ce:39:b0:09:90:de:7a:8b:12:e3:ff:
e6:ac:5d:03:ce:7f:c8:a2:8a:00:ea:d0:3f:ed:f5:e7:36:cb:
e7:61:6c:ac:12:6b:61:49:62:03:5f:7a:76:2b:13:df:66:25:
b4:17:f9:0b:4d:51:7e:e8:98:d9:88:b7:0f:83:10:06:60:fc:
35:df:ab:e7:7d:95:47:a4:de:88:57:72:b7:95:5c:1a:bc:f1:
89:80:5a:8b:48:74:23:eb:8e:ab:8b:8b:b1:0a:5d:29:d3:4b:
bd:34:1e:b4:5d:ad:ab:5d:23:a4:8e:ee:8a:cf:15:58:19:74:
b9:b9:20:2a:1f:4f:f3:80:a7:c9:6c:6e:c6:10:ab:c7:4b:77:
2a:59:23:b5:92:00:15:ec:75:bf:3c:7b:5f:a3:30:9a:fe:56:
9d:26:96:4c:c3:cb:cf:5a:b4:51:34:4f:d6:c8:53:e8:c7:f6:
2d:3e:00:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:53:09 2026 by rpki-client