Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137372e302f32342d3234203d3e203537303433.roa
File: 3130392e3131302e3137372e302f32342d3234203d3e203537303433.roa (raw, json)
Hash identifier: bwZd3LaiIkGGRKlxXgn8dauC+1lSYrW+AZ4LGFRJspg=
Subject key identifier: 0A:4F:4B:2D:64:B7:77:6D:F1:78:CB:72:8E:7B:B3:A5:CA:74:A2:BE
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 018ED3B4B71C51AD8A40AEF2B3B5E52BD37E925C
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137372e302f32342d3234203d3e203537303433.roa
Signing time: Thu 28 Aug 2025 04:58:18 +0000
ROA not before: Thu 28 Aug 2025 04:53:18 +0000
ROA not after: Thu 27 Aug 2026 04:58:18 +0000
asID: 57043
IP address blocks: 109.110.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d3:b4:b7:1c:51:ad:8a:40:ae:f2:b3:b5:e5:2b:d3:7e:92:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Aug 28 04:53:18 2025 GMT
Not After : Aug 27 04:58:18 2026 GMT
Subject: CN=0A4F4B2D64B7776DF178CB728E7BB3A5CA74A2BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b1:95:71:aa:77:b7:c0:ac:e6:eb:c5:6c:ed:
26:b9:6e:27:79:10:bb:b8:79:c0:6b:70:e7:d2:b7:
d7:21:d7:f8:87:1e:85:ff:76:cd:61:e7:20:55:27:
26:04:69:fc:7b:fb:23:ac:d3:42:16:08:87:ad:06:
21:8b:06:29:55:20:e7:36:18:36:3a:1d:de:b2:43:
d1:0f:de:a5:97:49:6f:ce:01:22:3c:5d:4b:39:ac:
c3:5b:ca:fd:81:00:94:9e:7b:92:fe:d5:5e:3b:f3:
c3:89:de:01:ab:a2:12:c5:9c:9a:d4:87:28:5f:8f:
be:dd:70:4a:d6:e4:ac:fd:53:b9:4f:8a:ec:80:21:
56:db:88:5e:dd:d6:32:91:0b:5a:67:d0:89:2b:28:
79:76:87:e5:89:13:c2:43:6e:b6:28:a2:70:26:09:
67:2e:62:98:0f:cc:54:13:d7:24:81:ff:cf:3c:8f:
c4:86:9e:bf:53:df:82:da:57:39:be:8e:a1:6a:a7:
80:b9:78:da:63:9a:02:ed:83:e1:c7:53:e0:2e:eb:
e6:cb:2b:2f:32:fb:c5:6f:7d:fb:82:b2:42:67:f9:
6c:aa:f0:69:1b:19:8e:52:3a:07:1a:64:07:16:93:
b8:66:7e:0b:a7:62:3c:63:6e:4a:f9:ff:62:37:9f:
56:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4F:4B:2D:64:B7:77:6D:F1:78:CB:72:8E:7B:B3:A5:CA:74:A2:BE
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137372e302f32342d3234203d3e203537303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.177.0/24
Signature Algorithm: sha256WithRSAEncryption
15:16:41:a2:c7:fe:29:2a:2b:0f:15:ed:f7:46:ad:0b:71:06:
a1:a1:51:c3:fa:cb:ab:e5:2a:06:72:b2:6d:9c:09:44:fc:26:
14:d7:d1:77:1a:a6:1d:dd:0e:b7:db:7e:4d:f7:a9:2c:09:f9:
00:ab:8e:19:f3:f7:0d:65:ad:3d:b4:5c:12:de:de:8a:b0:1d:
86:c4:40:3e:37:df:eb:de:76:26:9a:ce:56:04:65:60:53:95:
0e:d7:c4:37:57:f9:01:49:a0:9e:78:10:81:a4:f0:90:d1:51:
c8:70:c8:fc:36:63:3d:f1:21:34:42:bd:00:de:2b:06:25:96:
17:e3:67:2c:94:a2:e4:c9:a1:9d:25:f6:73:c2:77:15:3c:d0:
6c:12:4d:df:a5:02:83:2c:50:58:62:a8:c9:89:29:59:43:50:
c6:fb:97:42:c5:88:bd:d8:4a:62:c8:7f:ea:e5:18:02:c8:15:
73:03:e4:c6:54:15:eb:96:d6:c3:6f:e7:cd:b1:b7:b2:81:89:
06:66:78:2a:41:05:c4:a9:28:32:0c:5e:bc:08:13:7e:eb:fc:
54:d4:59:a2:e3:11:a4:a3:68:4b:38:a1:01:0b:94:1c:5f:bd:
61:79:8f:0a:08:ff:4e:bd:3e:5f:19:b9:e0:3d:36:5d:55:cf:
1f:58:e6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 16:05:45 2025 by rpki-client