Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137392e302f32342d3234203d3e20323138373239.roa
File: 3130392e3131302e3137392e302f32342d3234203d3e20323138373239.roa (raw, json)
Hash identifier: LjcdqgTScav7sYFdk1dwj9IWZd9caj6Egc/+i0fisYI=
Subject key identifier: E6:C1:CF:EB:F3:3B:1F:C6:FD:24:08:84:F3:81:1B:03:0F:14:02:92
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 6E532363490F15BC3F20A0724B0E32274CB0BAA0
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137392e302f32342d3234203d3e20323138373239.roa
Signing time: Thu 22 Oct 2026 16:47:56 +0000
ROA not before: Thu 22 Oct 2026 16:42:56 +0000
ROA not after: Thu 21 Oct 2027 16:47:56 +0000
asID: 218729
IP address blocks: 109.110.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:53:23:63:49:0f:15:bc:3f:20:a0:72:4b:0e:32:27:4c:b0:ba:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Oct 22 16:42:56 2026 GMT
Not After : Oct 21 16:47:56 2027 GMT
Subject: CN=E6C1CFEBF33B1FC6FD240884F3811B030F140292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:73:a5:8c:65:f1:cc:ba:fc:e3:09:84:bd:6c:
08:4d:1e:77:15:75:53:93:a4:f6:67:cf:8c:1e:af:
80:ed:04:f0:2e:1e:6f:94:70:ff:d9:38:69:f7:7f:
18:15:eb:02:6c:4a:0b:d3:b1:d9:25:50:0d:9d:7d:
db:82:44:73:60:2a:06:3b:e5:b6:0f:9a:69:52:2c:
36:0b:f5:c6:f3:23:4a:a3:d5:34:13:8c:85:f2:23:
88:9d:76:23:82:fa:b9:46:92:17:7b:f9:c5:d8:38:
8f:a2:6e:b2:48:cd:bd:6d:9a:93:6b:fa:14:ea:06:
e0:a0:d1:9e:7c:81:6b:ed:dd:c0:db:ec:e3:4b:75:
26:3a:ed:b6:c5:e2:18:78:04:5e:da:7f:5d:b2:04:
82:25:ec:d9:c0:df:c4:2a:ce:d5:bc:3e:b6:44:9c:
fd:c9:e0:d0:d4:42:64:fc:90:95:f8:71:ca:c9:8e:
49:46:58:b4:0b:cd:e3:7a:ec:cd:7c:b7:35:ea:d6:
ce:36:f4:ae:9b:54:02:f4:68:05:af:5c:13:74:8a:
9c:cb:ce:c5:74:ec:70:ee:3f:ad:80:a7:a8:0f:2c:
7e:2e:7e:4d:f2:a6:1d:6b:12:17:10:3c:c8:f0:32:
52:72:0e:12:a2:2b:60:d1:3d:56:e7:97:a4:e9:0b:
b5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C1:CF:EB:F3:3B:1F:C6:FD:24:08:84:F3:81:1B:03:0F:14:02:92
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137392e302f32342d3234203d3e20323138373239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.179.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e7:f9:fd:4f:db:8f:f9:9e:32:21:68:c1:30:d3:18:f1:01:
2e:2f:1a:96:e1:ce:52:81:a3:43:cb:69:2d:9e:a4:f0:29:83:
f0:92:df:b1:ea:a7:b9:4f:6e:db:ed:ef:ea:31:16:11:77:74:
83:11:f7:18:8b:73:6f:3d:35:1f:8e:ce:1f:5a:86:7e:d5:73:
e5:d0:95:37:86:2e:f9:c1:0a:cb:85:9f:1e:1c:f3:3b:31:23:
87:16:d8:d2:9b:0c:ac:e6:60:58:b1:5a:1a:9c:14:2b:07:75:
dc:ed:bd:b2:f3:0e:b2:37:07:f7:c7:d6:cc:5a:31:27:14:b2:
5a:ea:d5:05:a6:65:0a:0f:40:da:8d:e5:b2:90:56:8a:5a:81:
12:b7:11:b3:ed:0f:25:28:d8:ba:9b:3c:69:d5:07:62:e5:12:
6a:bb:1d:ab:e0:5c:78:3b:c7:69:25:87:75:b0:93:5b:5d:89:
9e:1c:48:b7:c6:7b:a5:17:db:ac:69:17:62:dc:e9:f6:02:2d:
09:cd:80:55:44:81:bd:91:4d:dd:fb:50:72:fb:48:2c:e4:39:
e6:8f:3a:d4:5a:c7:a2:50:6c:bd:19:7d:5f:e5:da:5b:81:d5:
3f:4e:0b:e1:6a:23:ba:0e:f1:b4:40:5e:a3:01:a7:74:e8:b1:
f8:89:ae:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:52:52 2026 by rpki-client