Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138332e302f32342d3234203d3e203334393839.roa
File: 3130392e3131302e3138332e302f32342d3234203d3e203334393839.roa (raw, json)
Hash identifier: j5xuGBJT3XN5F5rPJZ6m8a5lJqf7b4HkYUvkjEPW60s=
Subject key identifier: 80:C4:79:C4:9E:05:9A:27:9F:D7:5F:F9:10:16:4E:39:52:1B:CD:AF
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 4080B5F6F472EDB762567D28C073BB74C35A1858
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138332e302f32342d3234203d3e203334393839.roa
Signing time: Tue 25 Aug 2026 22:24:24 +0000
ROA not before: Tue 25 Aug 2026 22:19:24 +0000
ROA not after: Tue 24 Aug 2027 22:24:24 +0000
asID: 34989
IP address blocks: 109.110.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 08:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:80:b5:f6:f4:72:ed:b7:62:56:7d:28:c0:73:bb:74:c3:5a:18:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Aug 25 22:19:24 2026 GMT
Not After : Aug 24 22:24:24 2027 GMT
Subject: CN=80C479C49E059A279FD75FF910164E39521BCDAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f9:a7:45:61:29:35:ee:6a:1b:9e:6f:9a:de:
fa:e9:98:6b:f7:89:c8:8c:aa:5a:17:31:e2:12:01:
67:f9:f5:27:b4:16:41:e9:56:cd:7b:b0:3e:8a:fb:
1a:ff:ba:a5:fe:0c:41:83:39:67:7f:f8:c8:17:f7:
d9:46:c5:81:3f:10:d7:dd:cb:47:67:6c:36:12:c2:
89:18:45:85:65:84:23:b1:7b:99:85:b6:c8:a9:f9:
b2:c2:90:22:cc:4f:14:86:50:5b:19:fc:54:c9:f9:
5d:ff:6b:6b:c6:12:29:9c:13:61:6a:f0:9d:25:bc:
49:ec:76:ba:a9:d5:97:18:9c:cc:ee:18:22:9a:00:
b3:c7:41:f0:45:a1:5a:75:23:9b:11:a2:66:6e:24:
9c:7e:15:de:10:84:60:dc:ce:0b:27:c5:8f:26:30:
c3:ee:f4:ab:22:fb:5a:98:d5:24:17:f1:b9:08:80:
29:b1:27:35:38:ef:0f:ef:59:ca:6d:be:18:d6:88:
81:ac:76:bf:16:79:75:5a:9c:aa:f8:de:a5:e6:13:
df:dd:7e:36:b0:32:1e:d5:bd:ce:de:97:54:92:3c:
99:1a:2d:e7:b6:10:19:94:4a:41:9d:25:33:52:72:
6f:63:10:ea:ed:bb:56:0e:b2:68:15:53:8d:8a:c1:
c3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C4:79:C4:9E:05:9A:27:9F:D7:5F:F9:10:16:4E:39:52:1B:CD:AF
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138332e302f32342d3234203d3e203334393839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.183.0/24
Signature Algorithm: sha256WithRSAEncryption
89:1f:a7:c4:2a:67:95:e2:11:e2:c5:b2:49:d5:58:5d:c8:68:
51:a4:80:40:dd:1a:7c:2c:d3:c7:53:7a:c8:13:24:1a:99:84:
27:f7:64:0d:80:d8:d1:da:53:7a:80:5f:f9:39:0e:d8:c0:e4:
bd:84:4e:32:c4:d0:0f:da:c0:5c:bf:d6:c1:86:95:9f:b0:15:
3c:56:17:70:2b:85:f9:ad:09:a9:92:da:ef:44:43:90:87:f9:
db:13:8a:9f:c5:b3:04:a6:34:51:ed:75:20:1b:9e:fc:13:c8:
26:b6:2b:8f:5f:45:42:33:5b:30:f6:f2:d0:0e:2b:0a:65:13:
b0:f4:19:2c:99:69:52:08:3b:ed:53:c7:60:f4:38:6d:8d:f3:
ad:ed:15:32:af:ab:a5:a3:41:98:20:86:de:81:69:5b:7d:37:
70:a3:ac:40:ae:a1:39:62:72:55:ce:2c:d6:52:98:e0:0b:a8:
88:91:dc:8f:38:47:fa:57:41:9d:35:3e:04:7a:2a:f0:a3:83:
36:4b:10:fb:fc:74:f3:30:c7:b9:ed:f9:f6:63:eb:3b:42:02:
9d:dc:97:b8:aa:3b:9d:40:61:d6:f9:4d:ba:e5:22:3d:83:f2:
f5:a8:e7:0e:fb:71:ea:2d:d0:b1:0d:b2:e4:3d:6a:80:f5:32:
77:d7:f0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 23:30:43 2026 by rpki-client