Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138332e302f32342d3234203d3e20343032313836.roa
File: 3130392e3131302e3138332e302f32342d3234203d3e20343032313836.roa (raw, json)
Hash identifier: BRCenPim/Zj45qYYWDiO2vJIdMngSP3NQ9C+Kuxd5AU=
Subject key identifier: D3:70:CD:55:22:82:51:4F:71:9A:82:D7:12:26:3D:54:2D:69:F6:65
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 447CDF4CCE096583CF511919F72415688E474AD7
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138332e302f32342d3234203d3e20343032313836.roa
Signing time: Tue 03 Mar 2026 09:21:27 +0000
ROA not before: Tue 03 Mar 2026 09:16:27 +0000
ROA not after: Tue 02 Mar 2027 09:21:27 +0000
asID: 402186
IP address blocks: 109.110.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 09:34:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:7c:df:4c:ce:09:65:83:cf:51:19:19:f7:24:15:68:8e:47:4a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Mar 3 09:16:27 2026 GMT
Not After : Mar 2 09:21:27 2027 GMT
Subject: CN=D370CD552282514F719A82D712263D542D69F665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b7:ce:ae:8e:6e:44:8f:54:4b:9e:43:12:55:
ba:64:0a:03:fa:2f:2c:57:29:3a:15:8a:85:61:2f:
b7:4a:bd:e3:b6:a5:e3:b2:4b:2d:bd:2f:9b:66:94:
44:92:da:14:07:df:04:62:6c:d6:d4:f3:1f:a0:2c:
eb:f5:8d:77:90:62:cb:d9:b1:72:ed:f1:63:cc:3f:
76:e7:2a:c9:b1:09:a8:ac:6b:8a:24:9f:01:f8:b9:
f6:0c:b6:4b:6a:18:78:fd:2c:81:68:c6:3d:ee:75:
01:b3:b4:ca:ee:88:30:ae:e1:81:de:4b:90:b3:15:
81:98:77:da:ba:2d:4b:fd:fe:a0:94:e4:d7:01:b6:
d9:60:c6:3f:ee:33:10:77:8f:23:51:c9:89:96:30:
4e:de:60:8d:ec:c9:55:76:83:2b:1e:b1:30:82:45:
67:c8:dc:58:a9:2e:65:67:c0:4c:fe:d3:5e:58:3e:
fb:b3:38:cf:c2:23:be:ba:3e:fe:75:39:d1:5d:08:
ed:db:24:55:3e:a8:1d:fc:5b:d1:a7:1f:c8:e2:59:
7e:ad:da:45:0e:24:64:58:21:81:96:af:5b:64:5d:
95:18:2e:d7:32:a6:e5:ca:74:31:ff:0e:6d:8c:2e:
51:71:37:79:cb:99:e5:a5:ed:f9:c2:8c:08:94:1f:
0a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:70:CD:55:22:82:51:4F:71:9A:82:D7:12:26:3D:54:2D:69:F6:65
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138332e302f32342d3234203d3e20343032313836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.183.0/24
Signature Algorithm: sha256WithRSAEncryption
07:94:90:bb:a9:b9:dc:cd:72:b8:22:f7:4d:36:3c:b3:9f:c5:
92:c1:7e:e9:34:a3:76:ae:34:ef:5f:ad:30:be:5f:e5:59:ff:
6c:b1:ad:77:8d:38:31:82:94:bf:96:3d:5f:1a:d5:00:db:58:
61:d2:c0:43:02:c9:73:fb:58:46:92:27:63:76:cf:11:25:43:
33:94:97:d3:fb:57:a9:69:87:58:8d:5d:4a:f9:64:48:e1:45:
d0:99:59:6c:87:82:db:98:bb:f6:18:76:a7:ba:e4:6a:ea:e6:
21:2b:ec:72:4d:64:8f:e2:a7:2a:12:09:47:ad:29:a5:6f:f3:
c9:35:2c:fa:ef:69:00:de:61:02:ad:6d:d2:41:32:e7:63:5f:
f9:c8:98:68:a8:b8:60:0a:aa:91:18:a6:f1:a8:45:04:af:e4:
0c:97:ad:3e:bc:f7:1c:86:37:ce:67:3b:27:71:f2:06:75:11:
9a:77:7a:49:44:a2:c9:2f:1c:0d:1e:6c:a6:73:22:53:e3:14:
d0:08:d8:29:74:13:d1:a6:43:a6:8a:05:04:da:f1:1d:0c:4f:
b3:aa:aa:ed:ab:e7:51:ec:47:10:5a:41:0c:0c:86:42:5e:56:
71:2c:b0:e6:df:31:45:78:12:31:da:e8:50:79:ab:98:99:34:
11:90:9d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 17:34:48 2026 by rpki-client