Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138332e302f32342d3234203d3e2039333034.roa
File: 3130392e3131302e3138332e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: y0NEtYR361NkebkOQXg7wl3FoibTQLNz8L8A94fMmio=
Subject key identifier: 23:33:C8:09:20:2E:A5:D2:88:AC:6E:F8:37:8F:EB:EA:9B:C2:CC:F8
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 0548E5C0A7E9B7C67115AA3B34D1A5042875108F
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138332e302f32342d3234203d3e2039333034.roa
Signing time: Mon 25 May 2026 12:16:56 +0000
ROA not before: Mon 25 May 2026 12:11:56 +0000
ROA not after: Mon 24 May 2027 12:16:56 +0000
asID: 9304
IP address blocks: 109.110.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:48:e5:c0:a7:e9:b7:c6:71:15:aa:3b:34:d1:a5:04:28:75:10:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: May 25 12:11:56 2026 GMT
Not After : May 24 12:16:56 2027 GMT
Subject: CN=2333C809202EA5D288AC6EF8378FEBEA9BC2CCF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2b:d6:b0:d9:ae:4a:df:ab:6e:dc:59:85:87:
02:01:9b:df:55:0b:6e:96:a2:ee:80:56:08:6b:3b:
1a:7a:6c:c0:7c:db:f5:13:d0:a8:09:93:be:30:f8:
a2:c5:37:26:18:0b:e6:c9:ae:dd:1c:87:7f:f1:62:
c0:15:94:99:e1:92:66:4b:89:52:d3:c7:22:c9:6e:
50:8d:4a:72:87:7f:f6:3e:c8:06:b6:b1:72:8b:ac:
9d:c9:d3:f4:b4:f0:d5:f1:7c:84:1f:9c:a9:c0:2f:
23:bc:41:1c:69:ea:a2:75:db:44:d0:c8:35:8b:d4:
cc:db:2e:33:ec:ef:bd:42:fa:c0:2f:47:1f:cc:14:
f8:d8:64:f3:63:8c:d6:0f:ff:af:44:90:de:7f:45:
af:ac:55:eb:6c:09:27:4a:cb:bf:08:da:e4:07:0d:
36:d4:01:fc:db:5c:2e:5d:c1:2f:b0:8f:bd:73:5c:
e1:d4:62:41:a6:f5:62:ca:74:ab:88:b6:d4:a0:35:
15:ad:9e:46:ad:6a:de:68:f4:7c:ce:ad:12:3f:f6:
3c:59:25:6e:4b:0c:59:8a:4c:57:80:05:d5:45:b9:
3e:8e:8e:ae:11:7b:92:9e:27:21:80:1f:fa:8f:69:
48:9b:b4:d5:fd:bb:2e:94:84:dd:1b:a0:cf:b8:d6:
5a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:33:C8:09:20:2E:A5:D2:88:AC:6E:F8:37:8F:EB:EA:9B:C2:CC:F8
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138332e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.183.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:62:c5:08:ed:2b:6d:0c:86:30:8a:af:d4:ff:6a:42:2d:0a:
3c:df:61:1e:4f:0a:fb:47:4f:a3:10:d3:f3:76:96:e7:dc:ba:
9c:8b:87:22:56:fb:48:9d:f4:ec:4e:ed:9a:f6:e5:26:b4:50:
a3:fb:34:e5:da:a3:45:95:53:91:f1:05:fd:36:5c:8e:1b:52:
db:a4:d4:9d:4f:a8:58:51:4e:ab:2a:b6:5a:cd:49:4c:39:b1:
c9:59:3a:c3:9d:7d:e9:ef:51:0a:d5:28:e3:7a:40:f2:29:43:
bb:3c:65:77:d9:d6:15:70:54:37:13:c3:28:7b:98:08:55:e2:
2e:ce:6a:b3:8b:a4:de:92:74:9e:98:d1:9c:43:41:e2:ef:49:
14:84:dc:a7:a2:91:35:8a:8c:17:14:41:d2:98:8e:4b:c1:db:
76:ac:15:d6:2d:ec:09:df:07:3e:2d:33:3a:fd:67:cb:48:7d:
ac:44:04:97:1c:4d:d1:e5:e2:9b:e8:01:06:b2:b9:ed:8c:47:
56:a8:dd:2f:43:a1:4d:5b:9c:62:2e:22:d0:ab:8f:0c:50:91:
df:12:22:13:a4:ef:3d:f2:a9:cb:d8:d0:50:ac:71:35:1e:78:
5a:a9:fa:5c:83:4b:f6:28:68:56:6a:a3:2b:5b:44:95:17:3c:
30:86:7b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:50:38 2026 by rpki-client