Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138352e302f32342d3234203d3e203432313833.roa
File: 3130392e3131302e3138352e302f32342d3234203d3e203432313833.roa (raw, json)
Hash identifier: kmIhe9rE1ZnILKqemFKO6lKwlChRrVvVJ7pg28pbtkw=
Subject key identifier: 0C:DD:A3:2C:45:7F:12:19:DF:C9:86:3C:4E:A8:C5:E4:FF:73:EF:C1
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 4FDB7558E870526F221B134B0C16017EBED40960
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138352e302f32342d3234203d3e203432313833.roa
Signing time: Tue 08 Sep 2026 23:10:57 +0000
ROA not before: Tue 08 Sep 2026 23:05:57 +0000
ROA not after: Tue 07 Sep 2027 23:10:57 +0000
asID: 42183
IP address blocks: 109.110.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:58:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:db:75:58:e8:70:52:6f:22:1b:13:4b:0c:16:01:7e:be:d4:09:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Sep 8 23:05:57 2026 GMT
Not After : Sep 7 23:10:57 2027 GMT
Subject: CN=0CDDA32C457F1219DFC9863C4EA8C5E4FF73EFC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c0:39:25:ea:c0:43:b5:c2:db:15:d7:14:a9:
48:3e:a0:5a:4e:84:96:b9:c0:f6:ab:71:c8:62:e2:
a9:77:2f:c5:23:e6:07:e6:4a:c4:69:a6:4d:e5:f5:
ad:a9:1d:6b:05:3f:26:ef:e5:91:c6:5f:97:2f:1e:
6d:48:8d:ea:e7:d9:39:17:a8:d1:54:78:af:ae:f6:
99:eb:b0:8d:18:1b:61:01:2f:be:d2:34:7a:28:c8:
3d:ab:0a:72:bb:20:bc:13:8f:e9:ea:74:fe:02:a8:
d2:01:8d:6b:77:a1:95:df:27:fc:8c:ad:0c:ef:c5:
d4:14:37:2a:aa:57:aa:3d:bb:64:6e:14:59:05:0a:
c0:79:8f:0a:b7:62:c6:b9:4d:f7:79:b9:05:f1:6c:
25:2a:f5:7f:11:43:82:91:d6:be:07:3b:86:99:de:
8e:14:9a:47:f3:7c:2d:5c:ea:be:a1:91:98:83:31:
02:4f:14:67:78:24:d4:27:1a:1a:5c:d6:5d:35:f0:
d0:0a:03:28:24:6d:8f:e5:02:af:1a:95:85:df:77:
af:37:1d:da:cc:97:1f:1d:87:69:78:30:6e:62:f1:
c6:0e:88:7e:4d:eb:15:43:e1:f1:de:59:39:36:d8:
23:52:b9:e5:fc:9e:41:9b:a9:45:25:b8:be:22:3e:
1e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DD:A3:2C:45:7F:12:19:DF:C9:86:3C:4E:A8:C5:E4:FF:73:EF:C1
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138352e302f32342d3234203d3e203432313833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.185.0/24
Signature Algorithm: sha256WithRSAEncryption
72:c8:3a:c7:0d:a2:3a:be:6a:30:4b:a8:0d:1d:c2:64:3f:49:
2f:37:ed:87:62:a6:f8:9f:01:7c:6c:32:d0:50:6c:dd:bf:f1:
14:7a:17:ef:cc:8c:ef:bd:3d:f8:94:fc:5c:c1:97:c2:39:6e:
8a:47:47:2b:9f:fc:28:22:c4:60:4d:41:1e:05:8d:e7:9f:02:
ee:cc:c7:4b:fd:8c:8a:7c:72:65:c0:4e:ca:7d:33:b9:8a:24:
7c:47:04:43:0e:a3:47:45:6b:dd:fb:9c:38:f4:8c:0f:e1:ac:
6d:3a:15:cc:53:be:61:d0:38:69:28:9a:2b:5e:47:b5:13:53:
63:2c:2b:89:3d:c9:60:38:bc:10:01:eb:e0:a4:cc:0f:51:d8:
d8:2f:8f:45:7c:7f:c5:77:be:79:11:59:2e:d7:a4:8f:31:2c:
3c:4e:00:64:96:01:6f:28:a3:1d:76:96:73:f7:a0:5c:98:09:
5c:4a:a0:16:98:43:73:7a:75:ad:39:dd:bb:a5:2a:a3:f6:3b:
e5:43:56:42:46:9d:fd:a0:3c:48:22:2e:69:76:21:32:2c:b5:
5e:70:ee:01:b2:82:bb:df:29:97:95:af:c3:5b:37:81:0e:89:
50:6a:8a:ca:05:64:69:c3:6b:58:bd:c1:f1:5d:db:2f:4a:8f:
31:23:4f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 07:02:57 2026 by rpki-client