Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31322e302f32342d3234203d3e20383334.roa
File: 3130392e3130362e31322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: DteOqV3i2uGnjAmtc05vlDsr4B65fU9mbRBQaWdENVU=
Subject key identifier: 1E:43:7B:CA:74:EB:78:3B:EF:0D:BF:14:25:EE:AC:99:26:41:7B:DD
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 3DA5CDB951AC18A4F84D86000754F367C95417A4
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31322e302f32342d3234203d3e20383334.roa
Signing time: Thu 26 Mar 2026 14:52:05 +0000
ROA not before: Thu 26 Mar 2026 14:47:05 +0000
ROA not after: Thu 25 Mar 2027 14:52:05 +0000
asID: 834
IP address blocks: 109.106.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 14:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:a5:cd:b9:51:ac:18:a4:f8:4d:86:00:07:54:f3:67:c9:54:17:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Mar 26 14:47:05 2026 GMT
Not After : Mar 25 14:52:05 2027 GMT
Subject: CN=1E437BCA74EB783BEF0DBF1425EEAC9926417BDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:b9:8e:9b:df:97:ad:b1:3f:87:35:3e:89:
4f:eb:e2:a8:f3:de:0e:c3:9b:02:ee:72:74:fd:c4:
4f:ba:fd:5e:a3:70:85:e6:b1:8d:ee:f3:80:cb:27:
40:10:e4:c2:51:a7:67:f1:52:55:17:8a:c3:41:ab:
6c:ba:da:e8:1f:92:de:16:fb:98:e8:0c:5e:eb:03:
cc:1b:93:d2:c7:0d:93:5e:ef:bd:f0:3a:b3:db:99:
8f:b9:05:2c:c7:4b:db:2d:69:22:da:22:00:9e:fb:
a6:0a:4c:84:60:85:63:78:c3:18:fe:81:63:37:be:
c3:ed:fe:4c:99:db:3a:52:1f:1e:52:31:61:b3:1d:
11:83:33:77:50:58:e2:32:8c:b9:c8:1f:4f:fd:57:
c6:90:1a:30:af:4c:f4:62:49:ca:93:fb:40:3b:41:
df:53:e3:b8:65:50:88:f8:6e:6e:1b:b5:8a:dd:4d:
9c:8c:2d:b4:05:ea:db:53:46:8b:44:63:22:25:b5:
7a:1e:71:d3:f6:2b:ff:9d:74:1b:48:cd:84:f9:f9:
09:7d:a9:bd:27:f4:4f:0d:96:69:fa:63:64:d8:07:
25:9e:f5:80:eb:5c:fa:96:b6:a3:a6:21:f5:65:58:
41:b0:ca:54:04:cf:99:6f:2a:69:5b:94:05:70:44:
92:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:43:7B:CA:74:EB:78:3B:EF:0D:BF:14:25:EE:AC:99:26:41:7B:DD
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.12.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:30:af:d9:0d:fa:67:31:0a:60:28:16:b9:5c:a2:59:e1:e2:
43:cd:ad:9f:8e:e1:13:f9:67:01:11:ab:87:44:14:e7:9e:ba:
f0:c6:94:c2:da:ed:f0:ac:88:ae:b2:73:b6:b3:3b:9a:5f:1a:
97:b4:d5:f7:3a:df:5b:d0:e1:48:a6:90:cf:a8:56:a0:f2:54:
07:30:f5:26:77:d6:45:77:a7:82:d3:32:d4:3a:59:ae:d0:72:
0f:19:b3:4e:0c:40:91:5f:b8:4b:8b:de:30:62:a3:c0:d4:34:
5e:51:46:ad:d8:99:23:f4:ab:6b:04:2f:13:59:e6:21:fd:53:
0b:86:c0:57:d2:4a:da:f6:07:76:76:e0:98:db:7f:b5:6b:39:
cb:29:c4:60:de:28:2d:94:b3:ab:8d:99:05:36:2f:1a:29:27:
73:31:00:26:75:d2:36:b5:3e:ce:c1:f5:cb:88:85:7b:7e:b4:
79:4b:c0:c1:fe:99:81:b1:d9:25:6c:9e:f2:dc:cc:43:a1:49:
a2:5e:3b:03:ff:12:90:eb:d8:60:ac:bd:16:ae:2c:f3:24:7d:
30:1b:39:f8:ec:76:79:ae:34:bf:b6:69:17:79:e6:dd:85:69:
5a:f9:54:91:a8:51:f5:53:9e:d7:53:7b:f5:96:c7:2e:66:53:
43:28:57:5c
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUPaXNuVGsGKT4TYYAB1TzZ8lUF6QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNjAzMjYxNDQ3MDVaFw0yNzAzMjUxNDUyMDVaMDMxMTAvBgNV
BAMTKDFFNDM3QkNBNzRFQjc4M0JFRjBEQkYxNDI1RUVBQzk5MjY0MTdCREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2qbmOm9+XrbE/hzU+iU/r4qjz
3g7DmwLucnT9xE+6/V6jcIXmsY3u84DLJ0AQ5MJRp2fxUlUXisNBq2y62ugfkt4W
+5joDF7rA8wbk9LHDZNe773wOrPbmY+5BSzHS9staSLaIgCe+6YKTIRghWN4wxj+
gWM3vsPt/kyZ2zpSHx5SMWGzHRGDM3dQWOIyjLnIH0/9V8aQGjCvTPRiScqT+0A7
Qd9T47hlUIj4bm4btYrdTZyMLbQF6ttTRotEYyIltXoecdP2K/+ddBtIzYT5+Ql9
qb0n9E8Nlmn6Y2TYByWe9YDrXPqWtqOmIfVlWEGwylQEz5lvKmlblAVwRJJLAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUHkN7ynTreDvvDb8UJe6smSZBe90wHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzMDM5MmUzMTMwMzYyZTMx
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABtagww
DQYJKoZIhvcNAQELBQADggEBACswr9kN+mcxCmAoFrlcolnh4kPNrZ+O4RP5ZwER
q4dEFOeeuvDGlMLa7fCsiK6yc7azO5pfGpe01fc631vQ4UimkM+oVqDyVAcw9SZ3
1kV3p4LTMtQ6Wa7Qcg8Zs04MQJFfuEuL3jBio8DUNF5RRq3YmSP0q2sELxNZ5iH9
UwuGwFfSStr2B3Z24Jjbf7VrOcspxGDeKC2Us6uNmQU2LxopJ3MxACZ10ja1Ps7B
9cuIhXt+tHlLwMH+mYGx2SVsnvLczEOhSaJeOwP/EpDr2GCsvRauLPMkfTAbOfjs
dnmuNL+2aRd55t2FaVr5VJGoUfVTntdTe/WWxy5mU0MoV1w=
-----END CERTIFICATE-----
Generated at Tue Mar 31 00:26:52 2026 by rpki-client