Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31342e302f32332d3233203d3e20383334.roa
File: 3130392e3130362e31342e302f32332d3233203d3e20383334.roa (raw, json)
Hash identifier: /dC9P+c2VBkCFmGdbs2cYIU4ZmOXN8w5G2gJA4+rMJY=
Subject key identifier: 86:01:9D:1C:CF:1F:FB:F7:EA:20:55:A1:05:2F:8C:CE:51:DE:F1:BF
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 4CE8072A56A78955D3E5F9D2DBDF2C07B0276E5C
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31342e302f32332d3233203d3e20383334.roa
Signing time: Thu 24 Sep 2026 09:29:16 +0000
ROA not before: Thu 24 Sep 2026 09:24:16 +0000
ROA not after: Thu 23 Sep 2027 09:29:16 +0000
asID: 834
IP address blocks: 109.106.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:e8:07:2a:56:a7:89:55:d3:e5:f9:d2:db:df:2c:07:b0:27:6e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 24 09:24:16 2026 GMT
Not After : Sep 23 09:29:16 2027 GMT
Subject: CN=86019D1CCF1FFBF7EA2055A1052F8CCE51DEF1BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:29:76:50:64:1e:ef:e3:01:4e:21:ad:49:06:
d9:30:36:0d:99:a5:eb:07:30:8b:a2:d5:fe:f7:b9:
70:90:e7:0f:ea:b0:71:dd:b7:d7:a6:40:91:61:42:
97:c5:fc:f4:1c:f8:0e:2b:cb:30:b9:f5:2d:c0:86:
50:4a:89:6d:fe:18:a6:73:f9:2d:ee:b9:3c:aa:12:
12:46:55:b0:7c:45:a9:bb:0c:53:ae:65:d5:55:e3:
13:b3:d2:9a:7b:0f:70:7f:9d:ef:51:29:31:fa:ea:
da:4d:b2:c5:73:45:47:2e:59:50:15:10:77:65:0c:
71:8f:33:8b:5e:41:36:e3:1f:21:59:08:a1:9d:24:
a3:55:2e:da:4c:ce:04:97:55:3d:0a:40:70:db:75:
f5:6e:4a:f0:ac:b6:3b:a1:e3:6c:c8:cb:e7:d8:e2:
e4:23:33:34:29:46:dc:f7:22:5a:80:83:bd:58:0d:
98:8c:47:95:5a:40:86:22:2e:fe:b9:cd:9b:20:45:
b6:c7:97:8b:20:e4:b4:9b:0f:e8:16:dd:3d:92:4b:
81:f6:81:f5:fb:5b:c1:73:fe:2b:07:69:80:2c:db:
d2:f9:43:54:27:2f:da:d2:e0:2c:d9:55:fe:28:ed:
d5:e2:dd:e5:99:64:d7:3c:dd:0f:f1:c1:68:6b:6d:
45:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:01:9D:1C:CF:1F:FB:F7:EA:20:55:A1:05:2F:8C:CE:51:DE:F1:BF
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31342e302f32332d3233203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.14.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:63:87:4a:d1:e2:a3:cd:b5:98:28:10:c1:a3:3f:28:0c:a3:
cd:5a:33:a5:37:92:1a:a5:7b:e3:4b:54:55:33:50:dc:d7:08:
45:52:50:f3:82:a4:97:3b:36:65:6b:c5:d1:3a:29:6d:7d:f7:
70:2e:4c:12:97:d5:cb:02:91:61:01:03:a0:ed:88:3f:b2:3c:
61:f2:c2:0f:ba:19:7c:ef:35:04:d5:4a:b5:12:84:5b:ec:bf:
47:a3:b4:8b:96:a5:5f:0d:fa:55:19:b4:ff:43:a4:73:00:b5:
cd:f1:ef:de:a0:df:01:38:e7:01:44:b0:07:83:59:22:98:2c:
2c:a6:23:64:9e:d9:d1:c2:c8:e4:e6:66:d4:c4:ba:d1:92:27:
85:a5:36:5a:86:d0:6f:73:46:96:69:57:6b:18:ef:9b:84:6b:
2c:84:f9:9e:af:73:61:b1:5d:37:06:9f:91:78:18:d1:c4:62:
8c:88:94:ce:23:20:aa:a5:39:cf:17:99:d0:24:f2:4e:49:bc:
40:25:db:7a:6a:95:f1:4b:89:2a:78:b2:30:32:f9:34:b5:5e:
a6:77:b5:4a:ed:f9:ca:ca:70:0e:a0:57:92:30:e3:dc:ea:5a:
5f:dc:47:d4:bf:bf:13:06:9d:7d:31:a0:f6:43:1c:c7:5a:52:
25:a5:0d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 12:26:09 2026 by rpki-client