Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31342e302f32342d3234203d3e203236373639.roa
File: 3130392e3130362e31342e302f32342d3234203d3e203236373639.roa (raw, json)
Hash identifier: sCzyprDn8uowAZBlLs7W7u23I2Ykx7dECcxcXuR9Z+o=
Subject key identifier: 48:AC:96:44:10:80:03:CA:0D:18:A4:FC:38:01:D5:55:14:9A:83:9F
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 6A881FC2EFA03354580E0FE542D76D337E3276B9
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31342e302f32342d3234203d3e203236373639.roa
Signing time: Fri 13 Mar 2026 09:47:06 +0000
ROA not before: Fri 13 Mar 2026 09:42:06 +0000
ROA not after: Fri 12 Mar 2027 09:47:06 +0000
asID: 26769
IP address blocks: 109.106.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:88:1f:c2:ef:a0:33:54:58:0e:0f:e5:42:d7:6d:33:7e:32:76:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Mar 13 09:42:06 2026 GMT
Not After : Mar 12 09:47:06 2027 GMT
Subject: CN=48AC9644108003CA0D18A4FC3801D555149A839F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:61:6d:6e:13:94:f1:c0:34:ae:db:2c:2f:76:
fb:10:8d:1c:3c:e0:3c:53:f5:fa:20:43:8f:42:a8:
12:a5:e3:9b:af:47:4a:f6:8c:e0:24:5c:71:73:6a:
3e:cb:4d:4c:4c:d7:7d:2b:b3:4a:95:17:e7:f8:f6:
f3:f9:73:65:3e:4a:e5:67:04:a4:7a:90:42:95:86:
3d:66:0a:2d:50:c1:b3:e5:43:8a:bd:72:65:11:21:
aa:7b:6c:b9:90:a2:5f:fb:9d:e0:d9:43:2f:12:4b:
8f:94:c8:8c:c1:96:fd:36:f4:55:3f:3a:7f:9f:9d:
a6:35:94:f1:27:b4:1d:e0:ee:99:42:ca:c1:e3:f2:
2c:3f:ba:71:e5:93:9b:1d:40:a0:5c:b2:08:c3:98:
35:a7:4b:b4:28:f3:b1:c3:7a:38:69:73:d0:e1:82:
3f:c4:07:d6:4a:15:b4:15:6c:a5:72:ac:4c:ea:65:
36:b1:99:67:eb:f2:f9:38:36:81:ae:89:46:d5:03:
62:62:d6:f7:02:89:f0:f0:7a:67:57:23:34:5b:9d:
d0:eb:f6:a2:8f:b5:ab:92:43:ae:18:87:c1:b7:60:
b9:f3:7a:80:c7:ef:32:4a:ec:de:a9:c0:22:a1:93:
85:8a:2c:ac:06:18:06:1e:ce:f1:5c:f7:18:5b:55:
f4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AC:96:44:10:80:03:CA:0D:18:A4:FC:38:01:D5:55:14:9A:83:9F
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31342e302f32342d3234203d3e203236373639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.14.0/24
Signature Algorithm: sha256WithRSAEncryption
45:b5:4c:b7:f3:6c:e8:65:26:14:20:4b:cf:2c:ad:63:f0:ca:
4d:ac:ed:da:d2:87:09:4f:e0:75:49:9e:8a:56:26:3d:71:53:
24:07:37:de:5d:85:f4:8c:27:b7:3b:cc:9a:28:c2:aa:19:14:
1d:fe:22:8a:3a:67:69:7b:72:ab:43:a4:25:24:9e:fb:04:cf:
89:0d:28:41:f4:aa:0c:fd:4a:da:ce:c2:88:03:fc:95:9b:23:
ae:73:3a:22:35:71:fa:30:dc:13:db:d5:fb:c9:22:63:c1:a6:
a6:95:37:f9:f6:26:24:01:5b:6f:62:a8:88:be:a6:de:33:c4:
c9:f5:89:c8:c0:42:1e:08:35:a2:79:40:61:f7:9b:be:73:6d:
0c:9a:24:70:4a:11:ff:63:44:43:ca:dd:aa:b2:76:59:ad:d8:
16:8d:99:1f:9f:6f:f2:32:16:d7:bc:48:e0:b6:a0:7a:38:5e:
b2:04:c8:24:5f:4c:f9:b9:80:db:33:8c:af:92:af:e4:03:1e:
1a:df:f0:4f:c1:5e:6f:f6:91:72:30:99:03:1c:cc:c2:37:ed:
6a:55:8a:64:1b:ad:fb:c6:86:4f:aa:45:1e:3b:1d:f5:ea:f9:
a8:af:7e:ca:df:78:4a:b8:38:c0:c1:ce:dd:a9:6a:c1:6c:d0:
69:e1:15:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 14:32:27 2026 by rpki-client