Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31342e302f32342d3234203d3e20383334.roa
File: 3130392e3130362e31342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: UpyKboBdJYnqZxDHlGCjLk+W5NxLQuDPNU6CCzx5w2w=
Subject key identifier: 6E:45:1C:ED:E0:85:DB:3F:FD:F6:DE:40:55:16:57:89:33:A1:89:51
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 049B5E80679C93BBC1ECF0890E98F86BD9C1816C
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31342e302f32342d3234203d3e20383334.roa
Signing time: Fri 25 Sep 2026 12:13:24 +0000
ROA not before: Fri 25 Sep 2026 12:08:24 +0000
ROA not after: Fri 24 Sep 2027 12:13:24 +0000
asID: 834
IP address blocks: 109.106.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:25:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:9b:5e:80:67:9c:93:bb:c1:ec:f0:89:0e:98:f8:6b:d9:c1:81:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 25 12:08:24 2026 GMT
Not After : Sep 24 12:13:24 2027 GMT
Subject: CN=6E451CEDE085DB3FFDF6DE405516578933A18951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:16:05:46:76:ac:55:c5:da:5b:32:07:ce:96:
b8:ea:95:bc:5d:0c:4a:ae:2d:20:13:ed:41:af:76:
c7:51:21:df:19:c5:91:61:7e:c9:e5:61:f3:41:d6:
c0:29:a4:b0:c3:f2:29:81:15:89:36:ec:df:fe:91:
af:81:f2:ac:16:fe:5e:a7:38:95:09:95:c0:b8:7f:
53:03:be:06:e6:19:9b:1e:a5:77:b2:1b:b5:9e:d0:
31:e6:51:a8:5f:3e:49:b8:f2:f5:82:1a:e8:b0:0e:
3d:d0:72:b1:5b:e8:0f:d0:4d:b5:67:dc:96:09:e0:
d7:68:a7:a0:11:3d:e5:49:23:b2:bf:64:f0:2c:fb:
c7:dd:b7:32:13:ce:10:91:38:be:95:1e:cc:df:57:
2c:6b:0e:dd:56:b0:19:89:0a:74:4c:ab:06:5b:ce:
7f:1b:26:02:e0:84:2f:75:42:fa:aa:fb:55:dd:c4:
94:61:38:9d:d2:2b:8e:97:5f:75:b6:13:20:28:f7:
94:f4:86:13:1d:a8:a9:43:2e:47:3d:4e:d4:6e:cf:
33:0c:86:e7:dd:a2:a3:5f:ec:8e:6c:50:00:34:70:
41:a2:c4:84:9e:b1:27:74:4d:43:d2:1c:ee:e2:65:
26:0b:0b:67:54:7d:00:78:d8:a9:a8:3d:10:2c:2f:
43:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:45:1C:ED:E0:85:DB:3F:FD:F6:DE:40:55:16:57:89:33:A1:89:51
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.14.0/24
Signature Algorithm: sha256WithRSAEncryption
03:89:d5:e1:ab:68:08:ab:13:6a:b3:11:d4:1c:2d:36:ca:b3:
71:0c:60:5e:a1:98:39:5a:eb:49:6c:34:96:e3:83:be:ce:81:
4f:e7:88:ea:eb:b7:e5:d9:62:1b:b4:05:15:ad:75:3c:52:2a:
8a:6b:53:d4:3f:83:c7:7d:82:b1:96:e2:a2:53:85:8c:37:b2:
3b:33:ec:1f:a2:6d:5f:c5:ea:c5:7f:85:a8:14:cc:a9:aa:45:
f9:ac:d0:2f:3e:ee:d1:be:d5:4e:0a:3c:01:4d:f3:b5:b2:62:
f0:79:6e:43:77:49:34:ad:02:1e:13:cb:a4:d8:ec:f7:ae:6c:
f7:97:c3:96:13:04:2e:8d:d6:44:60:37:fb:70:95:88:77:e1:
ad:41:12:42:96:3d:7a:c6:17:5e:d0:70:6e:94:ba:29:70:92:
5a:06:06:bc:46:76:27:fd:bf:84:cb:0b:1a:46:bb:3a:28:aa:
0d:e8:6e:29:4d:53:a6:97:c4:72:67:24:64:ab:1c:a0:33:5d:
3b:0e:3d:8d:40:51:19:a6:16:09:5c:9d:23:7a:f1:78:ed:43:
df:c4:c2:56:db:f2:4b:ec:6b:ea:e4:d1:21:ec:d0:10:1d:4a:
12:ca:d5:50:d5:4d:2e:0a:78:4b:6f:42:df:d0:02:fc:1e:a8:
12:fc:6d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:41:05 2026 by rpki-client