Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31342e302f32342d3234203d3e2039333034.roa
File: 3130392e3130362e31342e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: HzNr/6QewrVEbgPbu9Arxd9CaZEfPI/PK0GTcImHgjE=
Subject key identifier: A2:D9:AF:8A:38:3F:CE:8C:3C:13:D7:4C:2B:9A:33:7C:1B:0B:09:CB
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 3CFA701483A65370693A27A999D5748C7456D2B7
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31342e302f32342d3234203d3e2039333034.roa
Signing time: Tue 26 May 2026 08:41:35 +0000
ROA not before: Tue 26 May 2026 08:36:35 +0000
ROA not after: Tue 25 May 2027 08:41:35 +0000
asID: 9304
IP address blocks: 109.106.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 12:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:fa:70:14:83:a6:53:70:69:3a:27:a9:99:d5:74:8c:74:56:d2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: May 26 08:36:35 2026 GMT
Not After : May 25 08:41:35 2027 GMT
Subject: CN=A2D9AF8A383FCE8C3C13D74C2B9A337C1B0B09CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:99:0a:12:6c:7f:90:1b:d6:5f:ad:d3:1e:06:
39:af:75:07:79:22:cf:3d:bd:03:2e:9b:4b:5f:22:
5d:5b:7f:dd:54:76:9f:26:fb:ae:75:fd:b8:a6:22:
65:aa:fb:e5:66:db:32:50:a9:ac:88:47:b5:15:5a:
4a:84:fc:38:36:12:6d:3b:fa:73:22:03:71:7e:5b:
2e:db:70:e8:7d:fb:84:bc:22:c5:f2:52:82:65:6d:
77:9a:a4:22:6b:e4:6d:72:f8:d0:ea:58:13:15:bd:
38:b4:9b:fd:f0:5c:b1:be:4f:2c:4b:e0:ec:8e:12:
37:13:c5:8e:a9:10:18:ff:d4:a0:f0:b5:d4:d0:e0:
13:d0:71:2a:a1:72:47:bb:61:33:45:5c:42:23:e2:
ce:28:0c:02:bd:42:fe:a7:39:2f:24:09:b3:a7:16:
f3:6b:46:e3:59:1f:15:e2:48:94:fe:c1:7d:3e:14:
62:09:70:d3:02:ae:e7:10:84:26:9e:07:aa:bb:55:
b8:9e:cb:03:6f:38:b2:d5:c3:12:4b:16:4f:9d:1e:
56:1f:fe:d7:0d:4e:ed:1c:a2:e5:6b:98:33:22:39:
a6:61:61:a8:6c:ac:21:21:06:79:25:fb:2b:65:88:
20:a3:bf:38:8f:4b:f5:fb:96:1c:5a:d1:14:e2:1d:
cb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D9:AF:8A:38:3F:CE:8C:3C:13:D7:4C:2B:9A:33:7C:1B:0B:09:CB
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31342e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.14.0/24
Signature Algorithm: sha256WithRSAEncryption
62:49:7d:9f:11:ac:dd:14:17:19:ce:ce:12:cf:4f:a8:9f:70:
50:79:05:7f:03:c5:ca:b9:8e:15:96:7d:aa:75:e2:61:30:7c:
b4:29:08:96:ed:96:35:63:6e:a9:b7:f0:e4:cf:f4:77:a4:8b:
19:7a:2d:32:ca:15:1e:2c:74:4b:91:90:3b:0c:28:87:9b:a7:
46:09:1e:5e:5a:6a:fd:83:de:30:57:1f:fc:b3:06:3b:56:6b:
26:6f:2f:51:f8:f8:25:84:c9:e1:bd:b0:3b:52:78:60:d2:c4:
82:69:d4:54:64:03:b2:d8:40:af:d6:b1:60:74:45:a0:33:75:
de:74:78:7d:9b:da:f8:88:cd:29:96:2f:41:7f:59:85:33:6c:
79:f9:7b:d6:5d:b2:cd:7a:a3:c5:ff:f4:be:83:6d:36:bd:bd:
8e:27:4d:81:f9:65:ea:17:28:f6:5a:22:d7:e8:e0:d2:a0:60:
d9:d5:59:08:e0:1c:b4:2a:ed:9c:29:96:8c:e4:55:05:de:0c:
ee:48:4d:21:14:d0:21:48:a8:f2:07:16:39:d9:09:70:a3:b0:
2c:9a:88:89:18:a9:c2:4d:b6:f3:aa:c4:6d:7f:4f:35:c6:05:
d0:1a:ac:a2:ef:b2:1f:c3:b0:8e:22:b2:0d:18:78:e1:92:eb:
6f:90:da:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:50:27 2026 by rpki-client