Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31352e302f32342d3234203d3e20313337343130.roa
File: 3130392e3130362e31352e302f32342d3234203d3e20313337343130.roa (raw, json)
Hash identifier: UUj+VmYR6g6R/jhRk87u4V/yGJQL3lWiD1i1nVfeo3g=
Subject key identifier: 10:5C:C2:E4:92:89:D3:63:5C:2D:3E:EB:02:57:F2:D9:DD:BB:FA:CD
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 7D4C7C070D51531E97D0AE9EADFFE13A84D0E974
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31352e302f32342d3234203d3e20313337343130.roa
Signing time: Thu 06 Aug 2026 11:35:58 +0000
ROA not before: Thu 06 Aug 2026 11:30:58 +0000
ROA not after: Thu 05 Aug 2027 11:35:58 +0000
asID: 137410
IP address blocks: 109.106.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 15:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:4c:7c:07:0d:51:53:1e:97:d0:ae:9e:ad:ff:e1:3a:84:d0:e9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Aug 6 11:30:58 2026 GMT
Not After : Aug 5 11:35:58 2027 GMT
Subject: CN=105CC2E49289D3635C2D3EEB0257F2D9DDBBFACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f5:64:4e:88:0a:98:af:20:f6:4c:69:6b:e5:
fb:37:8f:2a:06:e3:6e:82:5c:64:2c:47:0a:6c:d2:
df:d8:0f:ec:60:36:7a:e9:d0:3a:0f:15:94:2b:b4:
50:de:83:24:4d:c9:78:0a:47:8d:77:fd:3a:40:0e:
18:85:35:dc:3c:e2:7a:b5:9f:dc:97:59:aa:ef:b0:
68:f8:47:35:d7:43:08:f5:cd:3e:bc:a8:be:51:f8:
00:a5:27:61:fa:8d:20:20:98:46:81:f5:e9:b4:27:
ac:7c:63:21:99:50:a5:b9:d3:9d:ce:a2:dc:25:d6:
8a:d3:be:04:5a:0e:f1:68:a4:7e:b9:95:08:fa:29:
ae:91:49:dc:fe:c9:a5:6e:39:e6:7e:80:46:ea:3f:
fd:4f:41:a2:6a:ad:20:d6:d2:3b:06:88:7a:ab:a3:
ce:07:db:48:62:5d:6d:69:aa:50:4b:a5:8c:2b:c8:
a7:d4:c5:8d:69:e4:a3:ae:8b:24:25:c4:33:83:af:
9b:ca:df:b2:6d:1c:a6:86:b4:d5:52:a0:f8:c3:fb:
e3:c0:1d:c6:ff:aa:aa:42:2f:37:17:fe:eb:0a:e5:
69:a9:9b:4f:d5:c0:71:5a:c3:bc:2a:1e:2c:d3:e5:
15:f1:84:1f:8e:a8:df:1c:94:12:5d:d2:61:ab:88:
4c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5C:C2:E4:92:89:D3:63:5C:2D:3E:EB:02:57:F2:D9:DD:BB:FA:CD
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31352e302f32342d3234203d3e20313337343130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.15.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:d3:94:1c:04:4b:20:e8:81:4c:1d:75:1e:2a:fc:f8:96:95:
18:fd:e2:3b:32:4b:ac:ea:56:01:70:92:65:7c:5c:86:cf:f4:
c3:35:bf:68:2a:01:4e:e3:1e:7c:b5:1e:8a:be:a6:a5:ac:e6:
65:b1:8d:79:7b:c9:a4:69:dc:cf:cd:28:b8:e1:69:70:97:71:
5c:88:0f:5d:bb:42:96:f3:62:4c:4b:01:b0:8f:80:7a:4c:cd:
8a:6c:16:cc:cf:54:0a:28:d1:7e:98:75:0d:8e:be:82:2e:6a:
98:c3:92:f7:ff:fd:ea:e1:69:2c:d0:87:14:28:ee:4f:f9:4e:
07:36:5d:82:2a:df:dc:c3:01:02:e2:79:4a:45:79:6e:05:bf:
46:53:38:27:0e:22:49:13:5e:04:a2:ab:7b:a9:cb:a1:dd:74:
24:06:0a:a4:79:af:c7:b2:1d:07:b9:c6:41:25:cc:60:6a:e2:
ce:7e:2c:15:32:c8:e3:d3:88:ad:58:6d:46:7a:e7:91:bd:95:
99:e2:74:5c:83:fe:98:7a:3d:36:4c:28:e4:f7:99:6a:9b:3f:
dd:cb:a8:e6:e9:02:f1:c9:18:d7:c1:a0:bf:cf:8c:1a:b5:5b:
5e:37:43:f1:00:14:d9:72:2a:50:7b:4e:3c:23:29:d9:4d:d4:
18:34:99:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:23 2026 by rpki-client