Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31352e302f32342d3234203d3e203330303538.roa
File: 3130392e3130362e31352e302f32342d3234203d3e203330303538.roa (raw, json)
Hash identifier: 3cSeYTJYRw4iucElEnBQRmJZKuRWcgdGycqXEqE1FMU=
Subject key identifier: 33:AC:48:D3:2D:A9:76:0A:BE:0A:02:F2:5F:73:2D:EC:31:19:90:0F
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 61B2B1EB4C1A4F56B983F92C9B454E1FEF2D1610
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31352e302f32342d3234203d3e203330303538.roa
Signing time: Mon 02 Mar 2026 11:32:50 +0000
ROA not before: Mon 02 Mar 2026 11:27:50 +0000
ROA not after: Mon 01 Mar 2027 11:32:50 +0000
asID: 30058
IP address blocks: 109.106.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 09:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:b2:b1:eb:4c:1a:4f:56:b9:83:f9:2c:9b:45:4e:1f:ef:2d:16:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Mar 2 11:27:50 2026 GMT
Not After : Mar 1 11:32:50 2027 GMT
Subject: CN=33AC48D32DA9760ABE0A02F25F732DEC3119900F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:67:71:2a:0e:3b:e0:5c:8c:78:55:4a:a5:c7:
33:63:e9:b7:11:89:7e:f3:7e:04:0c:b1:e4:34:7e:
cb:0d:8d:43:c5:f6:ec:ac:fa:84:f2:c3:bd:a1:01:
a0:fa:be:84:13:6e:97:84:94:ce:d3:cd:b8:4f:c5:
fa:a6:39:cb:0f:38:b8:18:9e:9d:fb:20:43:79:78:
57:5e:08:68:51:63:f6:a2:b6:3a:94:57:82:e4:98:
76:37:24:50:3c:b6:5c:fb:40:df:91:17:99:c0:65:
9a:bd:1e:22:4e:74:2b:70:ff:b3:60:67:90:4f:37:
f5:08:78:74:0e:8e:94:b1:89:9f:cd:c9:fe:a7:86:
69:8f:cd:b0:b3:2f:69:66:50:79:c5:3b:ef:0a:02:
2c:a5:60:72:de:0c:2d:16:72:06:af:f6:76:be:aa:
a5:26:ba:8c:e1:42:af:ab:fb:32:d5:fc:f8:5b:2f:
63:65:7b:1d:13:39:95:4c:20:c1:67:e4:d9:4f:c6:
6d:5f:60:40:4c:0a:e7:03:df:75:5b:56:72:26:b3:
28:e2:54:a0:63:08:2c:59:5d:ac:6c:90:3b:e9:3b:
10:84:9a:04:e3:cc:4b:8e:c2:71:6e:bf:ef:0c:d7:
03:cd:2d:8b:98:e7:e1:6b:d7:e6:ea:6c:24:90:e0:
2f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AC:48:D3:2D:A9:76:0A:BE:0A:02:F2:5F:73:2D:EC:31:19:90:0F
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31352e302f32342d3234203d3e203330303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.15.0/24
Signature Algorithm: sha256WithRSAEncryption
78:af:4a:1e:b0:1b:9f:9f:82:0e:62:65:87:8c:6b:38:e1:35:
13:6c:2c:ce:5e:c0:1d:b7:65:82:61:dc:98:6a:c7:30:55:1d:
62:b6:ce:a6:92:40:65:ad:6f:89:3f:84:ff:4d:dd:ba:61:7c:
cd:29:b7:56:cd:0c:c7:8c:d1:b1:2f:04:e8:83:ac:a1:79:33:
ee:83:e5:af:6e:4b:95:ff:9c:71:d0:c5:b9:ec:7b:12:9c:52:
8c:a1:44:1f:12:e8:5e:07:2a:cb:86:5a:1b:13:72:b2:8a:84:
9f:bc:84:a9:3d:bf:2b:0a:a0:25:75:1b:76:0d:79:82:41:28:
6d:ab:5d:c1:c1:6a:29:57:8f:ed:33:35:5f:10:f5:4e:0c:9e:
c8:e8:11:8d:fc:61:a9:6c:85:65:be:c2:b5:e6:c0:cf:73:fd:
c5:28:b5:15:12:3a:df:44:a6:1e:ca:52:7d:b9:34:de:08:46:
f7:71:0c:d2:16:7b:0d:8a:df:64:21:79:ec:cb:73:5e:ee:98:
d2:4c:df:44:51:37:68:18:7f:79:67:7d:85:b5:0e:d5:29:2e:
52:9b:21:0a:6d:40:23:a7:b4:77:e3:a9:24:10:81:3e:94:ab:
be:2d:03:2a:ef:2d:39:80:33:56:69:69:d2:a7:b6:0d:8c:6a:
57:2f:e1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:39:20 2026 by rpki-client