Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa
File: 3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier: ORBhPdQs7bhbgbHqRNbRX9b7nVMMEM9/idQA84qjjeU=
Subject key identifier: BB:AA:9F:CB:0A:DA:8F:4F:7A:FE:24:61:C2:9D:0A:15:C7:6D:F5:B6
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 274C4D9CAF6AB169C3773E8B26D31F67442F4A85
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa
Signing time: Fri 12 Jun 2026 22:47:33 +0000
ROA not before: Fri 12 Jun 2026 22:42:33 +0000
ROA not after: Fri 11 Jun 2027 22:47:33 +0000
asID: 42831
IP address blocks: 109.234.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:45:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:4c:4d:9c:af:6a:b1:69:c3:77:3e:8b:26:d3:1f:67:44:2f:4a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Jun 12 22:42:33 2026 GMT
Not After : Jun 11 22:47:33 2027 GMT
Subject: CN=BBAA9FCB0ADA8F4F7AFE2461C29D0A15C76DF5B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9b:bc:e4:68:9d:08:86:61:88:f0:3e:62:7f:
47:0d:45:09:bc:fb:0f:99:d7:e2:39:e8:70:67:cc:
a9:14:f6:83:77:27:40:31:d5:f2:1c:78:09:14:ab:
89:24:f7:3a:08:29:18:65:a1:ee:f9:85:76:36:86:
25:e1:94:f7:a7:0e:70:1f:c6:93:38:b0:d8:f3:6a:
f2:e4:fd:f7:87:ad:82:c4:47:7d:e3:b9:83:16:53:
e1:dd:c2:1d:6a:83:65:a9:6c:41:7d:09:c0:16:10:
ed:c7:09:43:ef:c1:7e:9e:12:d1:dd:07:30:44:ab:
27:b3:d9:b8:47:2c:2a:48:c2:36:17:11:f0:e3:ca:
b7:07:54:70:37:d1:d2:cf:79:25:f8:e7:f1:4e:1b:
b1:ec:db:1c:5c:15:cb:a6:c2:dc:fc:47:e5:cc:79:
43:86:44:f2:b2:db:f6:49:65:cd:1f:70:d6:3b:b7:
60:f1:b5:a7:b9:be:bb:b3:08:90:4c:bb:3b:0e:41:
83:44:aa:10:a5:e9:78:42:13:90:b7:7c:57:d1:29:
7e:8a:91:5c:ec:77:19:91:18:91:85:bb:58:d6:9f:
57:97:24:78:27:d7:e9:2d:03:c2:20:e0:0f:98:f5:
2e:09:54:32:b0:c8:e5:f0:11:05:c4:b1:28:a8:30:
a4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AA:9F:CB:0A:DA:8F:4F:7A:FE:24:61:C2:9D:0A:15:C7:6D:F5:B6
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.210.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:37:8a:79:df:48:68:7c:07:67:ef:15:1a:99:0e:f2:73:25:
ff:25:a9:e9:98:9c:86:90:02:2e:96:ed:aa:4a:44:85:12:c7:
05:0d:db:95:3a:67:26:0a:7e:cc:83:65:cc:1a:03:28:44:a5:
36:45:59:d9:8d:2e:2d:e3:5b:0f:8f:5c:6c:30:3b:2f:4d:ed:
fd:99:b9:98:0e:b6:3b:68:a0:ad:8e:c1:e3:fa:32:9c:29:9d:
f0:1f:9e:61:5c:4b:4d:9b:e0:b1:7a:bb:d9:33:36:d1:14:ab:
2c:b9:a1:50:4d:f5:60:40:49:9a:31:cd:17:03:07:67:cb:64:
fb:89:5c:dc:29:43:af:68:19:62:9e:f3:e6:d5:f9:cb:d8:9c:
d9:ee:2f:a4:1f:ab:37:22:cd:a2:d8:37:1b:ba:b6:74:16:c2:
d8:31:57:8e:31:df:2c:5f:e7:62:8b:03:77:75:9c:5d:ed:ea:
35:ab:6e:fe:ba:85:fc:91:41:9f:73:86:4c:18:5f:51:f1:bc:
5a:ba:ee:10:f2:6b:28:a7:f4:ea:f0:89:f6:66:bc:ba:97:69:
9b:79:56:42:74:46:c0:c8:88:81:80:d0:a6:5c:7c:b8:85:80:
c9:d1:c2:4d:6d:09:d7:60:e9:e9:e2:36:b4:59:6e:48:5d:75:
5b:f4:cb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:57:29 2026 by rpki-client