Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/3130392e3130372e33322e302f32302d3230203d3e203531303539.roa
File: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (raw, json)
Hash identifier: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=
Subject key identifier: 83:25:CC:EC:6E:A8:68:66:9F:27:F3:DC:A5:29:CD:E2:DD:DE:AF:48
Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial: 625CA6C0482F6435012E87174BBC1178F144A6E1
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/3130392e3130372e33322e302f32302d3230203d3e203531303539.roa
Signing time: Thu 01 Jan 2026 12:36:53 +0000
ROA not before: Thu 01 Jan 2026 12:31:53 +0000
ROA not after: Thu 31 Dec 2026 12:36:53 +0000
asID: 51059
IP address blocks: 109.107.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 07:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:5c:a6:c0:48:2f:64:35:01:2e:87:17:4b:bc:11:78:f1:44:a6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Validity
Not Before: Jan 1 12:31:53 2026 GMT
Not After : Dec 31 12:36:53 2026 GMT
Subject: CN=8325CCEC6EA868669F27F3DCA529CDE2DDDEAF48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ba:41:2d:2d:18:9e:ad:2d:bb:3f:ab:21:e1:
b8:1f:8a:0a:b8:36:fd:60:e7:91:53:df:14:f4:41:
32:5f:56:3d:57:a9:ec:48:b1:88:7e:b5:f0:eb:30:
52:21:17:ad:99:d4:27:4e:77:7c:e5:c0:fe:80:20:
7b:1d:e1:14:84:60:ca:68:6a:87:5d:d3:44:e0:3c:
d0:2f:da:d4:57:fa:6f:69:42:90:1a:c3:ae:a9:cd:
96:5f:64:43:9c:1f:b8:b3:7c:f5:ee:9e:b6:48:e9:
72:7a:80:3e:2e:b1:12:72:c5:bd:74:d8:6e:e3:7c:
4b:60:be:c8:da:86:99:ee:9f:3d:5a:b6:f6:16:3c:
6c:1e:91:18:5e:05:a8:fe:e7:de:2a:9d:dc:86:ce:
96:f3:7d:7f:21:56:ea:ff:ec:2e:2d:bb:35:88:a8:
75:33:01:4d:d0:a4:28:7a:0d:6e:13:ae:a1:ea:54:
80:8d:0f:b3:97:55:0a:f9:ea:16:bf:3c:f3:9e:f9:
d2:1b:5c:33:d9:9a:fc:6d:ce:d9:a4:00:b3:f8:77:
93:b8:96:d2:bb:43:33:41:c0:06:ee:e3:43:1c:36:
3a:1a:d6:45:89:be:8a:56:3f:ba:f7:85:53:a9:b6:
a1:af:df:31:4f:2f:04:6f:a9:19:83:58:f0:02:8c:
e9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:25:CC:EC:6E:A8:68:66:9F:27:F3:DC:A5:29:CD:E2:DD:DE:AF:48
X509v3 Authority Key Identifier:
keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/3130392e3130372e33322e302f32302d3230203d3e203531303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.32.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:20:ba:ac:d3:76:b8:7b:ae:4c:1c:c4:19:a7:5f:f5:b5:2a:
98:3d:cb:f6:c2:83:d2:69:05:d5:4a:5c:a5:3a:9b:a8:f7:b1:
61:42:71:0d:76:d8:7a:d3:a5:cc:20:b1:74:26:6d:ea:e3:fa:
9d:9f:3c:7b:fd:a5:17:d8:89:dc:c2:d5:cb:df:86:56:56:61:
bf:73:a4:e4:a5:ca:53:5d:10:56:f0:65:10:c7:a0:dc:51:23:
50:1e:d6:86:fe:33:da:d4:61:c1:df:07:38:78:52:6d:c5:84:
c5:e0:26:5b:ac:17:e9:3c:36:2e:9b:aa:81:99:00:87:1d:05:
e5:79:7e:99:3f:68:16:f4:87:d4:0a:e2:16:be:ae:9e:f2:55:
74:05:88:32:1f:75:35:c3:50:84:6a:1b:2e:ed:38:34:88:e3:
e4:d7:c1:ee:ed:0e:6e:12:be:98:bb:9d:d7:54:05:d2:08:b7:
ed:ce:0f:47:53:c2:99:2e:e5:d1:9b:64:a6:95:b9:4c:33:9f:
2e:ea:da:56:40:67:90:39:4b:55:97:76:cd:dd:51:ac:d3:94:
d3:6a:ac:42:3b:10:bc:58:50:0b:9c:9f:c2:4c:3d:3d:25:d3:
5c:e0:e5:70:2b:a2:df:9b:a3:47:aa:c4:32:7a:99:22:00:ca:
76:9d:b7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:44:24 2026 by rpki-client