Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3136302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: x9Kp/xMU5EPIps72ODPvG+MZWbLN1ECZ6z/z+qvPW58=
Subject key identifier: 49:97:64:4D:64:B4:D0:45:89:E4:30:60:F7:86:8B:6C:98:78:F5:49
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 52C7A22C5A04E82177DEABFC1AD90BF04344DC9E
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32342d3234203d3e20383334.roa
Signing time: Wed 25 Feb 2026 17:10:18 +0000
ROA not before: Wed 25 Feb 2026 17:05:18 +0000
ROA not after: Wed 24 Feb 2027 17:10:18 +0000
asID: 834
IP address blocks: 109.110.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 05:42:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:c7:a2:2c:5a:04:e8:21:77:de:ab:fc:1a:d9:0b:f0:43:44:dc:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 25 17:05:18 2026 GMT
Not After : Feb 24 17:10:18 2027 GMT
Subject: CN=4997644D64B4D04589E43060F7868B6C9878F549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d8:5d:da:af:1c:00:fd:b4:e0:bc:97:45:c6:
01:9f:ba:a2:63:cb:4b:36:19:eb:9f:bc:9e:cd:36:
76:bb:ee:96:7d:54:5d:cf:c6:0b:d4:7f:9b:70:04:
4e:3e:7f:7a:12:c6:8e:0a:a4:01:a8:f7:71:0e:62:
fd:e6:e2:3b:e9:fd:ff:01:04:1b:a0:6c:9b:34:00:
d4:8f:7b:47:74:36:69:31:af:3d:aa:96:c9:56:51:
24:4f:3d:3e:44:2e:10:3d:bf:79:73:b2:4b:45:48:
94:94:a8:99:3b:71:7f:ab:b4:e7:39:a0:c7:bf:50:
eb:9d:11:fe:50:30:52:38:8d:99:42:f8:05:5c:8b:
f0:15:de:46:d7:29:52:e6:52:5d:67:97:93:e1:1b:
52:86:1b:8e:68:7c:c3:be:ca:19:31:9f:57:1d:15:
cb:5d:94:04:95:0c:6a:d2:f7:f8:1c:58:7d:29:f6:
2a:52:d8:9f:00:93:06:eb:42:d9:f0:a6:b3:79:2b:
bc:e0:0e:72:2c:f2:af:dc:6e:76:3f:80:22:4c:26:
09:bd:73:0e:42:9b:a0:2a:c1:25:e1:2b:c6:78:5b:
1d:19:ce:cc:5e:1c:33:06:74:c0:2f:55:db:77:54:
2b:c9:4e:9c:be:03:f6:27:02:4d:3f:b7:8e:15:16:
8d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:97:64:4D:64:B4:D0:45:89:E4:30:60:F7:86:8B:6C:98:78:F5:49
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.160.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:17:6c:de:00:6c:cf:ec:fd:8f:e8:1b:f6:c4:ff:6b:17:e0:
d9:2a:e4:42:27:c7:dc:0f:2d:4d:9f:78:a5:9a:76:82:65:e2:
dc:86:86:0c:11:77:30:98:2e:69:9d:ba:26:df:94:76:06:65:
f5:67:36:63:03:09:9a:de:38:4b:df:c2:39:3b:5b:18:73:69:
52:17:8f:7e:ac:17:87:b7:8a:42:68:48:bd:6b:0c:1d:32:0e:
b5:17:f6:e2:54:86:8c:e2:3a:10:f7:7f:65:c7:a0:e0:78:15:
9b:83:d7:54:30:68:94:22:56:60:52:29:53:9c:d0:fe:3a:a5:
9d:da:6b:a9:4c:d4:de:27:ad:d0:7c:25:e2:01:4f:d2:71:27:
a4:6c:dc:7b:27:d9:79:2f:c8:44:a1:8e:03:09:15:72:bf:fb:
c1:46:17:49:b7:73:16:1b:4c:a6:f2:40:c6:fa:a9:d8:98:61:
a8:e4:7e:c0:52:1e:60:88:02:b6:09:00:75:12:56:f4:ca:23:
f4:c1:6d:56:df:41:6d:8d:12:ea:4b:94:86:93:7e:12:e2:f6:
5e:18:40:ff:8f:ab:ff:f2:15:c2:d7:f3:20:3a:57:38:34:80:
3e:93:18:21:3f:47:7f:c5:e0:05:5e:a5:0f:2f:cf:bb:f6:6e:
30:ca:1b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:23:26 2026 by rpki-client