Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136312e302f32342d3234203d3e203136323736.roa
File: 3130392e3131302e3136312e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: /Va8PjeBaiTJ+W5lI3/lG6WrNhsra0aF4xZzFAYtjtQ=
Subject key identifier: B6:2C:B1:AA:FD:05:D2:63:C1:76:73:C6:24:9B:F3:AC:31:8C:20:BC
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 186472F15067E689582BE056D8702C1080DA1543
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136312e302f32342d3234203d3e203136323736.roa
Signing time: Wed 25 Feb 2026 17:07:45 +0000
ROA not before: Wed 25 Feb 2026 17:02:45 +0000
ROA not after: Wed 24 Feb 2027 17:07:45 +0000
asID: 16276
IP address blocks: 109.110.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:64:72:f1:50:67:e6:89:58:2b:e0:56:d8:70:2c:10:80:da:15:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 25 17:02:45 2026 GMT
Not After : Feb 24 17:07:45 2027 GMT
Subject: CN=B62CB1AAFD05D263C17673C6249BF3AC318C20BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:16:68:b1:92:4d:db:1e:ff:99:f9:7b:58:67:
e2:49:15:8e:21:9d:a9:a2:6a:0a:61:86:b5:2a:6a:
f2:ca:68:bf:1c:6f:35:25:74:cb:76:6d:8e:99:a8:
9e:ff:a9:aa:0d:28:f5:91:f0:b5:be:3e:fc:55:97:
df:82:c4:1a:70:ed:93:eb:52:25:00:e5:5e:6d:be:
d6:80:19:63:8e:53:48:34:c1:12:4a:14:15:25:6e:
37:9d:1e:64:2a:db:84:e3:24:28:c9:7b:f2:21:03:
f4:d7:a0:28:c7:41:c5:2b:0b:f8:44:f1:eb:3a:fa:
cc:d3:14:2e:d9:a3:45:42:cb:c2:eb:92:33:47:5b:
4b:1a:25:10:be:33:37:b3:f2:8c:38:95:14:b6:18:
90:e1:f1:0a:40:6d:b0:36:56:a7:e6:01:f7:50:0d:
22:c8:b6:12:9b:94:69:c3:f6:64:72:ee:d3:dd:e0:
8c:63:d4:33:8f:ac:ac:02:bd:ea:13:e0:ad:6e:19:
e4:fc:47:78:d9:0d:71:83:cc:da:38:9b:61:ac:e8:
7e:7b:d8:9f:e6:7b:8d:c8:73:6a:60:6c:77:50:fc:
14:de:ca:c8:e6:4e:d1:a7:1b:01:1a:a4:3f:26:30:
fb:0a:43:ee:a7:c3:4f:26:07:72:91:56:aa:72:bc:
ec:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2C:B1:AA:FD:05:D2:63:C1:76:73:C6:24:9B:F3:AC:31:8C:20:BC
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136312e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.161.0/24
Signature Algorithm: sha256WithRSAEncryption
34:4e:fd:bc:7b:38:bd:94:4a:0f:e7:d7:8f:c4:3a:df:fc:6b:
07:e9:f3:11:cf:7e:4d:d6:46:87:50:dc:b0:f4:52:62:9f:f7:
4a:46:7c:1d:62:9d:66:89:6f:e8:b0:df:89:b2:6a:2a:05:a0:
0a:b8:b3:16:44:56:2b:67:04:94:ad:92:ab:cf:85:bb:c4:bd:
42:66:12:bd:78:c9:be:20:cb:76:5f:73:0c:e8:63:a6:97:d3:
9a:c0:56:f1:3b:da:e8:6c:5a:62:aa:06:10:4c:04:24:1d:dc:
e9:43:3d:d6:88:49:70:e4:2c:41:ef:2c:1e:5c:b4:ba:2c:70:
b2:1a:59:27:82:a4:27:b7:6e:c9:89:ff:f8:6d:59:dd:75:50:
d9:79:55:af:9f:0a:97:40:e2:99:66:f7:d6:39:c6:0a:5f:33:
8a:8f:0e:fb:de:02:30:1a:e9:2c:95:44:b6:13:14:ed:13:78:
00:1e:78:99:84:de:49:ce:80:cc:c9:9b:b3:bf:52:e8:d8:19:
75:9a:b1:a3:3c:06:b1:d5:00:30:48:69:9d:2d:d9:49:39:de:
8b:7e:8d:af:ee:6a:15:c6:bf:bb:d0:21:16:94:29:fd:ff:fd:
d8:47:ee:33:e3:d1:fd:bf:52:fa:96:9a:aa:f3:f4:b9:8a:d1:
2b:e0:b4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:53:23 2026 by rpki-client