Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136312e302f32342d3234203d3e20323134303235.roa
File: 3130392e3131302e3136312e302f32342d3234203d3e20323134303235.roa (raw, json)
Hash identifier: CAMOTCmgYSCgiyJUug2xemGiDevQ+maLwWu1PQNWV3s=
Subject key identifier: 3E:53:5B:A3:F5:9B:5C:A3:B2:1F:6F:CF:78:4D:4C:BC:89:3D:B7:84
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 1246A46CBF381E0FF5A18A8D3366A8EB4E634587
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136312e302f32342d3234203d3e20323134303235.roa
Signing time: Mon 30 Mar 2026 20:57:41 +0000
ROA not before: Mon 30 Mar 2026 20:52:41 +0000
ROA not after: Mon 29 Mar 2027 20:57:41 +0000
asID: 214025
IP address blocks: 109.110.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:46:a4:6c:bf:38:1e:0f:f5:a1:8a:8d:33:66:a8:eb:4e:63:45:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Mar 30 20:52:41 2026 GMT
Not After : Mar 29 20:57:41 2027 GMT
Subject: CN=3E535BA3F59B5CA3B21F6FCF784D4CBC893DB784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b8:a9:15:87:17:8d:1f:86:cf:aa:df:1a:3b:
9a:ee:f0:ad:f5:61:b6:ef:dd:2b:8d:27:60:c1:ce:
ee:4e:96:20:6f:1b:38:fe:a6:71:6f:e8:db:3d:60:
64:0f:d7:bb:8a:2a:13:42:8c:f1:b6:a0:4c:d3:a0:
d0:8c:a0:ad:97:cc:55:13:a4:10:18:1f:75:33:9d:
e7:0c:e3:63:68:ac:60:aa:da:fd:8b:d0:95:ff:30:
be:bf:45:d6:3e:c5:13:ab:2d:35:b0:18:a2:02:e5:
5c:9f:62:3d:cb:b9:e9:ae:5b:d7:af:12:31:8d:1a:
23:dd:d2:e1:82:f8:50:80:52:5c:ab:16:14:42:d0:
6c:36:6a:74:43:ea:cd:3a:c3:bb:30:ce:86:05:a2:
6e:16:ae:e7:c4:0e:8b:ec:88:ea:60:fd:6e:60:86:
d5:87:92:6e:27:46:b8:64:54:19:1f:8d:13:13:8a:
af:80:60:2a:23:62:da:8a:4b:23:31:15:e4:07:75:
64:d2:4c:97:47:43:dc:16:13:b0:53:1f:b8:de:b2:
70:fb:6c:2f:c8:9f:06:3b:1e:49:31:7b:fe:f2:de:
f6:93:ca:ea:ab:84:de:0c:d5:7b:3a:fd:96:61:9f:
ae:6e:08:c0:3e:f2:57:63:0a:63:56:d2:35:50:da:
cb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:53:5B:A3:F5:9B:5C:A3:B2:1F:6F:CF:78:4D:4C:BC:89:3D:B7:84
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136312e302f32342d3234203d3e20323134303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.161.0/24
Signature Algorithm: sha256WithRSAEncryption
20:09:2c:d2:17:11:db:02:08:ab:5c:3f:56:4f:d4:7a:a3:62:
e4:9f:5f:7a:25:b2:74:34:bb:13:44:cc:2f:0c:c7:a1:da:b9:
9e:d0:e3:92:5e:2d:9e:2c:87:11:17:e8:3d:57:30:75:48:bb:
e7:0b:0a:3d:31:af:a0:7c:d5:eb:c9:2b:8a:8e:b9:cb:c8:4b:
f2:63:02:9d:98:bd:db:45:63:46:a3:29:a4:40:81:6d:2b:d6:
2a:b3:5e:52:ed:bc:03:cb:03:35:f0:bf:1f:c2:36:66:8e:cb:
d5:6b:85:11:39:f6:bf:45:b5:1d:d7:74:97:26:f3:5b:b4:a5:
16:33:c1:8e:b5:9d:bd:3e:85:4d:f1:83:40:0b:98:25:5e:9e:
5d:ba:1f:23:70:9c:e5:d0:63:c8:97:09:0f:b4:d5:12:6e:a6:
2b:19:bc:25:23:c6:75:f1:0e:16:4e:4b:5f:c1:d3:0d:a3:e1:
46:31:25:d7:d6:16:aa:c5:83:fa:a7:be:da:31:5a:d3:c4:0a:
89:18:8d:f0:3f:50:6e:68:f0:27:67:a9:db:dd:bd:46:a1:1a:
16:ad:a7:e2:a9:a7:69:af:c2:e7:26:7b:08:13:ee:95:a5:3d:
57:85:b8:28:79:27:0d:4f:db:51:15:09:e6:12:d5:0a:d3:31:
e2:c5:45:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:20:25 2026 by rpki-client