Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136322e302f32342d3234203d3e20323136313833.roa
File: 3130392e3131302e3136322e302f32342d3234203d3e20323136313833.roa (raw, json)
Hash identifier: yMXEoMpPEoS5qknBhTxkBsf8eRtVa6WRzsI++iHHSZI=
Subject key identifier: 7B:E5:60:96:66:4C:E9:A6:A8:5D:A6:3B:E0:47:52:F7:91:21:7D:84
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 6BDA1CAF09D1B7F1628DCB04DE1D7A68410D9645
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136322e302f32342d3234203d3e20323136313833.roa
Signing time: Wed 25 Feb 2026 20:46:28 +0000
ROA not before: Wed 25 Feb 2026 20:41:28 +0000
ROA not after: Wed 24 Feb 2027 20:46:28 +0000
asID: 216183
IP address blocks: 109.110.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:da:1c:af:09:d1:b7:f1:62:8d:cb:04:de:1d:7a:68:41:0d:96:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 25 20:41:28 2026 GMT
Not After : Feb 24 20:46:28 2027 GMT
Subject: CN=7BE56096664CE9A6A85DA63BE04752F791217D84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:17:e7:91:6f:82:06:a0:7c:7b:fd:9d:3e:09:
de:75:ae:9a:d0:2e:e8:b9:fb:ff:29:d9:3f:15:a6:
73:b3:ba:ac:ff:6c:fb:ca:55:7f:8d:a5:3f:61:67:
15:7e:28:77:2b:63:c4:c8:45:f0:ca:6a:c7:d1:9e:
a4:10:09:47:cc:46:89:da:19:d0:ad:e4:b6:05:99:
77:1b:91:e3:69:76:4d:1f:c3:b4:d8:be:ac:84:5e:
f6:7d:89:8b:2b:9a:cb:58:f6:7c:72:83:41:5e:a2:
6e:41:7c:35:87:73:40:2b:03:03:f5:2e:ed:a9:51:
c9:d6:b5:56:4b:cb:f7:ac:0c:b8:4d:77:1a:f9:a4:
a5:d5:ae:44:e5:fb:ae:fc:fd:85:84:9d:13:c3:8a:
f9:e2:7f:1f:16:c4:50:c2:d2:6b:0a:4e:cc:90:e6:
79:a4:a2:9b:41:b3:98:76:f0:92:5c:d5:bc:74:f2:
b2:db:63:d6:2c:16:8d:54:0d:ea:90:ad:fc:85:3e:
84:c2:5c:be:74:1f:91:c6:59:b2:47:87:5f:69:bb:
8c:78:65:28:30:63:42:7b:28:c5:11:af:ae:e4:47:
94:12:7f:c2:87:8c:f4:9c:0e:80:d5:d0:d3:5a:7b:
10:07:23:e0:64:6e:b5:62:1b:9c:ba:a7:0d:ae:33:
16:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E5:60:96:66:4C:E9:A6:A8:5D:A6:3B:E0:47:52:F7:91:21:7D:84
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136322e302f32342d3234203d3e20323136313833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.162.0/24
Signature Algorithm: sha256WithRSAEncryption
76:57:1a:73:ba:58:bd:e1:54:fe:b6:24:92:28:03:ec:32:e0:
ff:93:a5:0e:1c:e9:fb:6e:97:7a:e8:4c:46:98:fb:67:b7:44:
0e:02:cc:4a:76:77:76:44:d9:21:2b:d6:22:7e:07:dd:aa:b0:
c0:2a:17:cf:c5:c3:09:b7:b6:a3:2c:55:24:27:56:d5:75:d3:
b7:4f:44:61:23:92:e7:c5:20:29:aa:e4:74:9b:c3:82:2c:b3:
34:8b:24:64:c4:b1:4b:b0:e4:cb:47:8d:80:08:35:d7:70:1e:
52:21:67:b3:35:9c:04:bc:b3:a5:b9:87:df:3f:ff:36:fb:52:
9a:76:d0:81:1a:e4:3b:ac:cf:99:7d:a1:ad:90:c0:bf:71:ad:
d0:05:af:88:39:e3:96:d1:70:92:ca:92:33:2d:57:03:7c:23:
63:07:96:bd:a7:2d:37:70:db:5c:98:8d:1b:5a:c3:6a:ed:b7:
2c:40:84:52:ad:be:4d:a4:0a:c5:7c:c9:19:23:5b:87:39:86:
9c:5b:7e:2e:ad:b6:eb:f4:bb:01:0b:0f:9b:6c:04:58:1f:7f:
05:8d:52:e2:4b:64:15:06:9b:a2:b5:d9:1c:60:63:f7:59:d7:
ef:6c:42:61:b2:8b:33:fa:c2:0f:8e:19:6d:9b:22:a6:07:94:
6a:f2:3d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:57 2026 by rpki-client