Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136342e302f32342d3234203d3e20313432313436.roa
File: 3130392e3131302e3136342e302f32342d3234203d3e20313432313436.roa (raw, json)
Hash identifier: toOqhwt2t26fu+Sd1++xZHhl1T+liYrTJIkC1aGmy8g=
Subject key identifier: 22:69:2B:91:6F:08:37:1B:45:AA:10:C0:18:CD:B9:15:7A:16:01:0C
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 67C567710628B09ED8C7C7B4923FB81DEB93CA6D
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136342e302f32342d3234203d3e20313432313436.roa
Signing time: Tue 14 Apr 2026 08:47:05 +0000
ROA not before: Tue 14 Apr 2026 08:42:05 +0000
ROA not after: Tue 13 Apr 2027 08:47:05 +0000
asID: 142146
IP address blocks: 109.110.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:c5:67:71:06:28:b0:9e:d8:c7:c7:b4:92:3f:b8:1d:eb:93:ca:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Apr 14 08:42:05 2026 GMT
Not After : Apr 13 08:47:05 2027 GMT
Subject: CN=22692B916F08371B45AA10C018CDB9157A16010C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ef:15:e7:a4:3d:da:45:27:2c:dc:31:f3:b3:
70:39:7f:27:23:bc:52:39:f5:90:8e:2d:67:91:a3:
81:6b:d9:eb:ab:6b:d3:cc:c6:d0:cc:be:b6:ff:aa:
5a:a5:4c:52:d7:49:3a:b0:c3:99:8c:82:3e:fd:7b:
c9:7c:94:84:83:ee:be:4e:6b:71:fc:3e:dc:be:e5:
8d:69:34:03:26:ac:62:4b:e1:ad:dd:fe:a3:b5:42:
86:9f:bf:da:e1:34:19:41:e4:ed:2a:1d:fd:a8:54:
18:46:c3:bf:8c:e0:7b:7f:32:5f:84:40:80:07:d2:
95:b5:68:ff:6a:a5:35:93:5a:69:ea:83:c4:1b:37:
96:dc:2c:66:13:2d:20:bf:1f:03:b7:1d:e8:81:bc:
2c:e9:73:51:bf:98:6d:c3:e7:c6:b5:5f:96:de:8b:
bb:b2:c9:8c:6a:b4:d6:f3:cd:3f:67:7e:e1:1a:24:
21:cd:83:a1:3f:a2:ef:b6:e3:01:fa:42:ea:e2:9a:
05:3c:4e:cb:30:95:e3:0b:17:04:3c:2f:a4:ec:42:
6e:24:da:38:46:8d:9d:2d:57:10:7b:20:d0:bc:92:
be:c8:72:00:06:c3:df:5c:10:0e:90:41:fa:ac:2c:
c5:da:7c:30:76:21:aa:1d:32:a7:f6:e6:40:f4:03:
a9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:69:2B:91:6F:08:37:1B:45:AA:10:C0:18:CD:B9:15:7A:16:01:0C
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136342e302f32342d3234203d3e20313432313436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.164.0/24
Signature Algorithm: sha256WithRSAEncryption
20:86:a1:7f:64:4c:aa:5e:11:1f:e6:33:61:f6:8b:77:38:0a:
22:16:04:84:90:76:a5:42:8e:bb:d3:24:be:0f:a5:9b:97:e2:
67:55:69:c6:7a:a7:61:c8:c4:84:62:6c:09:4b:6f:dc:a4:f4:
9e:9d:f3:55:20:ac:bd:99:fe:51:fa:15:00:2b:f5:d1:7c:83:
5d:bf:7c:23:d3:fc:46:f3:dc:18:4e:70:e2:07:b6:ac:17:f0:
db:47:17:20:fb:dc:85:41:54:65:b5:be:b0:e6:9a:ab:3d:98:
db:81:17:bd:b9:10:44:6a:31:49:0d:53:0f:93:af:dd:74:12:
28:af:4c:bc:b5:37:f7:af:db:ae:39:42:2d:33:a7:42:d3:4a:
11:81:cf:e1:2e:f3:a1:e3:62:31:b7:0f:fc:4a:83:f9:05:1a:
83:f6:55:32:2b:55:0a:83:48:35:82:33:09:f6:59:c9:a4:56:
24:f3:bb:6e:94:05:dd:4a:5c:5a:09:be:b0:d5:d2:85:39:0e:
11:ec:40:37:13:92:2f:39:15:c7:69:cf:dc:10:f4:29:4e:1b:
ba:95:a6:34:79:0f:d0:ea:3f:a4:13:49:83:59:1d:6f:35:17:
eb:f8:dc:a5:2b:e9:88:6a:8c:80:84:0a:81:c7:a3:b6:85:29:
80:3b:2e:15
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUZ8VncQYosJ7Yx8e0kj+4HeuTym0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNjA0MTQwODQyMDVaFw0yNzA0MTMwODQ3MDVaMDMxMTAvBgNV
BAMTKDIyNjkyQjkxNkYwODM3MUI0NUFBMTBDMDE4Q0RCOTE1N0ExNjAxMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd7xXnpD3aRScs3DHzs3A5fycj
vFI59ZCOLWeRo4Fr2eura9PMxtDMvrb/qlqlTFLXSTqww5mMgj79e8l8lISD7r5O
a3H8Pty+5Y1pNAMmrGJL4a3d/qO1Qoafv9rhNBlB5O0qHf2oVBhGw7+M4Ht/Ml+E
QIAH0pW1aP9qpTWTWmnqg8QbN5bcLGYTLSC/HwO3HeiBvCzpc1G/mG3D58a1X5be
i7uyyYxqtNbzzT9nfuEaJCHNg6E/ou+24wH6QurimgU8TsswleMLFwQ8L6TsQm4k
2jhGjZ0tVxB7INC8kr7IcgAGw99cEA6QQfqsLMXafDB2IaodMqf25kD0A6lzAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUImkrkW8INxtFqhDAGM25FXoWAQwwHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx
MzYzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMjMxMzQzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAG1upDANBgkqhkiG9w0BAQsFAAOCAQEAIIahf2RMql4RH+YzYfaLdzgKIhYE
hJB2pUKOu9Mkvg+lm5fiZ1VpxnqnYcjEhGJsCUtv3KT0np3zVSCsvZn+UfoVACv1
0XyDXb98I9P8RvPcGE5w4ge2rBfw20cXIPvchUFUZbW+sOaaqz2Y24EXvbkQRGox
SQ1TD5Ov3XQSKK9MvLU396/brjlCLTOnQtNKEYHP4S7zoeNiMbcP/EqD+QUag/ZV
MitVCoNINYIzCfZZyaRWJPO7bpQF3UpcWgm+sNXShTkOEexANxOSLzkVx2nP3BD0
KU4bupWmNHkP0Oo/pBNJg1kdbzUX6/jcpSvpiGqMgIQKgcejtoUpgDsuFQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:37:22 2026 by rpki-client