Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137322e302f32342d3234203d3e20323135343430.roa
File: 3130392e3131302e3137322e302f32342d3234203d3e20323135343430.roa (raw, json)
Hash identifier: +r4IAJPmClwW45jmaBdG8dMArxqgJUo3S+5KFOXZ204=
Subject key identifier: D1:AA:7E:0A:D7:14:4A:DB:95:E2:3D:93:9A:A0:5E:BA:05:5B:44:43
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 192693C3C8C3C22E3A1857B6B55AFBD106954A54
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137322e302f32342d3234203d3e20323135343430.roa
Signing time: Wed 06 Aug 2025 16:54:13 +0000
ROA not before: Wed 06 Aug 2025 16:49:13 +0000
ROA not after: Wed 05 Aug 2026 16:54:13 +0000
asID: 215440
IP address blocks: 109.110.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:26:93:c3:c8:c3:c2:2e:3a:18:57:b6:b5:5a:fb:d1:06:95:4a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Aug 6 16:49:13 2025 GMT
Not After : Aug 5 16:54:13 2026 GMT
Subject: CN=D1AA7E0AD7144ADB95E23D939AA05EBA055B4443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fd:0a:e0:fe:0a:3b:6a:41:6c:c8:96:c7:fe:
b6:1e:ed:b3:f0:2e:83:c4:0f:44:fb:77:60:44:36:
db:d9:79:80:79:ff:c1:36:8c:0f:0f:2a:03:6d:65:
2f:ba:b8:97:4a:6d:bd:7d:d4:c3:f8:8d:eb:d9:7c:
2f:71:e3:e6:f6:4f:e1:56:a6:1f:3b:7e:4a:64:1c:
5b:5b:f1:35:c3:94:a2:f1:ce:93:ed:bb:f0:c9:d6:
45:00:f4:0e:ea:8e:60:b5:0c:f7:39:65:89:49:3e:
bd:d0:31:b9:7c:33:49:e9:93:2f:33:ac:fa:c2:77:
56:6d:f9:a0:ac:38:3d:fe:d7:ed:d1:3f:4b:2a:5e:
99:c7:9e:49:de:2a:0c:0e:2a:e1:e2:66:e5:94:93:
8b:ff:51:2d:ba:93:fe:4e:51:4d:dd:23:44:27:2a:
16:ea:f3:c3:95:de:48:07:ce:37:01:1e:c4:d7:9d:
90:2a:68:2f:b7:41:cf:45:32:d9:ee:d2:59:78:9e:
fc:b3:54:4b:3b:a3:53:d1:27:61:f2:10:d4:96:32:
f5:74:a1:7b:53:9d:0b:f4:b8:28:c3:e2:92:25:f9:
26:28:02:e5:22:e4:ea:37:9c:be:bc:e0:47:cd:54:
5b:72:0f:66:62:36:73:ec:22:d0:91:f2:01:0c:ca:
5f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AA:7E:0A:D7:14:4A:DB:95:E2:3D:93:9A:A0:5E:BA:05:5B:44:43
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137322e302f32342d3234203d3e20323135343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.172.0/24
Signature Algorithm: sha256WithRSAEncryption
af:a9:e2:26:9a:9b:86:0d:32:b2:52:48:2f:0d:d8:e7:b6:ed:
8b:32:98:e7:b3:0b:38:53:21:c3:b2:71:90:64:94:7d:5e:55:
4a:9c:e8:8a:6e:27:0f:23:e5:99:89:30:43:20:6f:af:cf:26:
2e:4e:52:28:a5:0b:17:ce:9b:25:6a:50:70:32:a9:e7:91:e6:
df:03:78:16:b0:9f:b1:fe:f5:35:8c:a0:bb:bd:99:4e:87:cc:
28:a0:45:d6:5b:82:20:e9:8a:38:9b:a6:0d:c5:fd:af:ba:f9:
35:0f:2a:e2:29:d6:87:b4:ac:1c:4c:08:37:45:42:e4:6c:e6:
51:be:e3:e0:79:f8:02:6b:17:a1:ad:d4:5f:a1:31:a7:4e:d2:
ed:38:f8:78:58:4a:78:ad:3e:27:7a:c5:43:6a:d8:4c:2f:e0:
5c:00:64:87:25:fb:94:e6:d5:3d:2a:b8:ac:b7:da:42:04:7d:
91:16:73:69:72:36:35:50:11:9d:f3:2e:b7:d0:e4:bd:98:35:
06:31:a7:bf:e4:b7:c3:fa:01:f4:68:3c:c3:43:54:6b:aa:e1:
4c:2a:a7:f7:c2:8c:3a:dc:a3:ec:dc:07:d9:e6:3d:64:5b:0d:
67:95:d9:de:70:79:60:12:f6:51:35:f2:22:46:55:ba:65:ef:
7f:b5:e4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:28:49 2025 by rpki-client