Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137332e302f32342d3234203d3e20323135303335.roa
File: 3130392e3131302e3137332e302f32342d3234203d3e20323135303335.roa (raw, json)
Hash identifier: YwOIH07JRoCyO8TJP/qsqArqXmyuyeB0QMLuAIkM0+Y=
Subject key identifier: 11:C1:2A:7B:CB:70:F2:FA:37:26:FE:9C:B0:7D:CC:DC:F4:E9:F8:B0
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 76D59A642B73205EEB54266518AFC5FD6C25C2A2
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137332e302f32342d3234203d3e20323135303335.roa
Signing time: Fri 04 Sep 2026 16:49:33 +0000
ROA not before: Fri 04 Sep 2026 16:44:33 +0000
ROA not after: Fri 03 Sep 2027 16:49:33 +0000
asID: 215035
IP address blocks: 109.110.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:05:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:d5:9a:64:2b:73:20:5e:eb:54:26:65:18:af:c5:fd:6c:25:c2:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Sep 4 16:44:33 2026 GMT
Not After : Sep 3 16:49:33 2027 GMT
Subject: CN=11C12A7BCB70F2FA3726FE9CB07DCCDCF4E9F8B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:1b:ba:40:95:43:7e:fa:d3:94:8a:ce:69:
ee:ab:e9:d1:3c:23:26:79:fa:2f:4a:c3:d2:73:ef:
6a:31:e0:43:c4:1d:90:10:0a:f5:b9:26:5b:24:7d:
52:c7:23:22:b4:a0:04:3c:15:4d:b8:87:93:8c:35:
89:6a:a7:d1:07:7b:72:24:be:c6:c9:19:5c:34:8d:
a8:26:55:21:13:d4:0e:e6:90:97:84:0a:22:b1:0a:
96:de:3a:16:f9:e2:90:7f:77:f3:42:47:ff:70:67:
ae:f8:38:08:89:06:a6:b5:73:b8:d6:db:ac:24:1e:
fd:9f:41:44:b1:72:ad:80:0c:fd:55:bf:04:9a:25:
dd:1e:fe:fa:2a:89:5d:06:29:81:42:80:d5:3f:61:
2b:bb:65:27:9c:cc:c0:84:26:49:a3:3a:34:b5:20:
da:f9:bb:80:13:f2:96:6b:57:2a:33:b1:e7:21:15:
b5:76:88:80:dd:69:9b:2c:6f:48:26:0b:92:e4:18:
7d:36:0c:d2:bf:16:55:76:e8:c7:2c:28:db:75:9d:
a4:23:0a:2a:6f:d7:8b:91:76:44:82:ec:b6:95:86:
29:b8:b9:93:7c:1f:83:4e:6e:fc:c1:96:67:72:e0:
d0:62:94:98:2c:ad:c2:5d:67:5c:a4:70:71:af:43:
de:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C1:2A:7B:CB:70:F2:FA:37:26:FE:9C:B0:7D:CC:DC:F4:E9:F8:B0
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137332e302f32342d3234203d3e20323135303335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.173.0/24
Signature Algorithm: sha256WithRSAEncryption
38:5a:ea:01:ad:2a:30:cc:d0:8c:05:f2:03:66:1c:2d:e7:ee:
88:65:29:1e:9c:9e:26:f5:68:8c:12:d8:13:b2:dd:01:37:ad:
6b:3b:30:2d:b7:27:cc:31:53:19:05:d8:29:36:71:34:22:2f:
95:a2:b3:56:3f:a0:0e:86:ab:35:5f:d7:ca:8c:f9:91:82:b9:
1c:28:f1:c7:70:3c:ff:2c:48:6c:3c:d9:9c:4d:89:f0:64:68:
df:c1:ee:fd:cf:9d:a4:03:c9:03:d4:ad:28:25:42:c8:f3:f6:
1b:2a:7a:ae:17:cd:56:06:57:1c:60:32:3f:e3:e0:3f:f0:da:
54:7a:80:4c:1f:f3:72:43:c3:39:07:84:6b:7d:3c:51:08:0e:
44:37:fa:b4:5d:5c:f6:05:aa:68:e1:d1:dc:f3:bb:81:87:82:
9c:38:1d:0c:0a:61:f8:4c:65:2b:25:95:03:d6:4b:67:08:2d:
8b:60:ab:fc:24:79:9d:b3:71:08:24:52:04:12:0c:c1:67:66:
f6:d9:c0:5f:2c:8c:d2:00:76:d3:e8:af:b8:f9:a7:2d:bc:22:
07:88:9d:c4:01:32:5d:22:b5:73:d5:01:9c:00:63:d0:ba:95:
01:af:f1:1f:d8:29:88:42:a2:c7:b1:57:6a:4d:87:7a:c4:91:
65:9a:af:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:50:34 2026 by rpki-client