Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32342d3234203d3e203230343733.roa
File: 3130392e3131302e3137362e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: DHswLsL9JX+QHrar/7vFEjRWaufDsnTN8B2eQZHyGr8=
Subject key identifier: 77:54:88:39:23:EB:FB:E3:45:A4:90:85:31:6E:7D:88:3B:AF:A8:53
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 6814B95307F435D089A637C428C684E3A893C437
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32342d3234203d3e203230343733.roa
Signing time: Sat 25 Oct 2025 00:58:05 +0000
ROA not before: Sat 25 Oct 2025 00:53:05 +0000
ROA not after: Sat 24 Oct 2026 00:58:05 +0000
asID: 20473
IP address blocks: 109.110.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:12:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:14:b9:53:07:f4:35:d0:89:a6:37:c4:28:c6:84:e3:a8:93:c4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Oct 25 00:53:05 2025 GMT
Not After : Oct 24 00:58:05 2026 GMT
Subject: CN=7754883923EBFBE345A49085316E7D883BAFA853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b5:ca:14:fd:51:69:c8:f8:33:7f:08:74:32:
7e:fd:d6:9f:df:d3:86:93:ce:ed:30:52:c5:da:04:
72:77:43:74:c6:01:47:bd:e9:ab:fb:9a:65:ec:e8:
d5:2b:f9:b3:c3:22:c2:f2:72:07:85:a4:86:8a:b3:
b1:1c:9a:66:19:d0:df:08:a5:da:79:6d:c2:3c:41:
09:b8:46:c1:b7:44:78:47:53:81:59:7a:61:98:de:
21:bc:d1:e4:ab:3d:e7:c6:96:e7:b5:25:73:92:52:
ef:eb:e9:82:8a:16:13:51:8e:ed:52:71:c1:07:7c:
2e:16:f3:04:a3:98:21:08:1f:e7:61:98:8f:fa:89:
b6:58:44:dd:87:f5:c7:29:97:02:72:de:81:3b:63:
72:a0:7c:fa:f0:cd:8b:5f:fb:8b:6c:d8:82:72:f6:
cc:21:1f:c6:48:ac:2e:ee:5d:6f:fa:72:f1:dd:f7:
c5:9b:54:5a:bd:e0:3d:74:ef:7f:fd:4f:11:b3:8f:
4a:c9:4d:42:10:a5:66:71:5c:a9:98:ef:ba:24:27:
81:6c:3e:ce:36:02:8f:0f:f6:52:d1:60:1a:fb:e6:
15:14:78:b4:9e:74:c5:a9:64:c9:33:06:85:7e:5c:
38:ce:a8:0b:a1:d9:2c:ac:f2:bf:af:0c:14:60:95:
9f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:54:88:39:23:EB:FB:E3:45:A4:90:85:31:6E:7D:88:3B:AF:A8:53
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.176.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:23:ef:a8:b7:7d:5d:ad:8f:59:8c:2d:b7:0f:c0:5c:3a:72:
b0:a3:f6:aa:f1:36:36:55:6e:c4:15:f5:16:4f:99:2d:ba:9d:
d7:ec:02:be:44:cb:fb:26:62:5d:65:2f:9a:59:cf:70:2a:64:
90:2f:4e:88:46:72:79:0c:d4:4b:c2:0a:52:9a:ca:2c:7b:d0:
8e:db:be:92:08:e0:24:a8:74:b6:f0:26:7a:91:fe:3c:14:a2:
23:03:6b:a2:a1:1e:2f:70:3e:37:bf:76:23:2b:3b:bb:aa:e3:
14:d0:9f:8c:36:62:db:66:2b:3d:71:34:b8:bd:ff:45:17:31:
0a:ce:9e:8d:3b:60:da:55:0b:da:d4:79:df:8d:8b:53:92:27:
07:75:76:17:06:7f:7c:ee:15:24:9a:47:d6:34:43:1d:ee:fe:
8f:27:a7:17:fe:da:40:c7:33:65:69:f5:1c:a2:d0:48:9c:dd:
20:71:24:4e:0e:9c:1f:db:22:62:5c:e3:b4:a8:e5:10:07:e1:
31:97:68:94:0a:20:10:72:29:3c:76:cc:e2:99:c8:fd:f9:52:
98:e7:4e:71:5f:59:29:7a:29:9d:30:ec:c7:0e:cd:01:c8:d2:
c9:3b:6a:5f:f6:19:7f:f5:92:30:f7:43:d7:97:87:ad:ce:21:
54:34:1b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:36:48 2025 by rpki-client