Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32342d3234203d3e20323134343833.roa
File: 3130392e3131302e3137362e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: qehrKLrWXeXTveTE4hPQfmjBY4kOM/YRV5jclGzqkLA=
Subject key identifier: FE:1C:22:22:E9:32:8C:CD:F9:31:83:E4:30:F6:63:6A:A8:4A:1E:C2
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 60F5D8B7A6EAB3A67FE617BC54130125C0613D03
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32342d3234203d3e20323134343833.roa
Signing time: Fri 11 Sep 2026 15:36:18 +0000
ROA not before: Fri 11 Sep 2026 15:31:18 +0000
ROA not after: Fri 10 Sep 2027 15:36:18 +0000
asID: 214483
IP address blocks: 109.110.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:f5:d8:b7:a6:ea:b3:a6:7f:e6:17:bc:54:13:01:25:c0:61:3d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Sep 11 15:31:18 2026 GMT
Not After : Sep 10 15:36:18 2027 GMT
Subject: CN=FE1C2222E9328CCDF93183E430F6636AA84A1EC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:64:fb:40:4d:ff:a2:82:21:7e:e1:d0:01:1d:
07:a1:3f:4c:2e:e4:1e:cf:f4:48:ef:71:f5:6f:98:
72:8f:4a:fe:58:16:c4:d1:71:dd:d9:9c:9d:ca:b0:
d3:a5:c2:1f:70:86:66:17:b6:96:42:5b:46:6a:85:
da:6f:95:0e:f2:be:f3:dd:f3:2e:f3:e5:0a:45:8e:
b3:fd:89:79:c4:9a:5d:ff:3c:9a:49:eb:0a:fd:c8:
c0:69:05:7c:36:51:93:82:f1:0b:e6:77:21:ad:3f:
e0:29:49:ce:ca:f1:e4:bb:76:6f:f5:50:a7:3c:e3:
89:eb:a5:b9:14:ff:50:0d:53:42:11:5e:5e:2a:07:
57:05:0f:96:6d:68:dc:c5:d2:97:5a:67:25:38:e7:
42:e9:2e:02:1d:3f:66:5e:c5:28:79:5b:88:fd:99:
c8:db:f7:ce:5e:72:a6:46:90:4d:8a:d4:86:fc:c6:
97:aa:dd:eb:f5:dc:cd:da:aa:f1:be:16:69:b0:fb:
83:0c:f3:7d:d7:b9:8d:10:5b:5d:6f:20:09:50:fe:
41:6b:70:3b:b9:89:2e:fc:24:14:89:d1:f4:a4:40:
b9:8e:e5:40:e3:ae:56:d4:26:6f:44:be:75:e8:37:
50:28:df:29:08:36:d1:d1:6e:72:a3:2a:a7:e7:74:
2a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1C:22:22:E9:32:8C:CD:F9:31:83:E4:30:F6:63:6A:A8:4A:1E:C2
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.176.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:40:98:e7:2c:08:8d:cd:6c:a6:16:b5:bf:24:91:c3:53:1f:
c2:43:1e:aa:85:7c:95:a3:c1:f8:56:0c:71:a5:38:eb:af:33:
76:93:d7:8d:5c:c2:06:4b:42:82:58:dd:58:4a:4c:1b:67:4e:
83:3a:ac:33:2e:34:56:16:a2:4c:05:ce:c5:e8:cd:67:00:0b:
7c:b7:ee:f4:0f:0f:05:c0:cd:2b:c2:82:0d:6f:e1:f1:ab:ca:
8f:17:66:5e:b1:9c:38:a5:8e:9e:9b:d9:d3:b2:3f:5a:89:60:
d8:40:d0:8c:7a:01:33:93:1f:73:4c:80:02:c5:7f:56:d1:65:
0d:0b:a9:83:2f:f3:71:04:e0:b8:a0:cd:32:b2:90:76:0e:a7:
76:e0:56:43:fd:de:68:37:56:68:6c:2e:67:4a:ae:4d:88:2c:
9b:b0:8d:bb:ae:ea:bd:03:bb:18:4f:a4:86:25:eb:6a:89:2f:
74:c7:93:22:a9:91:e7:5b:f3:21:38:d3:bd:a1:b9:bf:90:a9:
6f:d5:45:b9:f8:1b:61:be:9f:23:b2:86:5e:fe:5d:02:a8:cf:
c6:7e:96:d3:b0:a2:25:f3:5e:73:2d:21:90:15:a1:2c:b6:db:
89:cf:b8:7e:ad:4b:a8:5e:e6:2f:c1:83:da:63:d9:b0:ce:95:
00:a2:c6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:27:14 2026 by rpki-client