Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137372e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3137372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: XWrOcz/EP8FDYvY+tMB8NVlmufpfGJytYlDs8pQ9zfY=
Subject key identifier: 64:C3:11:89:14:EC:23:8B:90:0F:DF:16:F4:C0:D9:A3:18:FC:D7:47
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 5ECD96E0250B4173AC34956CB51678992870B3BE
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137372e302f32342d3234203d3e20383334.roa
Signing time: Sat 12 Sep 2026 07:34:35 +0000
ROA not before: Sat 12 Sep 2026 07:29:35 +0000
ROA not after: Sat 11 Sep 2027 07:34:35 +0000
asID: 834
IP address blocks: 109.110.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:12:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:cd:96:e0:25:0b:41:73:ac:34:95:6c:b5:16:78:99:28:70:b3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Sep 12 07:29:35 2026 GMT
Not After : Sep 11 07:34:35 2027 GMT
Subject: CN=64C3118914EC238B900FDF16F4C0D9A318FCD747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a1:fb:25:a4:3c:15:73:f1:e4:93:a3:d4:6a:
1a:11:66:07:41:42:9f:2e:7c:e5:f5:6d:9c:e5:b8:
9e:93:62:ab:50:08:69:10:b3:b3:68:77:14:d0:80:
74:8b:27:fe:f1:7b:15:0b:e3:98:d2:5c:2c:69:10:
34:c5:15:79:ee:d7:64:10:cf:bb:f3:d4:d4:4c:29:
27:5c:ec:d0:10:5b:21:53:5d:b8:d1:cb:db:9a:85:
7b:e5:d2:be:d2:a5:da:46:fb:20:86:ac:01:31:81:
aa:d5:78:23:9a:d5:14:e1:f7:0f:a4:87:93:8f:b1:
33:54:8f:03:d2:39:8d:15:41:3b:9d:89:ad:99:95:
19:73:13:b1:8d:2a:2c:33:22:db:bc:54:fe:35:90:
15:42:8f:9f:76:ab:ee:fd:b8:cd:50:90:b1:3f:d1:
b6:df:0e:31:89:62:6b:6f:ad:e2:09:09:4f:d6:3d:
f6:37:a9:17:18:04:ed:60:c9:60:ee:47:7a:05:fb:
79:a0:e7:e7:78:b9:ca:c4:38:ca:e8:55:d7:67:19:
58:6b:54:ec:f7:6e:0b:85:b0:54:77:0f:5c:7c:75:
c9:b3:07:05:13:5d:0c:24:29:15:04:fe:2e:51:cf:
7a:2a:da:54:12:e3:35:2d:c8:8f:c2:32:1c:1c:18:
e2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C3:11:89:14:EC:23:8B:90:0F:DF:16:F4:C0:D9:A3:18:FC:D7:47
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.177.0/24
Signature Algorithm: sha256WithRSAEncryption
21:ee:1a:fc:49:06:df:ef:f5:1e:ad:26:35:0d:67:d9:fd:8a:
da:60:51:a7:32:c8:cf:77:04:3a:71:94:04:56:c9:7b:a8:48:
af:d2:3c:20:55:d2:30:14:18:6d:74:94:4b:5b:b3:15:94:ec:
aa:a5:28:5c:63:f0:f1:14:39:01:e8:e1:48:5c:ac:0a:23:09:
85:e5:67:fe:0e:7d:51:07:2e:69:d6:83:f0:11:27:de:bb:ad:
c2:c2:74:e6:c3:bf:41:84:10:af:af:82:4a:74:68:5b:b8:24:
a2:4c:85:74:aa:c1:5f:93:df:f3:d5:7a:7e:93:cf:06:61:a6:
8b:80:c7:0d:7a:21:9f:ce:99:2a:30:6d:af:73:da:a5:da:8a:
7b:04:e4:66:59:93:0a:e0:77:e5:33:ee:45:e5:a3:5a:db:85:
e8:6c:d0:12:02:03:03:c0:8c:dc:d9:b9:aa:7c:58:3d:3f:f9:
c5:22:e8:47:af:57:2d:17:ed:43:0a:7d:ed:16:85:aa:53:0e:
83:3b:8e:83:28:9a:04:29:91:d1:9c:14:be:82:c4:33:fc:31:
5b:0b:8d:05:6e:08:ed:58:11:02:32:46:17:dd:f1:e6:10:49:
02:1b:ab:1c:1d:1d:17:38:be:43:77:64:a3:e6:f4:5a:9f:9e:
de:5d:12:90
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUXs2W4CULQXOsNJVstRZ4mShws74wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNjA5MTIwNzI5MzVaFw0yNzA5MTEwNzM0MzVaMDMxMTAvBgNV
BAMTKDY0QzMxMTg5MTRFQzIzOEI5MDBGREYxNkY0QzBEOUEzMThGQ0Q3NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkofslpDwVc/Hkk6PUahoRZgdB
Qp8ufOX1bZzluJ6TYqtQCGkQs7NodxTQgHSLJ/7xexUL45jSXCxpEDTFFXnu12QQ
z7vz1NRMKSdc7NAQWyFTXbjRy9uahXvl0r7SpdpG+yCGrAExgarVeCOa1RTh9w+k
h5OPsTNUjwPSOY0VQTudia2ZlRlzE7GNKiwzItu8VP41kBVCj592q+79uM1QkLE/
0bbfDjGJYmtvreIJCU/WPfY3qRcYBO1gyWDuR3oF+3mg5+d4ucrEOMroVddnGVhr
VOz3bguFsFR3D1x8dcmzBwUTXQwkKRUE/i5Rz3oq2lQS4zUtyI/CMhwcGOJRAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUZMMRiRTsI4uQD98W9MDZoxj810cwHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx
MzczNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG1u
sTANBgkqhkiG9w0BAQsFAAOCAQEAIe4a/EkG3+/1Hq0mNQ1n2f2K2mBRpzLIz3cE
OnGUBFbJe6hIr9I8IFXSMBQYbXSUS1uzFZTsqqUoXGPw8RQ5AejhSFysCiMJheVn
/g59UQcuadaD8BEn3rutwsJ05sO/QYQQr6+CSnRoW7gkokyFdKrBX5Pf89V6fpPP
BmGmi4DHDXohn86ZKjBtr3PapdqKewTkZlmTCuB35TPuReWjWtuF6GzQEgIDA8CM
3Nm5qnxYPT/5xSLoR69XLRftQwp97RaFqlMOgzuOgyiaBCmR0ZwUvoLEM/wxWwuN
BW4I7VgRAjJGF93x5hBJAhurHB0dFzi+Q3dko+b0Wp+e3l0SkA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 03:34:14 2026 by rpki-client