Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138302e302f32342d3234203d3e20323135363037.roa
File: 3130392e3131302e3138302e302f32342d3234203d3e20323135363037.roa (raw, json)
Hash identifier: mm9qorZBMjc5gq6zuK1UQpjw4ODMc605ZiUQcNWCE+M=
Subject key identifier: 84:13:D0:2F:04:61:9F:25:2C:D0:37:A0:F5:C7:27:ED:11:D5:C4:BC
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 6B10C8FA6EAC4230FA195D64BF16015DF6B9B41E
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138302e302f32342d3234203d3e20323135363037.roa
Signing time: Fri 03 Apr 2026 21:05:06 +0000
ROA not before: Fri 03 Apr 2026 21:00:06 +0000
ROA not after: Fri 02 Apr 2027 21:05:06 +0000
asID: 215607
IP address blocks: 109.110.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:10:c8:fa:6e:ac:42:30:fa:19:5d:64:bf:16:01:5d:f6:b9:b4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Apr 3 21:00:06 2026 GMT
Not After : Apr 2 21:05:06 2027 GMT
Subject: CN=8413D02F04619F252CD037A0F5C727ED11D5C4BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:34:87:b6:0c:bf:3a:3c:70:e2:a7:07:d2:7f:
23:5f:35:24:12:d2:f5:3c:5c:0e:ef:2e:a7:09:59:
47:a5:62:8c:f3:09:23:bc:64:17:dc:85:d8:70:98:
ff:38:f4:e4:f8:f8:de:d6:27:a0:ce:f7:43:37:40:
93:d7:fc:19:96:48:e4:91:aa:bb:6b:eb:d9:5a:84:
72:9c:ed:19:05:fe:54:bf:b1:7d:cf:4b:d2:84:50:
9b:c9:ca:32:0c:0c:41:bb:08:e8:2d:8f:7c:61:b7:
db:1e:ac:92:74:7e:0f:b0:1b:dc:74:97:7c:f6:97:
f8:70:65:f8:27:a8:75:0b:30:fc:58:84:3d:98:fa:
fd:0d:a2:59:f0:94:0e:6e:b5:15:13:ef:06:c8:f1:
b3:8c:6d:62:7c:ce:b8:ec:49:3a:87:89:7f:7a:e8:
de:f8:51:f0:7a:8e:d0:8f:9a:24:82:ce:00:99:db:
ab:cd:5d:aa:91:00:4b:16:d2:52:57:89:dc:22:75:
4c:d3:e5:fd:3f:cb:86:70:7b:93:06:49:f4:ab:b7:
bf:2f:ca:1a:8c:cb:43:4d:8f:01:cf:f5:ec:13:bd:
c9:6b:ee:e1:b2:c0:d3:2d:b9:df:ee:8d:c2:c1:14:
e1:1a:d4:77:d9:11:46:a7:14:67:96:a1:46:41:5f:
26:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:13:D0:2F:04:61:9F:25:2C:D0:37:A0:F5:C7:27:ED:11:D5:C4:BC
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138302e302f32342d3234203d3e20323135363037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.180.0/24
Signature Algorithm: sha256WithRSAEncryption
15:b1:4e:67:3a:3f:4f:0a:72:6c:97:52:76:b4:b3:a4:68:b6:
1d:0a:b5:63:62:a9:80:b8:4a:f2:c9:9d:bd:0c:d5:1b:ca:22:
e1:4a:5a:5f:29:d8:30:26:77:3e:01:76:68:12:63:2c:6b:fb:
4d:5d:2f:47:2e:fc:17:91:dc:5f:7b:43:84:a8:88:d3:22:52:
1a:48:bb:85:da:55:0e:9d:11:91:e7:17:aa:17:82:a1:e3:6d:
ea:f7:f8:70:e3:37:74:4c:48:cc:2c:e1:c7:a0:53:e5:c4:2f:
e3:9e:b5:c9:24:1e:f2:b2:cb:1c:4e:f4:7a:48:18:4c:54:b8:
85:a2:0a:66:7e:e7:f3:c2:37:60:03:b7:bd:0f:00:2b:f8:b0:
6e:ef:01:45:e0:8b:92:82:74:d4:78:e3:6c:ff:2e:d6:3c:09:
f0:59:3d:a4:1b:b2:11:c8:f6:6c:64:99:83:81:38:48:91:e4:
20:b8:2f:2b:03:ed:c6:5d:81:16:ba:5d:c2:67:8d:8d:58:e4:
b8:2a:67:d2:40:8c:8c:b1:73:9e:e8:21:3d:03:7a:7f:85:84:
c6:c4:13:26:0f:aa:59:41:03:e7:4e:8d:a7:5e:95:14:be:1f:
2e:34:15:03:1c:97:03:49:24:e1:b2:c0:da:8e:c7:71:d4:f7:
a7:0c:b7:a9
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUaxDI+m6sQjD6GV1kvxYBXfa5tB4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNjA0MDMyMTAwMDZaFw0yNzA0MDIyMTA1MDZaMDMxMTAvBgNV
BAMTKDg0MTNEMDJGMDQ2MTlGMjUyQ0QwMzdBMEY1QzcyN0VEMTFENUM0QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/NIe2DL86PHDipwfSfyNfNSQS
0vU8XA7vLqcJWUelYozzCSO8ZBfchdhwmP849OT4+N7WJ6DO90M3QJPX/BmWSOSR
qrtr69lahHKc7RkF/lS/sX3PS9KEUJvJyjIMDEG7COgtj3xht9serJJ0fg+wG9x0
l3z2l/hwZfgnqHULMPxYhD2Y+v0NolnwlA5utRUT7wbI8bOMbWJ8zrjsSTqHiX96
6N74UfB6jtCPmiSCzgCZ26vNXaqRAEsW0lJXidwidUzT5f0/y4Zwe5MGSfSrt78v
yhqMy0NNjwHP9ewTvclr7uGywNMtud/ujcLBFOEa1HfZEUanFGeWoUZBXyZ7AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUhBPQLwRhnyUs0Deg9ccn7RHVxLwwHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx
MzgzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNTM2MzAzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAG1utDANBgkqhkiG9w0BAQsFAAOCAQEAFbFOZzo/TwpybJdSdrSzpGi2HQq1
Y2KpgLhK8smdvQzVG8oi4UpaXynYMCZ3PgF2aBJjLGv7TV0vRy78F5HcX3tDhKiI
0yJSGki7hdpVDp0RkecXqheCoeNt6vf4cOM3dExIzCzhx6BT5cQv4561ySQe8rLL
HE70ekgYTFS4haIKZn7n88I3YAO3vQ8AK/iwbu8BReCLkoJ01HjjbP8u1jwJ8Fk9
pBuyEcj2bGSZg4E4SJHkILgvKwPtxl2BFrpdwmeNjVjkuCpn0kCMjLFznughPQN6
f4WExsQTJg+qWUED506Np16VFL4fLjQVAxyXA0kk4bLA2o7HcdT3pwy3qQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:17:32 2026 by rpki-client