Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138322e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3138322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: qOzaUJiK8cYoBahOyWu7wB9SNu5UZ0o6ClxcTw9NcQY=
Subject key identifier: 26:DB:5E:D0:73:CA:BC:04:F6:09:62:61:2E:6B:99:E8:EF:2F:DF:E4
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 26F8DA290545FD41C1692E610FFE19A0CB6289AA
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138322e302f32342d3234203d3e20383334.roa
Signing time: Sat 19 Sep 2026 00:01:31 +0000
ROA not before: Fri 18 Sep 2026 23:56:31 +0000
ROA not after: Sat 18 Sep 2027 00:01:31 +0000
asID: 834
IP address blocks: 109.110.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:12:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:f8:da:29:05:45:fd:41:c1:69:2e:61:0f:fe:19:a0:cb:62:89:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Sep 18 23:56:31 2026 GMT
Not After : Sep 18 00:01:31 2027 GMT
Subject: CN=26DB5ED073CABC04F60962612E6B99E8EF2FDFE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:54:24:18:e3:4e:09:51:2c:28:0b:77:43:4d:
b3:f9:76:5c:98:fc:c7:56:a7:00:42:fc:d5:c0:60:
e3:f6:f5:f0:6d:ab:e2:b5:ee:14:bd:ef:8e:f7:b9:
2a:d5:85:e3:25:b1:9a:69:2d:54:f4:8a:c4:f5:1f:
2a:95:ab:e6:ac:ca:5e:03:d0:11:c4:96:1b:32:9a:
28:85:be:8d:f7:5c:8f:73:32:c5:d3:36:82:45:93:
a3:1f:9c:34:df:04:b6:9d:5a:15:fe:4c:09:ad:e7:
1e:87:fd:a9:79:e5:8a:e5:51:d2:58:7b:e7:c2:7a:
46:a6:67:0f:e5:0c:76:01:06:03:22:3a:b8:27:d3:
5d:f0:3e:69:a1:e3:99:46:f2:d2:6a:16:58:22:4c:
ac:49:78:22:bc:00:06:d8:91:44:1f:4e:5e:78:43:
3d:a9:d7:65:c9:cc:cf:d3:51:c6:5d:1e:84:1d:fa:
d3:79:14:05:d3:7c:22:1b:28:cd:55:b5:2d:82:d5:
90:ea:91:a1:16:d6:6b:83:4d:c3:d8:c4:73:ef:92:
8a:c1:ca:07:7c:bf:80:8f:28:a3:57:72:b1:1d:91:
c5:c0:dd:19:bc:1c:97:91:e2:a5:c6:62:91:13:3b:
bd:45:53:6d:64:cb:7c:6c:04:b0:2b:dd:7b:20:91:
5e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DB:5E:D0:73:CA:BC:04:F6:09:62:61:2E:6B:99:E8:EF:2F:DF:E4
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.182.0/24
Signature Algorithm: sha256WithRSAEncryption
85:21:5a:28:21:b3:6d:4c:77:b6:6c:81:a0:6d:1a:3d:6b:a7:
df:02:6b:50:1f:5c:76:f7:bb:d7:05:1e:f4:f2:a1:9f:a4:74:
2e:8c:a3:60:40:b2:d1:95:9e:46:b7:28:dc:a2:43:62:fe:e3:
6d:ba:09:17:ff:c4:10:06:a5:61:5a:3c:f2:39:81:66:96:19:
2e:18:68:7f:3d:6f:9a:07:41:8f:be:d8:58:35:fd:04:a1:9f:
c5:04:60:48:c0:c3:d0:ff:4c:24:91:a9:ab:72:7c:b7:f3:9c:
1e:be:7b:00:05:f1:85:ca:6f:97:f4:ec:18:22:58:7e:74:0e:
82:c7:64:fe:4c:1d:36:3e:7d:0b:e9:5c:64:3d:55:41:23:64:
75:f7:12:b8:63:f7:fd:ba:98:62:e6:1f:2a:e1:83:2f:e7:a1:
a2:89:e0:7f:32:80:5b:46:af:3a:8c:43:9c:59:d4:ed:d9:86:
34:d3:1e:57:6f:56:37:53:04:12:c2:bf:03:b3:15:b2:d8:4a:
b1:bd:33:c9:1b:54:80:c3:86:22:02:3e:cf:9a:a0:99:fe:40:
e9:19:80:be:8d:58:00:9c:54:a1:dc:31:d2:c7:14:9f:51:8c:
91:95:1b:bc:de:e0:c0:4f:e0:71:13:95:79:c0:5e:d8:72:e2:
81:e6:2d:aa
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUJvjaKQVF/UHBaS5hD/4ZoMtiiaowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNjA5MTgyMzU2MzFaFw0yNzA5MTgwMDAxMzFaMDMxMTAvBgNV
BAMTKDI2REI1RUQwNzNDQUJDMDRGNjA5NjI2MTJFNkI5OUU4RUYyRkRGRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaVCQY404JUSwoC3dDTbP5dlyY
/MdWpwBC/NXAYOP29fBtq+K17hS97473uSrVheMlsZppLVT0isT1HyqVq+asyl4D
0BHElhsymiiFvo33XI9zMsXTNoJFk6MfnDTfBLadWhX+TAmt5x6H/al55YrlUdJY
e+fCekamZw/lDHYBBgMiOrgn013wPmmh45lG8tJqFlgiTKxJeCK8AAbYkUQfTl54
Qz2p12XJzM/TUcZdHoQd+tN5FAXTfCIbKM1VtS2C1ZDqkaEW1muDTcPYxHPvkorB
ygd8v4CPKKNXcrEdkcXA3Rm8HJeR4qXGYpETO71FU21ky3xsBLAr3XsgkV61AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUJtte0HPKvAT2CWJhLmuZ6O8v3+QwHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx
MzgzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG1u
tjANBgkqhkiG9w0BAQsFAAOCAQEAhSFaKCGzbUx3tmyBoG0aPWun3wJrUB9cdve7
1wUe9PKhn6R0LoyjYECy0ZWeRrco3KJDYv7jbboJF//EEAalYVo88jmBZpYZLhho
fz1vmgdBj77YWDX9BKGfxQRgSMDD0P9MJJGpq3J8t/OcHr57AAXxhcpvl/TsGCJY
fnQOgsdk/kwdNj59C+lcZD1VQSNkdfcSuGP3/bqYYuYfKuGDL+ehoongfzKAW0av
OoxDnFnU7dmGNNMeV29WN1MEEsK/A7MVsthKsb0zyRtUgMOGIgI+z5qgmf5A6RmA
vo1YAJxUodwx0scUn1GMkZUbvN7gwE/gcROVecBe2HLigeYtqg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:14:00 2026 by rpki-client