Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138392e302f32342d3234203d3e203138313836.roa
File: 3130392e3131302e3138392e302f32342d3234203d3e203138313836.roa (raw, json)
Hash identifier: /6V+PVwqOxRbXjuzbqqH5+3uP6lQ9xFUSqrIAyC7gLA=
Subject key identifier: 9E:5E:04:71:8C:B2:42:8A:51:54:DE:5D:49:80:3C:D5:B6:CE:39:B4
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 074E6103949E5EA33A5AB688737B80BBBF4A9584
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138392e302f32342d3234203d3e203138313836.roa
Signing time: Wed 16 Sep 2026 08:49:35 +0000
ROA not before: Wed 16 Sep 2026 08:44:35 +0000
ROA not after: Wed 15 Sep 2027 08:49:35 +0000
asID: 18186
IP address blocks: 109.110.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:12:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:4e:61:03:94:9e:5e:a3:3a:5a:b6:88:73:7b:80:bb:bf:4a:95:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Sep 16 08:44:35 2026 GMT
Not After : Sep 15 08:49:35 2027 GMT
Subject: CN=9E5E04718CB2428A5154DE5D49803CD5B6CE39B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:79:2b:ef:8d:81:06:4a:96:0d:0c:e5:0a:03:
14:5f:5f:dc:78:97:18:af:ea:a9:f5:d9:13:65:12:
89:4a:57:13:86:6a:36:e2:48:0d:a7:c0:02:45:54:
6b:76:d4:84:46:03:98:e1:5a:c6:45:5a:45:20:57:
84:2b:43:32:33:35:35:d9:98:d1:95:47:9c:bd:c8:
94:c6:ed:28:2c:80:df:e1:55:16:a0:f6:2c:b2:18:
f0:92:ee:bf:d0:0e:a7:ca:ba:ab:ac:98:a0:c1:1a:
8a:14:c9:5b:63:80:97:cd:01:30:43:e8:6e:f6:ee:
cb:3f:20:ab:1a:66:4a:67:92:af:19:47:3d:0d:8f:
c8:fa:8b:eb:84:fd:33:9e:43:50:b8:1e:4b:65:d8:
3d:db:54:9d:e0:32:d0:6c:39:b2:aa:a2:96:f5:15:
af:8d:c9:6a:de:5e:62:a9:11:d3:23:f9:20:3d:22:
3b:c5:6d:38:06:b3:a4:d3:0a:37:be:f3:9f:5d:03:
d6:8c:ec:8d:08:71:cd:dc:c0:d4:3a:a8:7e:a4:ff:
2b:22:71:6b:4e:f5:d1:ec:93:5c:6f:f4:30:42:8d:
b0:d2:38:b4:45:57:5a:5e:df:85:d1:e7:08:1f:7a:
fe:14:01:ed:b1:0b:b2:ff:6a:9b:67:58:bf:0f:13:
b8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5E:04:71:8C:B2:42:8A:51:54:DE:5D:49:80:3C:D5:B6:CE:39:B4
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138392e302f32342d3234203d3e203138313836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.189.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:b3:0a:2a:98:12:7a:8e:a8:6c:37:6c:20:45:b7:43:73:25:
69:e1:31:32:08:19:10:fe:c9:c6:d6:40:05:29:56:4f:f3:67:
cc:5b:7c:ee:70:ff:e9:2e:4c:c7:8a:aa:8d:6b:b0:36:36:3b:
20:de:04:34:c3:f2:e5:51:30:b0:5f:c2:8f:5f:d6:9d:5a:1b:
de:cf:b0:03:84:93:ca:b3:e4:7b:c3:7e:9b:71:b8:c4:e2:5f:
43:fa:75:3f:48:c0:a4:05:00:68:fe:b8:15:51:4d:aa:50:ce:
04:5b:10:8f:21:16:ea:cf:d1:bd:61:e7:35:de:3b:1e:98:51:
e3:ad:38:54:1f:0a:96:2f:a3:2c:2d:39:f7:37:f0:f6:ba:1a:
2e:91:09:30:88:17:e5:6b:ea:28:36:83:55:19:ae:8b:3f:c3:
18:9a:e9:6d:ea:e7:dd:75:ab:35:95:fc:a1:d2:9b:c7:a1:d5:
01:f0:10:67:2e:65:87:cd:88:dd:f0:16:5f:db:5a:2b:3a:b3:
d8:ee:17:58:11:66:dc:c5:81:ac:a6:66:be:14:3a:d9:e9:79:
03:a2:e1:4c:5e:70:ab:15:26:1f:08:71:e8:5f:63:34:21:d6:
ff:6a:09:42:b2:cb:2d:f7:cf:c6:3d:23:63:df:29:a0:dd:2d:
96:bb:a8:59
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUB05hA5SeXqM6WraIc3uAu79KlYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNjA5MTYwODQ0MzVaFw0yNzA5MTUwODQ5MzVaMDMxMTAvBgNV
BAMTKDlFNUUwNDcxOENCMjQyOEE1MTU0REU1RDQ5ODAzQ0Q1QjZDRTM5QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzeSvvjYEGSpYNDOUKAxRfX9x4
lxiv6qn12RNlEolKVxOGajbiSA2nwAJFVGt21IRGA5jhWsZFWkUgV4QrQzIzNTXZ
mNGVR5y9yJTG7SgsgN/hVRag9iyyGPCS7r/QDqfKuqusmKDBGooUyVtjgJfNATBD
6G727ss/IKsaZkpnkq8ZRz0Nj8j6i+uE/TOeQ1C4Hktl2D3bVJ3gMtBsObKqopb1
Fa+NyWreXmKpEdMj+SA9IjvFbTgGs6TTCje+859dA9aM7I0Icc3cwNQ6qH6k/ysi
cWtO9dHsk1xv9DBCjbDSOLRFV1pe34XR5wgfev4UAe2xC7L/aptnWL8PE7i5AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUnl4EcYyyQopRVN5dSYA81bbOObQwHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx
MzgzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzgzMTM4MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABtbr0wDQYJKoZIhvcNAQELBQADggEBAH2zCiqYEnqOqGw3bCBFt0NzJWnhMTII
GRD+ycbWQAUpVk/zZ8xbfO5w/+kuTMeKqo1rsDY2OyDeBDTD8uVRMLBfwo9f1p1a
G97PsAOEk8qz5HvDfptxuMTiX0P6dT9IwKQFAGj+uBVRTapQzgRbEI8hFurP0b1h
5zXeOx6YUeOtOFQfCpYvoywtOfc38Pa6Gi6RCTCIF+Vr6ig2g1UZros/wxia6W3q
5911qzWV/KHSm8eh1QHwEGcuZYfNiN3wFl/bWis6s9juF1gRZtzFgaymZr4UOtnp
eQOi4UxecKsVJh8IcehfYzQh1v9qCUKyyy33z8Y9I2PfKaDdLZa7qFk=
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:42:59 2026 by rpki-client