Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3132312e302f32342d3234203d3e203330393637.roa
File: 3130392e3130362e3132312e302f32342d3234203d3e203330393637.roa (raw, json)
Hash identifier: mi/xi5f5lvOUHYVxYlEzNYQxyg6sT9TIZ7FgENFDaDE=
Subject key identifier: DA:AE:C3:39:DF:13:6F:60:64:5A:1B:01:50:AE:A9:A1:9D:91:CD:DE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 741C3F84C99A0D2D79C130D7567097B85B7F353F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3132312e302f32342d3234203d3e203330393637.roa
Signing time: Fri 24 Jul 2026 11:26:32 +0000
ROA not before: Fri 24 Jul 2026 11:21:32 +0000
ROA not after: Fri 23 Jul 2027 11:26:32 +0000
asID: 30967
IP address blocks: 109.106.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:1c:3f:84:c9:9a:0d:2d:79:c1:30:d7:56:70:97:b8:5b:7f:35:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 11:21:32 2026 GMT
Not After : Jul 23 11:26:32 2027 GMT
Subject: CN=DAAEC339DF136F60645A1B0150AEA9A19D91CDDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3a:2e:9b:a2:ae:b5:55:d5:26:63:a9:3d:c3:
dd:cd:71:5b:92:36:90:f6:b8:07:a0:9a:26:22:05:
43:fe:28:ee:38:af:3f:11:ef:df:7d:97:ff:00:72:
9c:35:72:df:6b:2c:b4:c6:96:d7:9f:34:4d:d9:da:
cc:94:94:82:a6:1c:c0:3f:ee:ab:d1:d4:aa:ab:54:
69:cd:fa:e8:63:8d:d4:6f:4f:d0:c0:da:35:ac:ce:
e3:52:f0:16:b7:b9:d4:71:c9:33:ac:11:4e:33:df:
8c:52:fc:a9:e5:6e:e0:41:75:95:ea:b0:b8:c1:b7:
06:bb:bd:51:bb:44:ef:43:5d:1b:0e:d5:32:d6:2b:
52:d8:ea:8f:09:37:3e:f0:3d:ba:98:14:5e:77:a2:
88:1e:7a:54:6a:a5:8b:0b:ae:e0:91:eb:5b:d9:9e:
cf:28:7e:60:1e:ae:8a:85:d1:e4:44:7e:4d:17:d3:
9c:db:36:90:ee:93:5c:ec:20:20:e0:77:b1:e7:87:
74:fd:7c:ba:4b:fd:65:76:69:9b:b4:79:ba:ee:7f:
fd:80:b1:c4:8b:1d:5d:8b:10:9f:82:df:95:44:c7:
88:c1:ce:45:08:44:84:c3:e4:3f:bd:f1:0c:fa:6d:
67:9e:a0:38:eb:73:71:ed:e7:33:0f:6a:2f:6b:7f:
a2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AE:C3:39:DF:13:6F:60:64:5A:1B:01:50:AE:A9:A1:9D:91:CD:DE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3132312e302f32342d3234203d3e203330393637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.121.0/24
Signature Algorithm: sha256WithRSAEncryption
64:7f:c0:c2:d1:c8:ba:89:70:8e:ef:62:f0:2a:aa:3f:03:96:
dc:3f:88:29:1d:d4:99:60:29:02:51:3d:7c:cc:2d:1d:30:0b:
55:23:de:c9:fe:c2:47:ba:47:27:ca:e3:d7:38:17:21:3b:0e:
e3:fc:a0:73:0c:4c:84:50:c7:bb:16:80:b5:4d:ea:b9:bb:7f:
2c:61:f9:bc:b6:af:8f:60:6c:31:fd:6a:d9:57:ef:b8:39:6e:
f9:e2:db:8f:18:95:8a:57:a0:d7:8b:8d:21:61:da:75:0e:42:
fd:91:77:3d:54:ed:da:a3:9c:e6:f0:78:07:db:da:5f:31:64:
aa:fa:08:c6:2c:0b:9d:40:78:bb:da:41:67:f4:2b:95:d7:34:
ba:5f:06:78:33:b1:89:0b:d3:2f:a7:a0:08:88:7d:90:aa:e4:
57:a3:dd:ff:83:ae:51:95:4f:55:35:9c:5d:75:6f:ad:e5:4f:
c7:98:98:ed:2f:4b:d0:04:6a:19:8e:95:9b:8b:26:2e:13:b6:
a1:78:d5:7d:e6:4c:71:e0:c9:80:1e:5d:ac:24:5c:63:11:15:
94:73:36:2d:63:07:61:c0:47:fa:a6:bd:68:8c:ab:06:1c:57:
57:84:51:a6:dd:d0:1c:ce:5b:58:f8:af:4d:f2:f0:52:7f:ae:
17:6c:dd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:38:15 2026 by rpki-client