Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3132322e302f32342d3234203d3e203330393637.roa
File: 3130392e3130362e3132322e302f32342d3234203d3e203330393637.roa (raw, json)
Hash identifier: QfWFw4cURvx9UsYLHmAbsolIREEPuXWhiIRo3HYsy3g=
Subject key identifier: BC:4A:24:F7:DC:EC:CC:1F:FA:2D:6C:70:E2:D2:62:4A:A2:29:65:8D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 06A68E734B3D57112160599C6CC400F0AABB1027
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3132322e302f32342d3234203d3e203330393637.roa
Signing time: Fri 24 Jul 2026 11:26:31 +0000
ROA not before: Fri 24 Jul 2026 11:21:31 +0000
ROA not after: Fri 23 Jul 2027 11:26:31 +0000
asID: 30967
IP address blocks: 109.106.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:a6:8e:73:4b:3d:57:11:21:60:59:9c:6c:c4:00:f0:aa:bb:10:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 11:21:31 2026 GMT
Not After : Jul 23 11:26:31 2027 GMT
Subject: CN=BC4A24F7DCECCC1FFA2D6C70E2D2624AA229658D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:b9:30:5f:2f:b1:b3:bc:02:1a:c9:10:6c:
a3:10:1c:80:a6:c8:91:ab:46:67:28:55:44:7b:03:
84:4b:a6:ca:56:fa:25:9a:b4:7d:f8:ff:a4:21:d7:
de:36:3e:ab:46:02:12:09:5e:3f:3a:b7:64:4a:74:
2f:7f:3f:4c:d4:04:f9:54:3e:42:79:b2:aa:91:5c:
d9:8f:78:55:64:bf:54:74:7b:9d:80:ea:0f:94:05:
04:dd:32:3d:e7:07:60:80:2b:b4:8e:c9:bb:f5:18:
c0:0c:d4:03:7c:d3:f2:f4:48:cd:ff:06:9d:fe:ca:
8a:22:13:39:84:a8:39:68:0f:a9:f2:74:bd:54:61:
9c:e0:4a:36:43:ad:77:57:55:65:b6:8a:ed:ce:ce:
68:b9:26:3f:96:29:18:d0:60:0c:00:cd:3a:9b:d7:
4f:41:b7:8a:bd:ca:31:62:87:24:dc:63:fb:65:60:
49:c1:99:19:3e:9d:07:bf:58:23:e2:23:a2:b9:9d:
f1:c2:53:48:c8:fa:e7:d9:07:68:85:75:04:fb:47:
14:18:d6:fc:4d:83:79:bf:c9:b8:fc:af:12:02:b1:
75:2e:bf:cb:d7:e0:ab:b3:0e:25:49:e0:d7:cb:b9:
48:d3:31:b3:52:c9:07:62:1f:b5:33:c0:ff:ed:6b:
12:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4A:24:F7:DC:EC:CC:1F:FA:2D:6C:70:E2:D2:62:4A:A2:29:65:8D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3132322e302f32342d3234203d3e203330393637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.122.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:e6:f5:5d:92:0b:ab:ac:3b:79:63:e7:de:f0:f0:03:d9:0b:
92:ad:6b:09:07:24:e0:16:15:bb:f6:e9:b9:24:24:ba:0a:b6:
c8:b3:56:a6:19:92:e7:a4:7e:60:a1:2d:8f:c1:f6:e4:a1:f3:
39:de:df:70:11:47:6b:c9:b8:40:15:a4:43:26:eb:d2:0f:f5:
18:7e:9f:a5:db:83:97:76:ed:12:3d:10:16:b9:e9:0c:49:5b:
c3:eb:21:1f:6d:7d:bb:23:3b:e6:b3:33:d6:cd:be:08:bd:c5:
c6:51:41:ab:13:3e:da:63:b7:85:24:ae:4c:e3:4b:61:6c:07:
5b:a7:5d:8a:7f:fe:79:b6:b5:4b:8a:37:82:a3:9f:f2:8d:e8:
bd:a7:f4:41:18:e9:24:00:5c:36:8c:d3:0b:38:d1:d9:1c:aa:
95:ab:d4:cd:cc:5f:ee:73:8b:da:f1:36:c7:d7:36:21:57:01:
b2:5f:c4:51:dd:58:9c:da:3e:a4:e7:e9:30:30:94:e7:93:78:
a6:48:52:c0:e9:8f:d4:ac:5e:fe:3a:07:23:28:5f:a3:e7:0f:
3d:11:be:a3:19:67:97:34:8f:f2:ad:2e:6e:4a:bc:15:d9:5e:
78:6c:04:09:59:13:40:18:8d:0a:72:2e:ce:73:7a:c7:9a:2b:
b3:91:63:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:50:20 2026 by rpki-client