Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3132332e302f32342d3234203d3e203330393637.roa
File: 3130392e3130362e3132332e302f32342d3234203d3e203330393637.roa (raw, json)
Hash identifier: pbIX6OS6dnmXyIGZd1tY6bFHqtvTs3l8iQpHVdOr2Oo=
Subject key identifier: 2E:E7:7B:FC:66:24:57:9A:95:9F:82:07:6C:42:E0:AB:B7:F0:09:55
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 645AA435B58D5001E23BFEBD32F8F9099EEFB1EA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3132332e302f32342d3234203d3e203330393637.roa
Signing time: Fri 24 Jul 2026 11:26:32 +0000
ROA not before: Fri 24 Jul 2026 11:21:32 +0000
ROA not after: Fri 23 Jul 2027 11:26:32 +0000
asID: 30967
IP address blocks: 109.106.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:5a:a4:35:b5:8d:50:01:e2:3b:fe:bd:32:f8:f9:09:9e:ef:b1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 11:21:32 2026 GMT
Not After : Jul 23 11:26:32 2027 GMT
Subject: CN=2EE77BFC6624579A959F82076C42E0ABB7F00955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:56:6b:39:c9:17:0f:0e:b4:b7:02:2e:90:fa:
98:9f:73:14:2c:a5:1c:6d:fc:d4:7c:ca:ea:d9:7a:
24:71:9e:17:7c:99:7e:8c:0b:a1:2e:99:6e:e8:61:
26:5f:46:bc:87:d5:85:b4:0f:62:9b:e6:d3:6e:5c:
0a:c7:3e:a0:1a:06:5a:59:15:ed:36:2d:4f:54:af:
8a:6a:9c:50:29:49:a2:0a:b5:ce:82:c6:f2:03:01:
75:df:bc:ef:5d:ad:d9:41:53:27:c8:95:30:90:09:
93:1f:8a:49:b9:2a:42:03:20:da:38:af:0b:32:d9:
f1:80:54:41:a1:d2:5a:76:de:86:91:4c:46:31:71:
0f:7e:fd:1d:be:5e:43:85:a8:a1:c2:76:b8:e3:88:
0a:90:7a:3c:3e:91:b9:1e:3c:f5:5e:4b:e5:9f:f0:
db:71:a3:71:e7:01:ae:28:c4:00:23:89:0a:4d:a3:
e0:b3:6a:49:49:82:f5:47:c7:57:82:30:6f:06:8c:
a3:f4:2b:6a:46:df:67:fd:63:1f:99:f4:9d:3a:3d:
84:da:5c:de:f0:e3:10:22:be:33:d4:67:c9:78:05:
a6:fa:7c:60:e2:f3:61:c4:9e:d4:e2:6e:7c:0d:b7:
43:8c:a9:a0:ed:38:a9:7b:e4:f2:76:24:ec:1d:9a:
5c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E7:7B:FC:66:24:57:9A:95:9F:82:07:6C:42:E0:AB:B7:F0:09:55
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3132332e302f32342d3234203d3e203330393637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.123.0/24
Signature Algorithm: sha256WithRSAEncryption
55:91:00:ac:c7:13:69:46:4a:34:3d:00:95:4b:96:e3:89:a3:
ba:4d:7e:9b:26:93:c1:e7:c2:2d:be:c9:48:41:dd:89:b8:0e:
03:a9:c7:5a:29:59:c2:9c:d2:28:87:7a:17:34:72:6c:eb:5d:
07:85:dd:8e:16:c9:fa:c7:bb:fe:75:5c:06:23:72:7c:a7:aa:
8a:8c:8f:bd:fb:0b:00:89:71:84:1a:6a:3b:22:4a:9b:54:22:
f4:c0:26:1d:63:74:d6:77:01:a9:c3:45:42:10:23:73:5f:43:
d6:d8:b5:dc:5c:7e:3c:e9:27:59:d9:92:ec:f7:2a:6a:c8:12:
ba:f5:9a:e3:c3:9b:07:a1:91:a5:85:ee:2f:80:0e:78:dc:96:
5c:f8:51:20:f9:72:6c:33:b5:82:30:15:52:01:b9:02:99:21:
5f:9e:21:43:8e:46:fe:85:94:18:ae:8d:1f:96:f8:5c:64:53:
36:c4:a5:2b:fe:18:b0:af:fd:bc:7c:09:da:51:3b:73:4e:04:
6d:82:58:a5:cd:8c:a2:af:72:3b:3a:af:6a:a7:dc:60:6c:25:
93:12:4c:53:6d:5d:54:9e:e5:55:9f:20:1e:dc:0b:99:13:ca:
46:cf:72:ce:c6:3c:ee:2e:11:3b:c1:42:ff:8d:ac:59:f0:a7:
a7:57:5c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:49:20 2026 by rpki-client