Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31322e302f32332d3234203d3e203531383437.roa
File: 3130392e3130362e31322e302f32332d3234203d3e203531383437.roa (raw, json)
Hash identifier: OMOe6kOJZerd7oOj+SRQPguDDNYV5IOOlYGQkpOxhf0=
Subject key identifier: 78:F8:12:B4:CC:14:6D:15:BA:D9:2C:98:A3:74:92:66:B1:12:95:A0
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 2116101F12BFDD2A6B649AAD0E5DD54D8199B590
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31322e302f32332d3234203d3e203531383437.roa
Signing time: Thu 11 Jun 2026 08:05:59 +0000
ROA not before: Thu 11 Jun 2026 08:00:59 +0000
ROA not after: Thu 10 Jun 2027 08:05:59 +0000
asID: 51847
IP address blocks: 109.106.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 20:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:16:10:1f:12:bf:dd:2a:6b:64:9a:ad:0e:5d:d5:4d:81:99:b5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Jun 11 08:00:59 2026 GMT
Not After : Jun 10 08:05:59 2027 GMT
Subject: CN=78F812B4CC146D15BAD92C98A3749266B11295A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:c8:e9:8d:3a:10:f7:74:32:fd:97:71:3f:
65:de:bf:64:ad:65:68:81:f7:19:6e:d9:4b:1f:1a:
81:ee:e0:56:95:70:a2:ac:f0:51:6e:91:50:d9:a3:
d4:bb:f1:0e:5d:f4:8f:30:99:ff:41:1f:b4:43:2b:
96:d4:07:1a:8c:cc:e9:94:1f:e5:0a:63:98:1d:94:
ef:61:8e:5a:1e:fc:75:01:d6:fb:f6:45:4b:81:21:
45:ef:02:c8:e7:9f:27:d4:65:f1:c7:d9:95:e6:f0:
38:a0:1e:7b:64:c5:a0:df:8b:14:bc:06:55:cc:a4:
1e:45:b7:3d:a4:4f:f7:65:93:7b:51:b6:7a:40:3b:
4e:79:f4:ae:eb:08:af:0b:cb:af:b3:f1:1b:09:8b:
5c:59:da:8b:20:c7:17:bc:a0:ab:e8:55:f9:55:28:
bf:8f:37:79:b2:6e:91:24:23:ef:80:2d:1e:1e:c4:
a9:21:79:5b:29:4c:7e:ad:c6:5c:bd:21:de:39:92:
a3:d3:34:f1:9c:01:0a:29:63:5f:54:22:9d:81:77:
f7:98:44:ad:9e:30:17:6d:9f:f1:58:93:cc:ed:59:
3d:82:fc:e7:1b:b0:42:4d:fb:0b:f8:6d:dc:a1:d1:
fb:9d:18:95:d8:2a:16:38:e5:d5:bf:cf:41:a7:9c:
c0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F8:12:B4:CC:14:6D:15:BA:D9:2C:98:A3:74:92:66:B1:12:95:A0
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31322e302f32332d3234203d3e203531383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.12.0/23
Signature Algorithm: sha256WithRSAEncryption
00:52:d2:65:e8:f6:56:8d:40:ad:38:95:71:50:ce:c0:91:fb:
38:6f:a7:a2:22:c2:a2:0d:9f:1e:a1:b0:bd:87:c1:ef:f3:5b:
a3:d5:b1:76:e2:1a:c9:dd:03:db:c8:a3:a2:e8:e3:fc:88:b7:
18:07:63:ed:c8:f0:79:b7:32:aa:97:4a:33:f7:71:6b:31:d9:
f1:8d:56:f6:a2:2c:54:9e:97:49:c5:51:3c:02:b8:fa:a3:86:
09:c1:80:67:66:2a:3a:c6:6f:53:d8:71:74:95:13:cc:bf:66:
06:f9:00:e2:f2:f7:4c:9d:df:c7:ef:ac:9c:01:90:4e:57:79:
37:ff:ae:bf:c2:6c:78:a6:eb:95:a6:96:6d:5c:cd:40:0b:cc:
d4:b6:f7:78:eb:17:4e:c8:61:73:ef:5e:2e:d7:70:a9:9e:f5:
d1:f8:e7:8c:bd:06:eb:32:d8:99:5a:43:cb:f3:68:3f:ea:58:
23:d1:44:32:f5:16:47:8f:db:db:21:37:9c:fc:72:29:a7:be:
21:fa:f7:fa:09:21:82:e2:cf:46:65:29:c1:1b:fc:ef:f1:a1:
5b:82:f5:ca:da:64:dc:2e:ec:70:5e:fb:55:5b:b8:39:95:d5:
93:8f:5a:6e:11:83:64:db:5b:18:1c:b5:8a:ba:cc:ca:eb:7d:
b8:52:1e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:41:43 2026 by rpki-client