Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31322e302f32332d3234203d3e20383334.roa
File: 3130392e3130362e31322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: W9TPzqVm3G5F83rt3ouEuNg6Xc1orFV4wPNit/VtKH4=
Subject key identifier: FD:F6:32:92:C1:56:C9:ED:1D:E7:3C:47:47:A2:33:21:6B:40:81:21
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 5F956C79E599997DF9399E16C0D75940D047D7FD
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31322e302f32332d3234203d3e20383334.roa
Signing time: Thu 10 Sep 2026 11:26:27 +0000
ROA not before: Thu 10 Sep 2026 11:21:27 +0000
ROA not after: Thu 09 Sep 2027 11:26:27 +0000
asID: 834
IP address blocks: 109.106.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:95:6c:79:e5:99:99:7d:f9:39:9e:16:c0:d7:59:40:d0:47:d7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 10 11:21:27 2026 GMT
Not After : Sep 9 11:26:27 2027 GMT
Subject: CN=FDF63292C156C9ED1DE73C4747A233216B408121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:15:ae:da:c2:df:6f:ae:6b:18:77:ad:49:da:
d8:44:a2:58:fc:72:37:db:31:a1:93:22:72:16:1a:
fa:72:c7:30:e7:16:76:6d:0d:4b:6a:1e:20:e0:30:
b2:a0:51:42:49:74:a5:66:3c:97:b6:d3:c7:31:e8:
06:07:91:ca:bf:23:e7:26:bc:46:73:6b:05:64:71:
0c:c2:24:e3:bc:6c:69:e7:75:20:0b:e2:bb:b1:3d:
44:73:6a:37:b2:67:2e:d6:00:4a:bd:97:ab:a3:3b:
ea:8c:72:c8:55:5f:f0:eb:c6:cd:be:95:66:1e:5b:
f0:8b:65:fd:33:05:86:0b:fd:81:71:3c:ef:cd:4e:
ac:b8:f2:f7:0f:03:10:08:af:ff:34:aa:34:81:4a:
6c:66:18:85:73:80:c9:4a:0a:ba:a7:90:05:2e:15:
22:d0:42:66:99:3e:89:4e:7e:78:f1:56:a2:ce:c6:
e7:39:bb:78:84:af:81:5f:fc:aa:c5:1a:3d:d4:3f:
76:26:72:c1:fd:32:9e:bf:1f:03:f0:17:c5:dc:5d:
ca:39:bc:25:0f:7a:66:91:a6:65:ba:81:87:fc:37:
ee:b6:27:bf:30:43:48:58:9a:96:33:0c:d2:e5:59:
94:52:d4:b5:3a:dd:41:b8:a7:77:d9:16:20:13:5a:
9c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F6:32:92:C1:56:C9:ED:1D:E7:3C:47:47:A2:33:21:6B:40:81:21
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.12.0/23
Signature Algorithm: sha256WithRSAEncryption
23:8d:01:b6:83:72:04:0c:00:f8:92:2d:68:07:9d:7a:6d:29:
14:77:f8:29:e1:94:42:8e:4d:21:51:d9:2f:cd:73:84:13:58:
64:a4:f9:4a:46:75:2b:06:4f:f0:38:21:5e:20:30:34:60:c2:
ab:0d:02:ec:b4:f3:50:2b:96:97:12:a1:48:0f:55:78:7b:c4:
ee:60:fc:d2:a3:04:9b:f9:d9:e2:04:e6:57:fb:74:1a:eb:3a:
a3:bb:f7:54:f8:f6:23:35:3e:d7:b6:4a:ec:d1:76:5d:70:10:
8d:c1:74:07:3e:35:a2:30:54:c7:a1:07:bc:d1:3c:38:37:fc:
ef:cf:12:29:ed:64:53:45:56:3a:bd:ed:98:7c:95:33:1a:92:
65:a7:f3:b9:fd:db:c1:d4:c9:b8:4c:a3:31:be:6e:45:81:bb:
88:8c:f6:d6:51:f0:d1:c1:8e:08:03:b2:98:82:97:db:c3:2b:
c9:c2:8e:01:4e:52:89:64:04:2b:28:5d:b4:b8:86:3f:be:38:
7b:7b:08:9f:a2:52:61:5c:56:53:64:83:12:ab:f8:ee:7a:51:
2e:7b:9d:39:55:ad:e2:b3:dc:c0:ce:db:6a:9a:85:4a:fa:1e:
2b:7d:0a:0c:99:aa:04:b0:b0:2d:8f:93:5d:d8:a5:17:f6:ea:
e2:10:b4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:21:52 2026 by rpki-client