Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31322e302f32342d3234203d3e203137343937.roa
File: 3130392e3130362e31322e302f32342d3234203d3e203137343937.roa (raw, json)
Hash identifier: PlW11JMNz/3g9XxRtNo3LNrodOjBrk1i8FmJM2hho8A=
Subject key identifier: 37:66:E9:69:03:B4:2F:0A:0F:49:F1:A0:CA:16:C4:A9:6E:96:F0:E6
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 6D71946193F698D1C86FB7596E30B19502AE31E5
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31322e302f32342d3234203d3e203137343937.roa
Signing time: Thu 26 Feb 2026 09:07:35 +0000
ROA not before: Thu 26 Feb 2026 09:02:35 +0000
ROA not after: Thu 25 Feb 2027 09:07:35 +0000
asID: 17497
IP address blocks: 109.106.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:71:94:61:93:f6:98:d1:c8:6f:b7:59:6e:30:b1:95:02:ae:31:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Feb 26 09:02:35 2026 GMT
Not After : Feb 25 09:07:35 2027 GMT
Subject: CN=3766E96903B42F0A0F49F1A0CA16C4A96E96F0E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:c7:cf:7d:10:da:5d:5b:70:5d:c3:01:f1:
4f:bc:b7:eb:fe:50:0a:e4:0f:42:a5:b6:ba:f5:16:
63:60:70:1f:e3:1a:22:ea:73:50:41:60:47:63:6d:
2e:97:5f:96:b9:ef:dc:d1:04:39:d4:6c:50:1f:aa:
f6:9b:b1:76:e5:5a:39:dc:3f:d2:bb:25:94:53:da:
9e:f6:48:df:94:a9:be:6d:20:4b:2c:e9:c9:e8:24:
e8:5a:d2:25:37:21:67:75:37:29:dc:55:83:be:56:
0e:6f:89:ee:1d:82:20:83:8b:cf:43:84:00:59:f0:
3d:21:0f:68:16:cc:fa:00:19:a6:7d:0f:dc:d6:bc:
07:f8:55:b9:88:b7:5c:f9:48:7c:cc:40:ec:a2:65:
ed:bf:10:27:a3:87:71:cb:dd:5a:4c:4b:ff:7b:a6:
6b:ec:78:1b:92:83:30:d5:b8:91:eb:43:94:41:61:
38:89:3c:94:89:a5:9c:c5:b0:52:95:a6:25:d4:7b:
ea:0f:b2:b8:20:3a:ea:d4:1d:16:3d:ec:1d:91:56:
be:a8:5a:67:1e:73:95:38:f3:13:50:2b:58:8d:5c:
e4:84:df:39:db:36:f6:55:67:c3:e7:e8:3b:4e:fc:
0f:1b:28:48:65:c5:70:c0:8a:60:8a:d1:b2:81:7b:
cb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:66:E9:69:03:B4:2F:0A:0F:49:F1:A0:CA:16:C4:A9:6E:96:F0:E6
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31322e302f32342d3234203d3e203137343937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.12.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:d0:0f:d9:65:74:0c:d0:9a:dc:e1:ba:4a:84:86:d0:67:9b:
05:2e:78:7b:81:b0:cb:05:00:43:ca:b6:1c:4b:eb:33:7a:47:
e4:b3:f8:48:45:74:ba:6a:e8:5a:6e:cb:36:7f:a3:d7:7b:5d:
1d:51:60:58:c3:a8:94:8e:45:10:0c:5e:c4:fd:33:31:2b:5e:
d2:56:f9:ad:14:44:2b:2a:56:ce:67:65:25:6b:f9:16:9f:9f:
79:7d:e1:f6:c3:b9:e4:f0:49:23:c1:23:d4:80:72:ba:c7:fa:
64:bd:9b:24:41:07:16:5f:9b:a4:43:ab:c3:74:7d:8f:22:ce:
0c:0a:fc:a2:c9:b1:c8:d1:69:c6:f9:68:bb:9a:6e:5f:24:7d:
3b:42:e2:f6:a5:cf:83:c3:2d:19:e3:96:72:b8:35:c9:bb:ce:
65:88:3e:56:b1:f8:87:91:4b:23:3f:19:2e:63:eb:e5:a7:1c:
79:ba:d5:17:60:39:07:c7:65:13:2a:71:6f:a3:e5:6e:59:68:
f5:9a:04:eb:eb:81:91:d5:9e:d6:11:a7:a9:12:93:da:dd:83:
4a:24:ce:20:3f:fd:62:43:51:4d:91:8a:f5:ca:b7:82:45:1d:
13:96:61:7f:76:10:ee:f1:0e:75:a8:d2:04:79:01:ac:63:16:
5a:1f:1a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:34:09 2026 by rpki-client