Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31322e302f32342d3234203d3e203632363130.roa
File: 3130392e3130362e31322e302f32342d3234203d3e203632363130.roa (raw, json)
Hash identifier: +zUhU2nPGhUVnFx8btrF7M921H9W1bnyj5RRBvrzgSk=
Subject key identifier: 9F:9D:9B:F1:D2:33:D4:5E:C7:A1:F9:D8:E2:A9:1D:85:44:57:37:8B
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 7D1E1684D6FE8118672AF09ED96F2D7FAB55CBAA
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31322e302f32342d3234203d3e203632363130.roa
Signing time: Tue 31 Mar 2026 09:06:52 +0000
ROA not before: Tue 31 Mar 2026 09:01:52 +0000
ROA not after: Tue 30 Mar 2027 09:06:52 +0000
asID: 62610
IP address blocks: 109.106.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:49:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:1e:16:84:d6:fe:81:18:67:2a:f0:9e:d9:6f:2d:7f:ab:55:cb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Mar 31 09:01:52 2026 GMT
Not After : Mar 30 09:06:52 2027 GMT
Subject: CN=9F9D9BF1D233D45EC7A1F9D8E2A91D854457378B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:29:d5:39:ba:27:d6:93:b6:7b:5f:81:49:13:
54:ff:54:4b:75:f9:56:5a:09:cf:ce:d4:e9:0f:3e:
7d:07:7a:90:4a:a0:bd:89:08:f9:ac:45:e7:6a:78:
8b:33:f7:3a:35:28:b8:b9:2e:d0:fd:c3:90:87:4a:
c3:5f:bd:e4:3e:7a:32:1a:c7:ac:53:a3:f7:58:9f:
37:af:2e:f7:40:e4:fb:30:0c:61:ea:d6:1f:34:f9:
e4:ae:5f:5d:43:c7:d6:b4:41:e7:c4:c8:c9:91:ba:
b6:ab:53:52:37:a7:13:1b:97:88:84:dd:3f:df:13:
2e:5c:fd:a5:da:eb:be:1f:26:f8:48:93:a4:1a:9c:
a6:67:f4:ad:f5:22:63:e0:87:a0:77:92:3c:8d:31:
b1:5b:b5:f5:dc:ce:b3:d8:24:e8:03:d1:a9:3a:56:
a3:67:2a:a0:f0:5e:9b:51:ad:e5:5a:18:87:d5:60:
3a:87:ea:0f:1e:71:bb:87:84:da:ac:0d:e3:1b:93:
2e:e6:61:91:46:e8:6d:a4:87:bf:bc:32:23:79:ec:
5c:aa:a1:29:ac:f4:25:2e:49:1a:18:60:51:fa:73:
3d:a9:be:c5:f0:f2:8c:f3:53:4d:93:ed:7f:4f:33:
da:a3:5e:c3:e1:78:a8:2f:a9:44:11:52:aa:f8:e2:
c0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9D:9B:F1:D2:33:D4:5E:C7:A1:F9:D8:E2:A9:1D:85:44:57:37:8B
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31322e302f32342d3234203d3e203632363130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.12.0/24
Signature Algorithm: sha256WithRSAEncryption
14:79:cb:98:db:ed:84:6f:52:8d:d4:51:08:7f:26:b2:90:74:
87:0f:4a:21:c4:af:7b:f7:59:cb:b5:8a:82:14:0f:5f:dd:02:
91:cd:b2:c4:8e:17:61:56:44:92:d7:ee:ef:ed:f9:7b:80:48:
ea:a8:ac:81:a5:b5:68:73:58:7e:8d:9f:58:9c:eb:1f:84:42:
d7:74:c6:30:54:e9:e3:2b:70:64:d9:49:ff:fb:50:4d:39:33:
0a:9a:e0:6e:69:e8:94:b8:22:11:4c:e6:76:9b:7d:5a:10:cd:
72:38:df:58:65:a0:3d:5a:4c:ab:74:28:be:97:0a:c9:4f:02:
b5:a0:d4:fb:46:3f:c4:de:12:81:75:82:e9:66:d1:2b:c2:c8:
60:09:c2:44:a6:19:bb:94:52:94:3c:b2:fb:99:0c:51:1d:f6:
c8:76:a5:99:d3:47:10:53:66:27:66:ff:11:e0:17:9c:d3:e4:
9a:1f:1d:09:f5:26:3f:03:73:dc:18:39:df:77:1c:8f:66:a3:
a7:e6:1d:a9:e0:59:b8:a3:53:bb:73:51:dc:64:e1:42:1a:cb:
97:69:eb:33:12:c0:6a:0e:26:11:10:9b:90:b5:4b:ac:b2:7f:
01:56:eb:d5:61:c7:63:ea:32:8a:ba:67:d2:db:35:1c:76:06:
5c:b8:3a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:08 2026 by rpki-client