Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31332e302f32342d3234203d3e203136353039.roa
File: 3130392e3130362e31332e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: u+uloGluBXi0cr2H7ZJRg3hJbOfrQH69JATl1462Fnw=
Subject key identifier: 93:EA:53:56:F1:9E:42:79:F2:C9:1B:77:AA:5B:8B:8A:30:B0:56:85
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 7BB5A083566D0103A5EF6B294AD78456098112DB
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31332e302f32342d3234203d3e203136353039.roa
Signing time: Fri 27 Feb 2026 22:14:40 +0000
ROA not before: Fri 27 Feb 2026 22:09:40 +0000
ROA not after: Fri 26 Feb 2027 22:14:40 +0000
asID: 16509
IP address blocks: 109.106.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:b5:a0:83:56:6d:01:03:a5:ef:6b:29:4a:d7:84:56:09:81:12:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Feb 27 22:09:40 2026 GMT
Not After : Feb 26 22:14:40 2027 GMT
Subject: CN=93EA5356F19E4279F2C91B77AA5B8B8A30B05685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:2c:b0:6e:50:36:5b:b4:eb:41:69:a5:42:
8e:84:96:c9:d0:a3:ad:fa:29:4a:e9:6d:2a:e9:1a:
fb:e8:fa:2a:1b:1b:0d:26:70:13:af:ce:93:1e:b9:
65:37:e2:09:16:9f:77:b0:18:ee:33:15:00:9b:cb:
df:34:26:98:6e:7b:99:a6:fa:f1:8d:44:bd:80:c8:
c8:0f:56:82:36:e6:c1:86:fd:9e:23:77:f1:71:7b:
53:aa:1f:9d:56:37:51:12:6d:91:99:33:76:15:c7:
e9:af:d1:cf:14:c8:17:c0:06:e9:3d:f6:bc:06:f0:
35:06:92:c3:5b:90:c0:16:3a:38:47:ee:f1:21:5f:
99:4c:aa:c8:a6:cb:45:c8:16:6a:90:37:e1:c6:dd:
ac:4e:58:d4:49:95:b1:31:65:e1:67:60:13:a2:11:
4e:50:d6:dc:73:3e:9a:fd:b3:8f:5a:9a:c3:00:d7:
77:26:58:91:28:16:52:92:31:75:c9:b5:98:db:f6:
84:2d:1b:2b:62:28:0f:02:1e:06:fc:03:5c:dd:50:
86:05:8b:76:c8:66:da:f6:71:81:7a:cd:74:39:36:
30:5e:2d:48:79:2c:7f:3a:09:4f:8b:43:3a:18:8b:
c3:fe:44:67:2f:67:34:73:b7:2e:de:6f:74:76:a2:
4a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EA:53:56:F1:9E:42:79:F2:C9:1B:77:AA:5B:8B:8A:30:B0:56:85
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31332e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.13.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:74:8c:fb:9b:0f:a3:d4:8f:bc:24:58:cc:49:85:a5:bb:2e:
70:82:b1:37:d1:f3:96:cf:e4:37:25:0d:0a:b3:00:a9:06:61:
9e:bd:92:7a:32:41:ee:aa:9b:d2:c6:92:11:1e:af:2a:5f:65:
44:d5:bc:43:65:3c:12:e7:4b:b4:b9:34:9d:0f:ac:33:77:83:
88:d6:26:68:c7:8b:c8:27:9a:72:f3:d8:18:b9:77:0e:9f:de:
8f:54:ed:f5:ca:f0:e0:fe:61:70:e5:c7:2a:2c:cf:ef:74:bb:
3e:8e:40:9c:dd:90:32:eb:6e:af:22:72:86:44:3c:23:17:9b:
20:f0:24:5c:8f:99:d9:d4:1b:9b:fa:8a:33:cf:33:dc:71:6a:
65:fe:8e:56:45:67:85:66:1c:c3:3b:2a:a2:72:83:c0:48:09:
64:ab:ee:a2:7d:72:3f:8c:40:7b:f3:fc:19:be:f3:e8:43:e2:
29:60:8e:04:93:24:f5:6b:f0:17:d1:64:24:7f:72:bc:28:22:
40:f9:c7:36:f6:25:57:a9:ba:9d:cd:1c:bb:80:fb:cb:cf:bf:
26:2a:be:df:30:33:df:2c:41:91:8c:89:c9:ee:37:cb:b4:33:
f3:e2:af:95:b9:1e:f2:29:d8:6e:29:06:28:38:ac:94:24:4c:
03:92:1e:a9
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUe7Wgg1ZtAQOl72spSteEVgmBEtswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNjAyMjcyMjA5NDBaFw0yNzAyMjYyMjE0NDBaMDMxMTAvBgNV
BAMTKDkzRUE1MzU2RjE5RTQyNzlGMkM5MUI3N0FBNUI4QjhBMzBCMDU2ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC56iywblA2W7TrQWmlQo6ElsnQ
o636KUrpbSrpGvvo+iobGw0mcBOvzpMeuWU34gkWn3ewGO4zFQCby980Jphue5mm
+vGNRL2AyMgPVoI25sGG/Z4jd/Fxe1OqH51WN1ESbZGZM3YVx+mv0c8UyBfABuk9
9rwG8DUGksNbkMAWOjhH7vEhX5lMqsimy0XIFmqQN+HG3axOWNRJlbExZeFnYBOi
EU5Q1txzPpr9s49amsMA13cmWJEoFlKSMXXJtZjb9oQtGytiKA8CHgb8A1zdUIYF
i3bIZtr2cYF6zXQ5NjBeLUh5LH86CU+LQzoYi8P+RGcvZzRzty7eb3R2okpzAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUk+pTVvGeQnnyyRt3qluLijCwVoUwHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzMDM5MmUzMTMwMzYyZTMx
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM2MzUzMDM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
bWoNMA0GCSqGSIb3DQEBCwUAA4IBAQCjdIz7mw+j1I+8JFjMSYWluy5wgrE30fOW
z+Q3JQ0KswCpBmGevZJ6MkHuqpvSxpIRHq8qX2VE1bxDZTwS50u0uTSdD6wzd4OI
1iZox4vIJ5py89gYuXcOn96PVO31yvDg/mFw5ccqLM/vdLs+jkCc3ZAy626vInKG
RDwjF5sg8CRcj5nZ1Bub+oozzzPccWpl/o5WRWeFZhzDOyqicoPASAlkq+6ifXI/
jEB78/wZvvPoQ+IpYI4EkyT1a/AX0WQkf3K8KCJA+cc29iVXqbqdzRy7gPvLz78m
Kr7fMDPfLEGRjInJ7jfLtDPz4q+VuR7yKdhuKQYoOKyUJEwDkh6p
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:04:43 2026 by rpki-client