Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31332e302f32342d3234203d3e20323135323234.roa
File: 3130392e3130362e31332e302f32342d3234203d3e20323135323234.roa (raw, json)
Hash identifier: fomV0X8b/bCYa64/2E/5uXGDZj9UcpodIAzaJmfVXF0=
Subject key identifier: 1B:FE:E3:81:BD:97:2C:C4:8F:B1:39:D4:C9:3C:D6:5C:79:CA:94:FA
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 3B82D149159C396702D97E74A1FF747A6575D8E6
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31332e302f32342d3234203d3e20323135323234.roa
Signing time: Fri 27 Feb 2026 21:01:43 +0000
ROA not before: Fri 27 Feb 2026 20:56:43 +0000
ROA not after: Fri 26 Feb 2027 21:01:43 +0000
asID: 215224
IP address blocks: 109.106.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:82:d1:49:15:9c:39:67:02:d9:7e:74:a1:ff:74:7a:65:75:d8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Feb 27 20:56:43 2026 GMT
Not After : Feb 26 21:01:43 2027 GMT
Subject: CN=1BFEE381BD972CC48FB139D4C93CD65C79CA94FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2d:72:0a:66:e3:51:2d:4e:65:2c:7f:0f:9b:
f2:96:15:8c:46:d0:8f:83:76:41:b3:7f:47:b3:c0:
8f:8c:64:08:66:5e:4c:86:37:54:9f:5f:ba:0f:6f:
0b:c2:4c:a9:f4:3f:4d:8d:8a:9b:dc:7e:77:98:4a:
84:80:ad:86:2d:9d:b1:24:98:5d:29:62:7a:a0:57:
fc:da:f6:e4:07:45:39:6c:99:42:1d:61:40:22:11:
dc:3e:50:f5:30:c2:40:da:81:23:4c:d6:ba:69:84:
55:a2:88:4f:96:1e:3f:d8:8a:67:7d:39:93:45:72:
15:bd:42:13:0c:d9:d0:e5:1e:10:90:1d:42:c7:50:
82:d6:cc:5c:84:0f:03:3f:32:f1:f4:f2:d2:a6:3d:
42:3a:24:07:11:21:10:e8:df:f1:83:81:a6:7c:9f:
19:b9:0e:da:c1:7f:f5:d4:d9:64:ec:49:9f:2b:cf:
be:a3:65:e5:a7:07:54:37:b2:69:5c:bd:a2:8d:cb:
c7:36:3f:db:64:88:f0:5d:0d:af:9a:5c:a6:19:cb:
59:4c:98:37:c3:b4:83:66:23:21:54:fb:1e:b9:73:
8d:df:93:1a:52:99:d4:76:79:a0:04:88:b1:7d:f9:
87:c5:d1:51:98:38:f0:1c:51:f4:64:8b:ac:58:bc:
66:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FE:E3:81:BD:97:2C:C4:8F:B1:39:D4:C9:3C:D6:5C:79:CA:94:FA
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31332e302f32342d3234203d3e20323135323234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.13.0/24
Signature Algorithm: sha256WithRSAEncryption
40:b3:55:93:c5:89:f7:e8:0b:db:ee:68:22:e1:32:01:1c:aa:
86:ee:1d:aa:c9:95:f4:ff:94:14:b3:2b:00:35:49:c5:64:c6:
a1:3d:5a:f8:e7:58:3c:1b:25:05:ab:70:75:d8:fb:a3:02:ec:
31:d6:e9:26:ac:c0:7d:f6:09:35:82:3c:9c:93:8d:61:83:a7:
48:85:e2:cf:c8:04:b3:f1:19:57:c2:d9:0b:46:66:7a:68:bb:
23:62:b1:da:2f:c2:f6:c5:3b:08:ab:40:e2:17:de:4b:8e:d7:
84:5d:d9:19:71:84:a3:78:ab:ba:fb:c2:f7:12:0a:2c:0f:ae:
1f:9f:c2:32:d0:a7:12:75:02:b1:a5:67:dd:0c:f9:82:59:3d:
af:7c:48:c4:ba:dd:5c:ff:92:ce:9b:5f:01:51:36:08:30:0f:
a4:a9:44:df:eb:33:7e:1b:f8:62:9b:bf:d5:44:85:1e:f5:d0:
97:d4:e6:cd:55:8d:f3:82:0c:15:7d:b8:38:d3:f2:5d:c9:03:
57:92:dd:5f:95:fb:3d:55:32:93:f9:56:4c:6c:e5:af:42:bf:
3d:35:a1:d3:6a:42:c3:1f:80:79:81:92:ff:49:ef:1f:37:ec:
20:e1:3a:6c:ce:b5:37:7b:5d:9d:a5:83:48:6c:73:7f:10:f3:
83:2e:fb:da
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUO4LRSRWcOWcC2X50of90emV12OYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNjAyMjcyMDU2NDNaFw0yNzAyMjYyMTAxNDNaMDMxMTAvBgNV
BAMTKDFCRkVFMzgxQkQ5NzJDQzQ4RkIxMzlENEM5M0NENjVDNzlDQTk0RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwLXIKZuNRLU5lLH8Pm/KWFYxG
0I+DdkGzf0ezwI+MZAhmXkyGN1SfX7oPbwvCTKn0P02NipvcfneYSoSArYYtnbEk
mF0pYnqgV/za9uQHRTlsmUIdYUAiEdw+UPUwwkDagSNM1rpphFWiiE+WHj/Yimd9
OZNFchW9QhMM2dDlHhCQHULHUILWzFyEDwM/MvH08tKmPUI6JAcRIRDo3/GDgaZ8
nxm5DtrBf/XU2WTsSZ8rz76jZeWnB1Q3smlcvaKNy8c2P9tkiPBdDa+aXKYZy1lM
mDfDtINmIyFU+x65c43fkxpSmdR2eaAEiLF9+YfF0VGYOPAcUfRki6xYvGbnAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUG/7jgb2XLMSPsTnUyTzWXHnKlPowHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzMDM5MmUzMTMwMzYyZTMx
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzUzMjMyMzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABtag0wDQYJKoZIhvcNAQELBQADggEBAECzVZPFiffoC9vuaCLhMgEcqobuHarJ
lfT/lBSzKwA1ScVkxqE9WvjnWDwbJQWrcHXY+6MC7DHW6SaswH32CTWCPJyTjWGD
p0iF4s/IBLPxGVfC2QtGZnpouyNisdovwvbFOwirQOIX3kuO14Rd2RlxhKN4q7r7
wvcSCiwPrh+fwjLQpxJ1ArGlZ90M+YJZPa98SMS63Vz/ks6bXwFRNggwD6SpRN/r
M34b+GKbv9VEhR710JfU5s1VjfOCDBV9uDjT8l3JA1eS3V+V+z1VMpP5Vkxs5a9C
vz01odNqQsMfgHmBkv9J7x837CDhOmzOtTd7XZ2lg0hsc38Q84Mu+9o=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:05:07 2026 by rpki-client