Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31342e302f32342d3234203d3e20323135373238.roa
File: 3130392e3130362e31342e302f32342d3234203d3e20323135373238.roa (raw, json)
Hash identifier: 8MWSjYm6iYIac0sb/1Ech1hr9eyJDytugcE5c6KyDzk=
Subject key identifier: CA:0B:BD:48:5A:6D:24:B8:B2:A9:A5:A6:9E:ED:5B:00:8B:70:41:1E
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 2C20911C4CCF30FAD20805263847CB83EAA9178D
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31342e302f32342d3234203d3e20323135373238.roa
Signing time: Sun 27 Sep 2026 18:02:37 +0000
ROA not before: Sun 27 Sep 2026 17:57:37 +0000
ROA not after: Sun 26 Sep 2027 18:02:37 +0000
asID: 215728
IP address blocks: 109.106.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:20:91:1c:4c:cf:30:fa:d2:08:05:26:38:47:cb:83:ea:a9:17:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 27 17:57:37 2026 GMT
Not After : Sep 26 18:02:37 2027 GMT
Subject: CN=CA0BBD485A6D24B8B2A9A5A69EED5B008B70411E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ab:b6:29:ba:32:59:85:37:17:d6:d6:be:9d:
66:2a:a4:25:1d:5a:86:cf:62:2d:d0:74:fa:9e:db:
2f:ca:ec:cd:c0:4c:9f:22:ba:30:13:03:b5:3e:45:
cf:7b:12:ba:41:d7:af:a5:2c:ca:8f:a3:1f:6f:6a:
7d:51:59:75:73:3b:86:da:01:c6:65:44:70:12:53:
8d:8a:0e:90:11:1e:60:17:27:96:42:4b:63:db:41:
b3:2a:ee:11:2f:89:10:81:96:d9:6a:85:1d:b6:63:
86:3b:66:6d:a4:c4:4e:7f:3c:69:78:b4:6c:7d:39:
bf:b6:b2:04:a6:29:35:d3:8c:c1:53:f0:ce:31:cf:
1c:fb:7c:6e:03:fd:16:d0:6d:90:8c:1c:f2:bc:73:
c9:ea:d5:3e:cb:63:11:01:9b:95:c2:00:9e:43:d1:
c5:bb:ca:14:7d:af:46:51:b4:ad:23:1c:2e:fc:bb:
a2:21:a6:65:cd:14:ce:a1:06:2e:21:f1:c8:35:3a:
38:07:23:53:3d:81:81:cd:48:13:d4:40:e5:22:c0:
14:e4:af:f4:58:72:e9:01:65:cb:a6:6f:e0:94:93:
c7:19:ef:da:79:82:1a:f5:d1:14:86:0c:cb:d5:fc:
0d:5a:27:29:68:2e:bd:27:04:88:d9:40:ed:c1:84:
df:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0B:BD:48:5A:6D:24:B8:B2:A9:A5:A6:9E:ED:5B:00:8B:70:41:1E
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31342e302f32342d3234203d3e20323135373238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.14.0/24
Signature Algorithm: sha256WithRSAEncryption
77:f0:d2:2b:62:90:65:af:58:ee:44:fc:62:7b:27:5e:e0:2a:
02:84:82:25:14:60:de:fa:a0:62:11:17:da:eb:5c:53:a4:51:
4d:02:09:29:0e:7f:bb:8a:6c:a9:3b:93:b9:36:a5:41:9c:f8:
1a:03:78:e2:8d:d2:ac:ee:41:bd:a5:cb:3f:58:88:9f:61:99:
b2:fe:a3:00:74:fd:ea:cd:59:32:1b:c2:18:e4:4a:ec:a2:62:
a2:78:9b:5f:70:0e:bd:46:1e:7d:28:70:7e:e8:b5:24:88:6d:
2c:b5:72:ee:7b:50:f5:3a:50:83:2a:6b:3f:9a:43:07:87:d1:
30:a4:b7:9b:23:80:89:01:8c:d8:77:f9:49:25:24:27:e6:97:
11:cb:ac:c8:a5:a8:e7:94:19:47:c2:97:66:7d:92:15:eb:e9:
69:a2:52:fd:e0:78:5f:e2:0c:ac:cb:c1:cb:1f:be:1f:7e:48:
08:57:e7:b0:83:3f:24:04:3a:bb:8e:67:77:cd:2d:17:7e:f6:
c4:d5:25:fc:9a:5e:88:7a:46:5e:ef:31:45:ba:aa:64:c5:27:
7c:cb:09:9b:a8:71:aa:fa:96:f2:aa:15:20:17:9c:5a:15:77:
7d:df:7c:90:43:6f:fc:27:d2:be:cf:f6:b2:4c:b9:52:86:03:
2c:4c:49:b0
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIULCCRHEzPMPrSCAUmOEfLg+qpF40wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNjA5MjcxNzU3MzdaFw0yNzA5MjYxODAyMzdaMDMxMTAvBgNV
BAMTKENBMEJCRDQ4NUE2RDI0QjhCMkE5QTVBNjlFRUQ1QjAwOEI3MDQxMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHq7YpujJZhTcX1ta+nWYqpCUd
WobPYi3QdPqe2y/K7M3ATJ8iujATA7U+Rc97ErpB16+lLMqPox9van1RWXVzO4ba
AcZlRHASU42KDpARHmAXJ5ZCS2PbQbMq7hEviRCBltlqhR22Y4Y7Zm2kxE5/PGl4
tGx9Ob+2sgSmKTXTjMFT8M4xzxz7fG4D/RbQbZCMHPK8c8nq1T7LYxEBm5XCAJ5D
0cW7yhR9r0ZRtK0jHC78u6IhpmXNFM6hBi4h8cg1OjgHI1M9gYHNSBPUQOUiwBTk
r/RYcukBZcumb+CUk8cZ79p5ghr10RSGDMvV/A1aJyloLr0nBIjZQO3BhN+xAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUygu9SFptJLiyqaWmnu1bAItwQR4wHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzMDM5MmUzMTMwMzYyZTMx
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzUzNzMyMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABtag4wDQYJKoZIhvcNAQELBQADggEBAHfw0itikGWvWO5E/GJ7J17gKgKEgiUU
YN76oGIRF9rrXFOkUU0CCSkOf7uKbKk7k7k2pUGc+BoDeOKN0qzuQb2lyz9YiJ9h
mbL+owB0/erNWTIbwhjkSuyiYqJ4m19wDr1GHn0ocH7otSSIbSy1cu57UPU6UIMq
az+aQweH0TCkt5sjgIkBjNh3+UklJCfmlxHLrMilqOeUGUfCl2Z9khXr6WmiUv3g
eF/iDKzLwcsfvh9+SAhX57CDPyQEOruOZ3fNLRd+9sTVJfyaXoh6Rl7vMUW6qmTF
J3zLCZuocar6lvKqFSAXnFoVd33ffJBDb/wn0r7P9rJMuVKGAyxMSbA=
-----END CERTIFICATE-----
Generated at Tue Sep 29 11:10:23 2026 by rpki-client