Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31352e302f32342d3234203d3e20383334.roa
File: 3130392e3130362e31352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: YDqGqdo4kBO9Bz6r4TLRWpSvFzzhtrE11SoTY8wOobg=
Subject key identifier: 40:22:C3:08:EB:06:97:81:78:7F:96:FA:B0:9D:95:73:F8:EA:3E:79
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 1FCC034109344638A48E0A871BACE946D251C5DF
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31352e302f32342d3234203d3e20383334.roa
Signing time: Tue 28 Jul 2026 12:37:23 +0000
ROA not before: Tue 28 Jul 2026 12:32:23 +0000
ROA not after: Tue 27 Jul 2027 12:37:23 +0000
asID: 834
IP address blocks: 109.106.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:cc:03:41:09:34:46:38:a4:8e:0a:87:1b:ac:e9:46:d2:51:c5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Jul 28 12:32:23 2026 GMT
Not After : Jul 27 12:37:23 2027 GMT
Subject: CN=4022C308EB069781787F96FAB09D9573F8EA3E79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0a:53:9b:ff:71:16:5a:9b:50:5b:d5:29:61:
60:8f:fb:1a:4c:4a:78:69:67:cc:3d:f5:9c:e1:d4:
d5:8c:e1:47:49:11:ea:ee:7d:1e:b8:48:43:60:2f:
50:af:a8:10:ff:c8:3e:a4:02:55:5e:1d:7e:3b:c4:
12:87:a7:ea:92:2d:8a:e9:de:58:52:3f:f0:e7:20:
d2:dc:da:36:ca:74:30:7d:1c:85:90:96:a9:e4:6c:
db:b8:e5:2b:cb:76:4c:03:2f:a2:db:fe:ed:e6:03:
df:4c:dc:10:73:00:b2:b9:56:3b:e0:3a:87:30:2d:
d0:9a:6e:fb:18:a0:0f:a8:6c:02:4c:53:a9:0d:75:
4a:6f:a3:46:82:74:ff:8f:73:69:5e:dc:db:a3:52:
84:67:5f:20:4a:94:55:03:a6:09:55:0d:f0:9a:ca:
c7:65:0a:44:d5:dd:dd:44:11:4f:cf:35:76:76:44:
ff:11:34:7d:73:f0:d2:ff:53:a3:20:f7:16:f4:d2:
81:16:2d:41:46:52:b0:1a:eb:9f:d1:92:e7:0e:37:
a8:f6:ef:23:2c:8c:33:c6:fe:0d:1a:df:40:5a:08:
ce:07:99:f4:8b:8d:b4:a8:8d:f9:55:14:c0:78:73:
b0:77:23:cc:d4:e9:5c:c1:ef:26:62:15:76:79:40:
78:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:22:C3:08:EB:06:97:81:78:7F:96:FA:B0:9D:95:73:F8:EA:3E:79
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.15.0/24
Signature Algorithm: sha256WithRSAEncryption
67:8f:29:50:dd:98:83:44:d6:11:63:72:40:8d:b0:bc:b2:70:
53:fe:4f:91:db:34:1c:b3:75:9a:af:0d:99:58:87:0d:2e:5e:
36:8d:c5:dc:1c:d3:f0:e0:5c:78:ba:2b:56:b7:ee:e6:57:6c:
fd:cc:eb:51:d8:c8:ec:26:ec:2c:cf:92:58:fe:57:e0:2e:3b:
f4:6b:e8:c3:46:2e:7c:65:01:de:ab:9a:34:bf:35:ad:1e:76:
61:12:1a:37:ce:4f:1d:ac:bd:91:22:f4:3b:3f:0f:a0:c5:a8:
3c:8d:8c:cb:2e:2a:b5:df:1e:1b:e1:96:64:c1:a2:b7:e4:19:
78:cf:5e:33:fb:05:b4:07:e1:1b:ee:02:83:0e:93:f7:30:61:
9d:1e:1b:f9:48:1b:e0:ae:c6:fd:d3:16:73:66:2d:b6:4f:f1:
64:e5:24:1f:88:47:44:e1:0c:42:bc:60:fc:01:fd:8e:06:2e:
3d:f4:ba:e9:2f:05:aa:f6:34:3d:b9:02:9b:ca:0b:ca:11:6f:
0e:68:e3:c5:16:c3:e7:05:9f:f8:0d:03:3c:5d:9b:fe:7f:23:
e9:39:f7:25:b0:47:af:6a:62:3a:fb:9b:97:6e:be:8d:ef:f8:
ea:c1:b4:2e:5e:79:b7:23:40:4f:0f:ba:fc:2a:84:d7:18:56:
15:54:a9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:58:44 2026 by rpki-client