Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31352e302f32342d3234203d3e20383334.roa
File: 3130392e3130362e31352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: RsHnHC2LMxtg6hiv3Bl4GMPJKcv5JNhM9KGyiytJkVo=
Subject key identifier: 24:E2:A1:52:1E:5E:83:0D:A4:7B:D9:57:91:8F:45:A7:2F:79:FD:73
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 1EBF4C14AAF9C06DE981F80BB4BCDBCF5EDD079A
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31352e302f32342d3234203d3e20383334.roa
Signing time: Sun 06 Sep 2026 05:47:46 +0000
ROA not before: Sun 06 Sep 2026 05:42:46 +0000
ROA not after: Sun 05 Sep 2027 05:47:46 +0000
asID: 834
IP address blocks: 109.106.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:bf:4c:14:aa:f9:c0:6d:e9:81:f8:0b:b4:bc:db:cf:5e:dd:07:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 6 05:42:46 2026 GMT
Not After : Sep 5 05:47:46 2027 GMT
Subject: CN=24E2A1521E5E830DA47BD957918F45A72F79FD73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a9:35:ff:8d:a1:82:98:a7:88:ed:db:b0:48:
d0:7a:f2:45:b5:64:a9:96:69:76:79:25:3c:84:1b:
8d:cb:6c:46:8d:76:f7:df:28:1e:b8:e8:c2:52:16:
30:1c:87:93:77:ad:8a:49:78:b5:0e:2a:f0:5b:7d:
c1:c0:cd:06:7e:41:9e:f6:0e:58:30:87:6c:fd:92:
04:bc:dd:21:9f:67:cc:7c:0a:85:4e:27:e9:ef:96:
c6:43:e1:4b:0b:07:15:10:e1:96:a1:fd:cc:8b:aa:
2e:02:d7:a6:5c:54:7d:2b:d0:bc:32:fc:78:33:1f:
49:74:ee:e3:9f:55:02:88:3e:ee:27:25:c2:cf:f8:
b5:80:69:aa:09:4e:41:d1:be:6e:9c:a7:c7:4a:34:
0b:07:26:6b:61:83:92:b3:01:28:bd:21:5a:77:89:
b4:ca:01:7d:8f:67:22:a4:74:0d:cd:03:18:09:43:
e1:58:a3:a7:9b:95:65:11:c4:23:56:82:55:30:62:
8f:06:19:d4:25:7d:ad:af:e3:36:e7:b4:76:72:04:
ad:71:3c:8a:eb:29:20:f3:db:b8:4a:42:71:be:c0:
de:fa:71:de:2b:e4:bc:93:f2:94:46:83:81:c7:73:
58:27:aa:b4:b8:0b:20:11:1d:dc:32:92:a4:04:58:
b7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E2:A1:52:1E:5E:83:0D:A4:7B:D9:57:91:8F:45:A7:2F:79:FD:73
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.15.0/24
Signature Algorithm: sha256WithRSAEncryption
33:3b:9d:97:20:2e:cd:ef:b6:32:0e:1e:06:e3:c4:6b:d8:92:
6a:e8:07:46:e8:9d:14:92:c2:b5:f8:65:0c:9e:86:e5:0f:4f:
be:3c:1d:d8:0d:23:a9:2c:3e:ee:3e:7f:cc:54:70:c5:50:7a:
0f:28:ff:e6:87:13:85:0c:95:ee:37:52:7e:8c:51:98:3d:a6:
70:65:81:ed:35:21:da:ff:39:ee:9e:0e:02:3a:db:58:cb:e5:
2e:43:f0:9b:82:7f:7a:a0:fb:40:de:91:ac:7c:80:e4:5e:34:
f5:48:30:78:26:8c:b3:d0:21:55:af:9e:c8:51:9c:10:a1:34:
97:17:69:e5:98:16:97:d3:5f:36:f7:4e:76:d2:dd:db:63:9d:
48:89:90:92:69:12:3d:97:f6:67:7f:5a:7c:ed:d2:c6:43:16:
ff:5a:fd:a6:d1:fb:ea:72:94:c8:fb:7c:90:49:9c:38:ee:96:
fa:00:32:4b:be:32:a9:1a:7c:44:86:3a:77:0c:95:fe:3b:d8:
eb:fa:4f:59:b1:72:2c:ad:3b:02:ea:49:64:aa:f9:48:7c:40:
3f:55:03:0f:a9:3d:42:65:fb:b6:38:a2:fe:ea:8b:23:71:09:
47:57:e9:93:49:32:24:91:33:38:65:c3:c6:e5:4b:6b:a6:db:
2b:02:d9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:20:46 2026 by rpki-client