Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa
File: 3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa (raw, json)
Hash identifier: JpGLComndw26SOL3sJbPNJ7i8ZI6iCFmvappx1PnQqM=
Subject key identifier: E7:7D:FA:69:50:D5:BD:34:2F:1C:68:C0:81:2C:BB:CA:87:D2:6E:ED
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 1A44C4F5A700B864BB24D384F54FC51996E89906
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa
Signing time: Thu 26 Mar 2026 10:46:55 +0000
ROA not before: Thu 26 Mar 2026 10:41:55 +0000
ROA not after: Thu 25 Mar 2027 10:46:55 +0000
asID: 25160
IP address blocks: 109.234.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:44:c4:f5:a7:00:b8:64:bb:24:d3:84:f5:4f:c5:19:96:e8:99:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Mar 26 10:41:55 2026 GMT
Not After : Mar 25 10:46:55 2027 GMT
Subject: CN=E77DFA6950D5BD342F1C68C0812CBBCA87D26EED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ad:a8:22:91:8b:e5:f6:df:38:65:d5:66:a8:
89:9f:e4:de:07:3b:1b:ec:48:49:3a:de:74:86:f3:
8c:8e:1a:86:82:69:54:87:73:44:ae:7a:76:44:bf:
a4:df:fa:cb:36:33:30:88:ed:a6:79:2f:17:9f:c8:
78:50:c1:40:37:2c:27:32:a7:61:19:ee:d1:99:fa:
ab:9a:c8:5e:dd:8c:d7:39:0f:f4:03:93:85:30:8a:
6d:a2:ab:04:b7:60:00:cf:f2:4d:5a:fe:eb:f0:54:
c3:94:33:22:26:b5:2b:86:20:c6:16:4f:4c:de:c6:
01:4c:c0:10:77:de:94:ea:79:7c:43:f1:76:9e:3c:
a6:ff:0f:22:a1:4a:85:fd:98:c3:d5:87:cb:6f:7f:
0b:de:7a:16:b5:ec:d3:dd:f8:67:0c:8f:0b:61:93:
86:d0:8a:4b:5c:f8:87:15:a3:33:18:64:94:b8:9d:
94:e1:05:dd:52:87:fe:5d:8f:f1:41:52:a3:68:b7:
65:3b:77:46:77:e9:a7:31:19:af:24:68:d5:63:d0:
1a:62:a0:33:21:6a:55:3c:c7:29:1e:03:68:7e:09:
46:a5:7a:24:70:77:0b:87:fa:6d:bf:64:6b:69:0a:
a2:30:e7:4e:7f:fe:c4:11:e0:49:f0:82:47:73:90:
41:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7D:FA:69:50:D5:BD:34:2F:1C:68:C0:81:2C:BB:CA:87:D2:6E:ED
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.209.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f6:f3:14:be:44:df:ec:b9:58:ce:21:75:dd:ec:42:31:a3:
cf:49:1c:16:87:31:79:ef:b0:87:36:c5:48:41:cb:42:9e:df:
9a:67:4f:77:54:a5:fc:df:69:57:00:87:35:e5:34:01:29:4d:
18:c6:d4:ca:83:b7:08:55:15:2d:13:79:d6:f0:3c:28:26:c0:
96:23:9e:e3:d8:0c:5f:5d:10:92:c7:e7:ff:28:31:8f:2f:91:
53:c2:84:52:67:d4:cc:45:66:fe:e6:37:09:8c:1c:2f:56:fc:
6f:19:20:ac:5e:14:b5:9f:da:57:cf:5f:73:35:3c:b8:61:5b:
c3:37:f8:90:a3:a7:c3:c4:78:c4:cd:20:d6:df:07:a2:44:02:
91:3d:e0:0d:c7:b9:6a:f3:fb:0e:7e:33:bd:82:ed:35:e6:a7:
a7:7a:8d:4d:58:af:63:87:f0:fa:69:1b:69:8a:91:a4:08:c6:
ba:e1:ee:cb:0f:46:a4:ff:ef:74:a3:a0:aa:57:14:08:2a:b9:
e8:af:aa:f8:df:51:81:a3:01:28:0d:85:56:7e:14:51:ed:f7:
b4:68:a4:d4:07:1b:a5:13:78:04:9a:12:2c:a4:bc:58:12:b0:
80:f3:ea:a2:67:aa:b5:5f:41:a1:61:b4:7e:3f:4f:e5:54:de:
93:51:80:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:00:33 2026 by rpki-client