Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32332d3234203d3e20383334.roa
File: 3130392e3131302e3136302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: XNQw3/WXDNKmuO6rx3UPubvpgF22y7Ylxj25GFMUDlA=
Subject key identifier: 58:AB:88:20:E1:0C:DB:08:12:08:F4:ED:82:84:81:9E:24:5F:45:58
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 55A7F6CD35AEC8E4D42CE5DB374A332D51BCDFAB
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32332d3234203d3e20383334.roa
Signing time: Thu 30 Apr 2026 20:59:16 +0000
ROA not before: Thu 30 Apr 2026 20:54:16 +0000
ROA not after: Thu 29 Apr 2027 20:59:16 +0000
asID: 834
IP address blocks: 109.110.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:a7:f6:cd:35:ae:c8:e4:d4:2c:e5:db:37:4a:33:2d:51:bc:df:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Apr 30 20:54:16 2026 GMT
Not After : Apr 29 20:59:16 2027 GMT
Subject: CN=58AB8820E10CDB081208F4ED8284819E245F4558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2a:54:35:9d:61:b8:d4:e9:53:e5:17:40:f5:
64:c8:da:ce:0d:91:0f:6f:36:20:e8:18:c5:02:28:
81:a9:eb:5b:8d:37:5d:b3:56:a7:01:0a:74:60:ee:
6e:ca:ea:75:6a:fd:39:96:2f:e0:ab:88:5d:74:87:
b0:77:3a:09:1b:b0:67:4d:11:9c:43:3d:cd:2f:a8:
a6:be:df:91:d3:17:d0:c7:42:d7:77:5b:79:e8:a7:
19:86:ff:b9:f5:f0:4c:22:f3:3b:0e:b9:ea:3a:27:
31:8f:18:d6:bc:62:58:f5:f2:63:d2:ef:31:35:ac:
63:c2:d7:f0:78:9c:16:75:ed:c7:a3:a2:d1:0f:33:
b8:d4:53:99:5b:50:e0:9d:ad:ad:aa:e0:a3:24:81:
a1:d3:d6:b2:31:2c:de:3b:44:47:6d:a9:d8:2f:5a:
c5:de:79:03:32:42:8f:9c:4b:d3:2d:60:bc:82:24:
fb:8d:7e:47:e2:a4:b2:a5:b3:38:3f:db:9a:21:bb:
cf:b0:42:fe:f0:d0:3f:c4:b8:55:3c:92:07:71:8c:
16:ad:c2:c6:b4:c7:50:f4:55:58:5b:24:84:ed:c0:
70:23:af:b0:9d:7a:cb:fe:48:4c:47:08:02:eb:6a:
7b:1c:f5:eb:40:51:68:9c:66:1f:7e:d4:cc:ad:4c:
3b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AB:88:20:E1:0C:DB:08:12:08:F4:ED:82:84:81:9E:24:5F:45:58
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.160.0/23
Signature Algorithm: sha256WithRSAEncryption
55:a6:26:77:96:95:8f:72:86:01:c1:4d:03:2f:a6:74:52:78:
4d:f5:4a:14:d6:0f:c5:bf:50:d8:ff:fb:64:67:72:f9:71:5c:
35:b8:ab:12:f0:d6:c3:40:a9:0c:a8:a1:63:cd:5e:3c:59:9c:
1a:18:95:59:fb:dd:93:2e:e8:41:c1:a3:92:01:cb:c9:c0:23:
81:4d:e6:c4:ac:d3:82:2c:50:39:fa:12:ad:51:be:53:4f:66:
08:30:35:94:aa:02:49:21:4a:27:8d:cf:9d:e3:ce:d6:cc:4c:
a6:cd:d1:f7:92:30:81:61:56:79:ae:48:5b:52:49:a5:db:10:
a4:50:6e:da:ac:2f:d3:00:de:f5:84:c5:10:0e:3c:ef:9b:86:
ad:11:7a:9e:f4:c0:ff:9a:e1:06:bc:a2:09:97:37:f3:8c:d2:
1b:50:13:b5:b5:d6:c2:50:6b:4a:3a:5d:b6:f7:ef:e8:08:db:
fb:26:af:16:c4:7b:32:a2:f9:ff:87:47:3d:9d:d0:97:b3:99:
65:42:c1:0a:9a:f1:f5:13:66:e6:77:a4:94:e8:ee:2a:a9:10:
ae:66:56:2b:d1:cc:70:a4:1c:2e:a2:31:fa:df:43:db:91:8a:
cb:d1:b7:50:35:af:f7:da:a7:f5:44:58:da:f1:5e:86:24:08:
e9:27:0c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:11:34 2026 by rpki-client