Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e20323039333336.roa
File: 3130392e3131302e3137312e302f32342d3234203d3e20323039333336.roa (raw, json)
Hash identifier: D90FSDbK0R3fTy/ahApFxIBeJiqknXk+fh5QhzlnrlU=
Subject key identifier: 42:1E:D6:13:9A:0D:47:10:76:2E:82:75:B5:8A:EF:FF:FC:07:64:FB
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 697D29AB513179E02B80C2FB7E3FDBB7A5FF1913
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e20323039333336.roa
Signing time: Tue 10 Nov 2026 15:49:41 +0000
ROA not before: Tue 10 Nov 2026 15:44:41 +0000
ROA not after: Tue 09 Nov 2027 15:49:41 +0000
asID: 209336
IP address blocks: 109.110.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:7d:29:ab:51:31:79:e0:2b:80:c2:fb:7e:3f:db:b7:a5:ff:19:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Nov 10 15:44:41 2026 GMT
Not After : Nov 9 15:49:41 2027 GMT
Subject: CN=421ED6139A0D4710762E8275B58AEFFFFC0764FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:b2:fb:41:b0:7c:08:0c:3b:3c:f5:b5:57:
8a:51:dc:93:d8:15:1d:d3:3b:12:63:05:c9:02:92:
17:de:09:45:10:97:ad:a4:f4:4b:e7:a1:cf:2b:71:
65:85:5b:a2:00:91:86:90:80:a0:0a:1d:cf:86:57:
28:cb:f9:e5:d8:b0:7c:7f:24:a7:06:32:aa:2c:9b:
96:1d:b0:98:8d:fc:47:81:b9:13:ec:27:39:55:01:
57:f8:7b:3b:49:a9:d8:0e:b9:2b:6d:85:cb:25:5f:
c0:ee:8e:7a:4f:07:c8:9c:5f:a7:c5:a5:49:fa:86:
07:26:c5:51:53:d0:d0:8f:41:9f:8c:98:2b:33:16:
05:af:aa:36:83:0f:34:95:48:9c:e9:53:ea:d2:13:
da:e1:6d:5d:af:9c:64:64:44:b9:2d:11:31:52:5f:
d7:91:94:57:fd:27:72:c4:31:39:0c:7a:67:ad:57:
86:90:90:a9:f2:5f:03:96:bd:82:b2:6d:cb:e3:97:
f9:91:7c:c9:4f:d0:7c:b2:da:35:5c:08:1e:23:56:
4f:e2:80:1b:aa:bf:33:a7:ae:b7:b1:84:21:8f:77:
1d:17:b8:13:93:92:de:d2:98:10:6f:0b:e4:b1:1a:
16:70:22:e0:11:4e:2f:f5:05:14:8f:a6:41:cc:48:
7d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1E:D6:13:9A:0D:47:10:76:2E:82:75:B5:8A:EF:FF:FC:07:64:FB
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e20323039333336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.171.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:97:dc:36:75:e4:74:d6:d0:73:1b:75:66:da:a6:7a:4c:c8:
c1:03:84:85:13:9e:ae:7a:51:a5:5c:95:87:c5:36:a1:38:49:
f6:50:2c:21:fa:ef:80:ad:6c:7d:3c:a9:bf:eb:b6:1a:74:ea:
84:bf:99:36:00:87:9e:49:05:96:aa:1b:9e:ef:4c:05:13:59:
32:a6:e1:7c:fb:af:7a:5c:cd:f6:58:15:bb:72:ab:1f:0c:bd:
76:c5:da:63:36:a9:35:5c:74:e4:b0:f9:83:1f:82:57:ea:76:
18:e9:e8:09:37:04:0c:42:11:98:fb:63:e9:f2:dc:9d:f3:91:
86:97:89:f7:17:b8:5e:7d:75:3a:19:7f:14:af:85:e5:12:e2:
f8:ca:54:0d:08:5e:ab:a7:56:a0:d3:e8:60:7a:0c:e1:8d:2b:
96:e2:14:01:ad:15:8e:7f:bc:5f:76:76:e2:d5:1d:d6:e3:e5:
58:31:df:8d:00:96:93:7a:5b:f8:f8:6e:bf:d9:07:fb:94:e2:
c7:b2:0f:54:aa:ee:63:d7:a5:92:fd:4d:16:a2:be:7a:74:e0:
da:be:ba:ab:96:a2:ce:cb:e8:69:67:75:e2:6b:53:52:c7:fd:
8d:81:e4:ce:ae:e0:7b:32:88:4c:96:c4:ab:06:0c:a4:73:24:
15:c1:47:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:17:12 2026 by rpki-client