Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137352e302f32342d3234203d3e20313532313739.roa
File: 3130392e3131302e3137352e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: u+KeLszyyVQ/rWPxDPOhp415Axi2vI256IOJVdpvqwY=
Subject key identifier: BB:80:CF:B4:26:46:49:79:FC:5E:CC:DD:75:C3:AD:25:40:0F:68:7A
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 10B539239062F01DB44D4B80D9CC994326CA9164
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137352e302f32342d3234203d3e20313532313739.roa
Signing time: Thu 23 Jul 2026 03:52:57 +0000
ROA not before: Thu 23 Jul 2026 03:47:57 +0000
ROA not after: Thu 22 Jul 2027 03:52:57 +0000
asID: 152179
IP address blocks: 109.110.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:b5:39:23:90:62:f0:1d:b4:4d:4b:80:d9:cc:99:43:26:ca:91:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jul 23 03:47:57 2026 GMT
Not After : Jul 22 03:52:57 2027 GMT
Subject: CN=BB80CFB426464979FC5ECCDD75C3AD25400F687A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:40:1e:7c:d4:8b:df:f7:59:ce:3e:04:5d:0a:
e6:3d:1d:95:25:2d:41:82:76:38:0b:d2:f3:4a:fa:
d4:7d:3b:09:0b:74:e6:e3:ba:2c:ee:ea:df:92:ce:
9a:bd:0f:90:53:4b:2f:e7:18:69:f1:7d:70:d8:ee:
c0:25:a1:2e:6b:68:59:14:02:70:40:99:24:f7:36:
63:e1:b8:13:94:c6:c3:2a:c2:14:45:b0:b4:8b:e3:
ce:ef:68:2e:fb:f6:68:88:b2:ad:b4:bf:8f:3d:8a:
46:c0:f3:78:77:3a:cd:1c:43:5e:da:c4:80:6c:4b:
2b:fe:1a:28:8e:11:35:5d:3a:26:76:08:97:22:6f:
39:4b:c0:4f:cf:bc:d6:1e:08:50:58:29:e2:17:9b:
28:ad:0d:38:4d:87:b6:e8:d3:4e:c8:a8:6b:75:e3:
4d:bd:23:0f:17:d7:35:9a:1a:f1:25:7b:1c:bb:4b:
98:18:6f:7f:da:c8:c1:5b:f9:91:82:e3:a5:61:35:
bd:fc:41:60:92:6e:c4:c9:56:83:22:20:2e:f3:90:
8f:4e:aa:3a:ad:15:c3:50:73:61:6e:ed:79:0c:37:
44:3a:21:99:5c:a5:43:69:26:ff:77:28:d3:9c:c1:
82:e3:6d:39:53:73:84:29:a8:31:fc:38:c7:f4:9b:
c3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:80:CF:B4:26:46:49:79:FC:5E:CC:DD:75:C3:AD:25:40:0F:68:7A
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137352e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.175.0/24
Signature Algorithm: sha256WithRSAEncryption
81:ec:25:ce:5d:95:d9:b9:22:71:d9:2e:c0:e1:9e:a4:a6:5c:
94:f0:42:16:26:f3:e4:63:f7:3f:f0:84:69:12:b3:3b:00:ea:
06:dd:d1:cd:21:30:bb:a0:bb:10:46:02:1a:c7:c6:1f:de:c0:
78:d4:a3:a4:92:8f:17:a1:40:d2:2b:7b:54:c3:8e:00:5f:b6:
d8:6d:59:d0:ba:57:9f:3d:6d:10:0e:97:8d:5a:72:12:1a:bb:
e4:af:2b:95:e6:b4:1e:6d:31:11:b6:d1:11:90:d0:ea:8a:0f:
cc:53:72:8b:23:93:41:95:46:d9:2e:a9:84:54:d3:e8:99:28:
8c:d5:90:79:02:1c:7b:71:c1:e1:4c:a0:f0:5e:9c:0e:33:33:
57:1b:97:37:85:99:39:f7:ee:28:d9:8c:e2:80:36:ad:95:86:
55:c1:10:df:a8:89:6a:21:27:c9:1a:88:bc:da:87:93:01:98:
92:57:da:c9:de:d3:f7:6c:30:ea:77:c6:34:ad:cf:9f:2d:ab:
ff:a1:fe:ae:79:24:38:a2:a7:5e:2c:b2:fa:22:08:86:19:ec:
df:55:b0:0b:83:d7:6b:e1:fe:20:8d:bd:ed:ee:2b:a0:ff:7d:
5b:58:d8:a6:e7:ec:86:61:20:1f:9e:bc:fd:17:ae:9b:9b:40:
e5:c2:7b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:13 2026 by rpki-client