Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137352e302f32342d3234203d3e2037323839.roa
File: 3130392e3131302e3137352e302f32342d3234203d3e2037323839.roa (raw, json)
Hash identifier: KKlGWl5oic91Zo4nZKb/Ex3Xr/cfcMYPcNwqgtPanbM=
Subject key identifier: 6C:F0:AD:10:A6:20:69:EF:13:9A:3A:46:B7:32:F3:1D:C1:1B:29:FC
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 311DCC75BD997074A3E925B686041ED1C7AF2E84
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137352e302f32342d3234203d3e2037323839.roa
Signing time: Fri 24 Jul 2026 05:58:27 +0000
ROA not before: Fri 24 Jul 2026 05:53:27 +0000
ROA not after: Fri 23 Jul 2027 05:58:27 +0000
asID: 7289
IP address blocks: 109.110.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:1d:cc:75:bd:99:70:74:a3:e9:25:b6:86:04:1e:d1:c7:af:2e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jul 24 05:53:27 2026 GMT
Not After : Jul 23 05:58:27 2027 GMT
Subject: CN=6CF0AD10A62069EF139A3A46B732F31DC11B29FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:77:76:04:45:ea:28:1f:2c:f1:40:27:e1:
7e:3a:ba:5b:c3:8f:f2:2a:ba:d4:4c:19:13:6e:77:
8b:1d:3d:50:ec:4e:0a:24:40:f3:91:04:10:43:b0:
9e:0c:24:40:91:a0:90:b3:05:7e:0a:f2:dd:07:66:
29:1a:36:2e:45:d8:33:aa:89:64:41:40:96:65:05:
54:c8:81:01:b6:d9:31:c6:76:05:71:81:16:86:3b:
7f:77:ff:60:68:22:34:27:f7:06:41:5c:e9:9e:d6:
de:0e:30:84:39:90:0d:57:f6:8e:82:a6:a4:80:96:
64:5e:2a:4f:7a:1c:c7:1b:c0:af:cb:e1:57:6d:15:
42:d3:7d:61:44:a9:5c:4b:1a:53:82:8b:f7:33:16:
df:aa:f4:6f:aa:41:ca:15:a1:6c:55:47:27:bd:af:
6d:8a:2e:c5:ff:62:44:bf:12:96:3e:08:0c:ec:28:
89:f7:ef:01:19:0c:2d:1d:83:e5:db:40:f8:d7:2c:
28:9b:56:8a:07:1a:84:8a:3b:c7:11:37:9e:d7:00:
90:2f:82:62:c8:e2:bb:2d:e8:14:a3:1a:ba:fb:cb:
8f:d0:e3:84:32:d1:5a:71:a9:12:b9:26:73:77:6a:
10:23:70:43:2b:b2:66:9c:7e:d5:19:64:3c:13:1b:
30:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F0:AD:10:A6:20:69:EF:13:9A:3A:46:B7:32:F3:1D:C1:1B:29:FC
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137352e302f32342d3234203d3e2037323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.175.0/24
Signature Algorithm: sha256WithRSAEncryption
75:fe:f6:4c:0b:c8:a8:1e:95:fc:dd:e9:a4:90:1f:6c:53:d9:
d8:dc:a1:4b:0e:9a:71:c1:14:cb:6f:4a:50:c9:df:ea:7a:df:
83:5b:4e:3c:b9:bd:87:90:21:fc:a7:87:4d:83:f9:b4:8f:51:
8c:cb:1e:52:3e:26:ef:62:09:91:16:88:b1:b2:b9:a8:92:98:
cb:05:e9:c9:06:db:25:75:ed:2b:a3:46:cd:a2:5d:1e:6e:e2:
4f:02:48:53:1a:83:0b:48:ff:b9:f2:b5:67:b9:91:01:c1:8e:
4f:7b:5f:98:a9:cf:ab:02:d1:3c:dc:88:6e:35:98:06:2e:ee:
81:2f:59:24:e8:22:78:ab:2b:e9:63:42:0e:36:75:df:3f:a9:
92:2e:9c:99:4a:01:70:8b:37:17:d4:a4:84:8c:f0:99:11:2b:
18:85:57:80:57:9e:2c:9e:07:28:5a:d4:e6:54:63:f9:68:7d:
51:61:76:60:04:54:2e:5b:33:5d:9c:57:d4:d0:3a:08:99:e9:
40:db:0e:7d:55:bf:1f:5a:76:1c:af:0d:bb:30:60:fc:73:50:
17:6d:ce:05:be:00:3f:45:de:08:8d:a6:7d:ad:29:54:aa:91:
49:9c:cc:37:16:5f:e5:c2:29:99:32:1d:7d:ba:75:bc:be:ab:
74:e1:d3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:20:45 2026 by rpki-client