Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32342d3234203d3e203231383539.roa
File: 3130392e3131302e3137362e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: ois7Ge6C7oubLMTNXlIneX0Yuy83iprrhU2jadmXW60=
Subject key identifier: 83:8B:17:1C:E4:F1:D2:39:A8:CD:EA:E3:07:16:3A:1C:51:6D:B4:C4
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 277B3A625778A0A9F76219B33156E3DBC5C07304
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32342d3234203d3e203231383539.roa
Signing time: Tue 24 Jun 2025 05:36:28 +0000
ROA not before: Tue 24 Jun 2025 05:31:28 +0000
ROA not after: Tue 23 Jun 2026 05:36:28 +0000
asID: 21859
IP address blocks: 109.110.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:7b:3a:62:57:78:a0:a9:f7:62:19:b3:31:56:e3:db:c5:c0:73:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jun 24 05:31:28 2025 GMT
Not After : Jun 23 05:36:28 2026 GMT
Subject: CN=838B171CE4F1D239A8CDEAE307163A1C516DB4C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:83:92:b7:52:ce:f3:5c:80:e9:df:8d:0c:68:
24:9a:41:bb:28:db:1a:bc:33:37:56:1d:eb:af:a1:
b0:d9:36:b3:ea:21:cc:24:95:fe:10:34:1b:01:33:
db:a4:0a:0b:6e:d2:69:19:ee:51:0e:39:86:19:c3:
43:18:c5:80:7d:68:09:d4:41:2b:b5:de:06:81:c5:
1e:64:44:e2:e3:05:81:10:ee:7c:b8:f7:15:da:26:
6a:aa:77:fa:ee:56:5a:12:a9:54:fb:0a:c6:69:a5:
5a:bc:c0:ba:c3:d9:32:72:0b:a0:39:b6:9a:d9:44:
9c:e4:b4:57:6c:3f:2b:3e:19:2b:f9:48:09:31:e6:
56:a0:af:86:ef:2c:ae:ca:82:53:f4:89:ce:c9:1f:
1b:7b:51:8d:be:7b:4f:22:5b:7f:26:35:a3:a4:fc:
71:dd:da:b9:70:40:b9:e1:5c:77:14:a3:24:d4:b4:
d5:2b:af:aa:17:52:67:5e:7e:cd:05:e6:62:aa:cc:
7a:1b:5e:e4:90:c2:65:90:56:db:86:d5:84:00:b7:
c2:80:13:b0:45:75:47:32:24:ef:c8:bc:43:f0:69:
67:2f:fb:b6:c8:f6:0d:c6:f4:5e:28:71:80:fa:7e:
60:a1:2d:15:29:2d:32:0e:dc:86:b6:29:d9:6c:d3:
5b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8B:17:1C:E4:F1:D2:39:A8:CD:EA:E3:07:16:3A:1C:51:6D:B4:C4
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.176.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:6a:17:c7:f4:56:4b:36:9d:84:b4:97:74:90:0e:52:21:81:
7b:eb:85:ca:40:3a:f6:e8:05:6c:04:c2:71:f4:9a:aa:c3:c1:
b5:09:b4:dd:bc:e6:89:10:41:f1:a5:9c:b2:39:13:99:f4:6c:
0b:f1:b1:9a:33:95:4a:d1:02:e7:a9:8b:8f:01:ef:15:e3:06:
66:d7:9c:4d:5b:cc:d9:c6:27:39:51:0e:bc:03:9d:cf:57:21:
57:91:eb:18:f1:46:6e:ff:21:27:d9:1a:5b:80:85:6a:8d:d0:
62:cc:04:ba:28:cb:ae:64:89:07:bf:64:d5:1c:ce:5f:33:0f:
13:f3:7f:f0:7f:3c:81:ff:aa:a7:0e:8f:14:ea:27:2f:e8:4f:
4e:cf:41:7a:c5:ae:e8:4f:5b:f9:f2:cb:86:bb:24:b2:c3:50:
0f:f8:8a:75:2b:27:d1:87:7a:51:2a:59:71:f6:da:dc:82:a7:
bb:65:eb:42:c7:eb:37:bc:2e:22:1b:7c:ea:c9:ab:17:78:27:
a7:45:ea:32:94:72:83:66:c1:52:fa:15:c7:33:5e:f6:bd:de:
42:dd:2f:0a:34:02:30:03:41:75:17:b8:fb:9a:d0:22:8f:a3:
6e:28:a0:d0:ca:87:a7:7d:7a:b2:d1:5e:06:b4:78:2a:13:8e:
7c:3d:bf:82
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUJ3s6Yld4oKn3YhmzMVbj28XAcwQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNTA2MjQwNTMxMjhaFw0yNjA2MjMwNTM2MjhaMDMxMTAvBgNV
BAMTKDgzOEIxNzFDRTRGMUQyMzlBOENERUFFMzA3MTYzQTFDNTE2REI0QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOg5K3Us7zXIDp340MaCSaQbso
2xq8MzdWHeuvobDZNrPqIcwklf4QNBsBM9ukCgtu0mkZ7lEOOYYZw0MYxYB9aAnU
QSu13gaBxR5kROLjBYEQ7ny49xXaJmqqd/ruVloSqVT7CsZppVq8wLrD2TJyC6A5
tprZRJzktFdsPys+GSv5SAkx5lagr4bvLK7KglP0ic7JHxt7UY2+e08iW38mNaOk
/HHd2rlwQLnhXHcUoyTUtNUrr6oXUmdefs0F5mKqzHobXuSQwmWQVtuG1YQAt8KA
E7BFdUcyJO/IvEPwaWcv+7bI9g3G9F4ocYD6fmChLRUpLTIO3Ia2Kdls01uDAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUg4sXHOTx0jmozerjBxY6HFFttMQwHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx
MzczNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzODM1Mzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABtbrAwDQYJKoZIhvcNAQELBQADggEBAJ9qF8f0Vks2nYS0l3SQDlIhgXvrhcpA
OvboBWwEwnH0mqrDwbUJtN285okQQfGlnLI5E5n0bAvxsZozlUrRAuepi48B7xXj
BmbXnE1bzNnGJzlRDrwDnc9XIVeR6xjxRm7/ISfZGluAhWqN0GLMBLooy65kiQe/
ZNUczl8zDxPzf/B/PIH/qqcOjxTqJy/oT07PQXrFruhPW/nyy4a7JLLDUA/4inUr
J9GHelEqWXH22tyCp7tl60LH6ze8LiIbfOrJqxd4J6dF6jKUcoNmwVL6FcczXva9
3kLdLwo0AjADQXUXuPua0CKPo24ooNDKh6d9erLRXga0eCoTjnw9v4I=
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:25:08 2025 by rpki-client