Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32342d3234203d3e203430363736.roa
File: 3130392e3131302e3137362e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier: /b8pZcxFFx0ObR0eqcg7ROWNH1zTW6EFFoiE6E1j/Yw=
Subject key identifier: 6F:6B:25:6A:88:F5:02:E1:C8:78:C2:22:93:EC:85:19:0A:26:1E:49
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 442D2B7BA92B2543AB62CBEB6C6512896F64F9A8
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32342d3234203d3e203430363736.roa
Signing time: Thu 12 Nov 2026 21:41:39 +0000
ROA not before: Thu 12 Nov 2026 21:36:39 +0000
ROA not after: Thu 11 Nov 2027 21:41:39 +0000
asID: 40676
IP address blocks: 109.110.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:2d:2b:7b:a9:2b:25:43:ab:62:cb:eb:6c:65:12:89:6f:64:f9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Nov 12 21:36:39 2026 GMT
Not After : Nov 11 21:41:39 2027 GMT
Subject: CN=6F6B256A88F502E1C878C22293EC85190A261E49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a9:30:fc:78:fb:01:2e:6c:02:00:d3:0a:77:
2d:ae:33:8c:6d:44:b6:51:b1:e9:48:c6:09:f0:d9:
05:b8:8e:39:54:02:f5:8c:ff:84:8a:e9:8d:9c:df:
08:b5:7c:33:f5:ff:ce:3d:bc:9c:49:ad:af:d4:36:
ed:86:00:5b:a8:cb:d0:5e:88:90:36:23:56:9f:40:
02:db:66:f0:be:36:2f:40:c4:a8:79:0e:70:6d:f3:
51:42:ef:41:6f:48:80:cd:3c:fa:19:b8:90:0a:e6:
5a:2f:f7:43:4c:28:65:5f:ad:a6:c2:c6:4e:b7:d2:
6b:1a:5d:b5:f8:41:5b:80:d2:8c:77:13:04:1e:01:
fa:d0:f9:ec:14:85:dc:84:a8:fd:7c:35:aa:d6:9e:
63:40:b7:e0:ec:e0:80:6c:85:5f:cc:d7:39:fa:b7:
38:d2:0e:92:38:2a:a3:fd:64:92:3f:23:6d:bf:ba:
06:31:56:d3:fb:fe:fb:99:2e:47:b1:a3:03:72:b1:
f6:f8:1d:71:56:6d:ff:81:41:c2:ed:30:13:c1:c0:
b3:d2:eb:94:56:4e:fb:48:94:20:42:da:23:ae:5c:
76:10:06:de:fa:81:18:2c:d7:8d:0f:1a:cd:11:76:
52:c1:dc:88:3d:aa:c9:e7:3e:09:c1:83:6a:02:ce:
f3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6B:25:6A:88:F5:02:E1:C8:78:C2:22:93:EC:85:19:0A:26:1E:49
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32342d3234203d3e203430363736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.176.0/24
Signature Algorithm: sha256WithRSAEncryption
85:ab:04:b2:e4:5e:24:d8:41:f0:d4:61:96:74:0d:b3:ce:0c:
2b:e1:45:00:87:08:13:96:02:46:28:4a:ab:9c:8c:40:6b:35:
62:2a:a7:e1:74:24:60:4b:1d:0d:86:18:1c:70:11:56:05:a9:
ba:0a:0e:44:df:e0:f1:bf:dc:fe:70:95:90:ba:66:a1:ac:b5:
75:38:46:27:cd:76:7e:c8:90:70:0d:fb:59:1f:52:01:ec:d8:
87:f1:13:14:a1:cc:d2:51:29:d6:6a:35:64:e1:6a:54:81:e0:
f8:73:58:e4:df:fe:be:c6:fb:67:a0:05:64:6d:03:93:19:41:
7e:c4:09:b2:d9:f7:a8:9c:23:cc:9a:19:af:37:6d:51:b4:ba:
80:a1:c2:41:7a:e2:d1:ec:8f:06:a7:0e:62:86:85:0f:f5:1e:
44:83:2a:31:c9:fa:8b:64:ee:21:6e:66:b8:4b:ae:92:c7:f9:
6a:ad:88:92:32:3e:6d:1a:0e:be:ad:45:f2:15:ba:1f:cb:b9:
77:3a:16:77:31:bd:67:17:5f:64:ad:82:1d:ae:6a:c0:b1:03:
aa:30:da:0b:86:d9:bc:d3:07:3b:2e:c8:0c:07:6e:c1:4d:6d:
f7:af:18:91:e5:ce:52:0d:b9:73:8d:8b:d4:47:e1:70:3d:b1:
32:fd:83:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:57:26 2026 by rpki-client