Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137372e302f32342d3234203d3e203430363736.roa
File: 3130392e3131302e3137372e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier: gF5ydEOUy+Kir4x6HjtDD+xVi8Huj0QXSrdazrD20mg=
Subject key identifier: 05:DA:0C:D7:46:D6:90:EA:9C:7C:EB:6C:DA:5B:DE:C2:D3:CC:EC:46
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 681974545F8FE013C214A2305E7A3F951BDCA284
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137372e302f32342d3234203d3e203430363736.roa
Signing time: Sat 14 Nov 2026 01:33:17 +0000
ROA not before: Sat 14 Nov 2026 01:28:17 +0000
ROA not after: Sat 13 Nov 2027 01:33:17 +0000
asID: 40676
IP address blocks: 109.110.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:19:74:54:5f:8f:e0:13:c2:14:a2:30:5e:7a:3f:95:1b:dc:a2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Nov 14 01:28:17 2026 GMT
Not After : Nov 13 01:33:17 2027 GMT
Subject: CN=05DA0CD746D690EA9C7CEB6CDA5BDEC2D3CCEC46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:64:2b:ed:6f:30:f1:46:84:db:25:3e:9a:
2d:64:e1:50:a0:fa:7f:70:3a:c5:c6:8f:ed:66:e9:
0f:ae:c3:e6:e8:a6:7e:cb:6a:77:92:bc:61:71:e4:
18:f3:b6:c4:99:5d:4a:9b:74:3a:b3:e2:0d:50:da:
6c:cf:a2:ae:f7:14:86:83:37:5c:95:dc:c8:0f:75:
88:81:d6:4b:15:c3:a2:9b:45:6b:3a:01:ca:c7:1b:
ab:f4:eb:31:dd:ca:4a:8f:5a:15:fb:dd:f9:32:ca:
bf:a4:44:c8:85:1a:ce:7e:ea:19:9b:03:df:eb:09:
4e:30:d0:4c:5e:79:14:da:e2:46:c5:7d:08:6a:1d:
bd:d5:78:5b:c0:b0:81:9e:83:51:72:c8:57:1e:98:
f7:b4:d1:13:e4:08:a8:2a:0b:11:19:35:b8:78:88:
d7:b6:b1:c7:86:0a:2d:2d:dc:90:6d:eb:1a:2a:66:
ea:59:ef:d8:6a:d3:fc:22:2a:07:ca:cf:96:0a:c7:
86:4a:be:98:db:59:61:c8:02:22:47:5b:68:ce:46:
8c:2b:81:7e:43:e2:89:89:09:e0:91:ec:1f:77:12:
24:2f:54:4b:87:98:15:70:54:86:87:5c:e8:f0:2c:
05:3a:88:91:22:46:c8:91:e7:10:06:a9:35:94:38:
e8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DA:0C:D7:46:D6:90:EA:9C:7C:EB:6C:DA:5B:DE:C2:D3:CC:EC:46
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137372e302f32342d3234203d3e203430363736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.177.0/24
Signature Algorithm: sha256WithRSAEncryption
11:18:2e:5d:e0:7a:21:81:88:65:71:cc:84:0c:dc:c9:bd:c6:
33:3a:7b:da:2d:99:9a:ce:a5:ff:47:78:eb:1c:f1:28:9a:96:
c6:53:2d:1d:66:ef:fd:ec:a3:c6:32:08:fa:e9:dc:03:a9:3a:
8e:98:39:0e:f7:ae:68:18:c9:ad:2f:a8:da:c4:d6:73:0e:9d:
14:79:43:e2:e8:12:27:e4:d6:df:5f:ed:92:eb:81:3e:33:be:
57:dc:19:c1:ab:7d:c0:7d:b7:9e:72:65:b2:67:d2:36:47:dd:
cc:c1:68:8a:a8:84:47:aa:48:c5:29:41:48:a6:0e:27:77:55:
8f:f4:85:0a:b9:00:68:10:dd:97:d4:f3:2c:6c:8c:c7:24:84:
12:68:41:b6:46:78:27:48:dd:79:87:22:ba:3b:e7:84:4c:b3:
f2:b7:59:9d:f6:33:59:29:22:4f:6a:15:12:da:45:7f:62:4b:
37:37:58:26:73:eb:5f:94:96:dc:ea:89:27:09:61:88:03:30:
5a:1c:ab:d4:49:15:5b:e5:ea:f1:4f:e5:9d:c7:b5:bd:e0:9b:
f5:e3:36:48:18:1f:56:dd:90:c7:cc:a9:9e:fc:b5:f2:7f:f4:
d1:0f:1b:49:ed:e8:34:e7:eb:9c:9b:a4:2d:84:d9:fe:4f:ef:
5f:14:ac:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:57:23 2026 by rpki-client