Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138302e302f32342d3234203d3e20313532363036.roa
File: 3130392e3131302e3138302e302f32342d3234203d3e20313532363036.roa (raw, json)
Hash identifier: vLZs/41qATN3/AyaM7YcxTNK+CxhtLzzo++jMEQyhgM=
Subject key identifier: 71:24:AD:7C:36:AE:B9:3B:50:AD:11:6C:FF:A0:3B:7F:2A:FE:B3:FF
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 0E5C009163E99037DCB4456E40601B649491F4D0
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138302e302f32342d3234203d3e20313532363036.roa
Signing time: Wed 28 Oct 2026 11:11:29 +0000
ROA not before: Wed 28 Oct 2026 11:06:29 +0000
ROA not after: Wed 27 Oct 2027 11:11:29 +0000
asID: 152606
IP address blocks: 109.110.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:5c:00:91:63:e9:90:37:dc:b4:45:6e:40:60:1b:64:94:91:f4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Oct 28 11:06:29 2026 GMT
Not After : Oct 27 11:11:29 2027 GMT
Subject: CN=7124AD7C36AEB93B50AD116CFFA03B7F2AFEB3FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fa:ac:45:68:8a:3d:54:24:ff:82:e0:e9:ec:
d9:f1:72:3c:55:89:7b:58:c5:3e:ec:2d:f5:ff:84:
ed:ef:ec:d2:dc:24:5a:c5:af:92:48:b4:38:88:86:
85:35:d8:65:5d:3e:27:54:d7:90:7c:e3:d1:6f:ba:
38:8d:b9:45:36:67:75:49:42:d7:ff:0a:33:0d:8a:
87:5e:c9:d4:e4:d7:57:f4:81:cb:78:c1:f7:63:85:
1a:06:7f:52:23:36:5a:d3:d4:e4:14:7f:fa:71:3c:
f4:a1:af:de:75:b7:c0:41:c4:34:41:e9:3c:85:9c:
69:6f:b6:60:fd:9c:1e:7f:fa:2d:69:4c:e4:1f:91:
b8:f2:ed:ab:a2:ec:79:03:67:83:7c:ea:36:50:2c:
d3:14:25:a4:01:90:e2:20:41:00:f3:20:c5:9b:e2:
17:84:d2:83:bb:72:57:b9:cb:ab:8b:a6:bf:7f:6e:
91:7d:44:a9:36:a4:a9:5f:dc:13:d6:e5:ef:27:4e:
ae:81:a2:9b:ec:0b:c4:5d:2e:50:dc:c4:9e:e6:95:
3b:80:73:a4:be:9c:8e:1e:2d:2e:46:c2:28:9b:7b:
2a:27:f5:7b:fa:a3:80:69:68:69:99:54:ba:36:bd:
1d:32:8a:b0:ad:6d:53:56:cb:15:97:8d:0d:a2:b7:
5e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:24:AD:7C:36:AE:B9:3B:50:AD:11:6C:FF:A0:3B:7F:2A:FE:B3:FF
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138302e302f32342d3234203d3e20313532363036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.180.0/24
Signature Algorithm: sha256WithRSAEncryption
52:6e:a3:96:f3:72:06:d9:5b:3a:41:62:f1:4d:51:0e:57:9d:
88:2f:fd:ad:5e:64:78:18:57:78:18:df:4a:f8:21:6f:28:e9:
f9:6f:b8:b2:76:19:a5:b5:39:87:cc:e7:ef:16:86:fa:92:7e:
bd:0b:e2:f8:e4:70:c4:fd:c2:35:4c:c8:8e:23:2a:46:28:07:
4b:a3:48:f0:69:26:77:63:e0:09:ba:22:86:42:b7:5c:94:f3:
99:4c:30:50:75:9a:f3:58:3c:2b:3a:be:e4:ce:57:63:7b:24:
ae:51:d0:16:43:87:85:40:33:47:04:fd:d7:15:6e:18:b5:46:
3c:52:ed:82:43:56:59:f3:58:73:9e:13:33:0b:98:72:2e:34:
f3:ff:6f:72:93:fc:95:94:f3:bd:3b:d0:33:5b:02:52:85:44:
d1:a5:97:c4:e8:91:43:3e:f4:ad:6a:31:f4:bf:48:ee:1b:a0:
28:3a:29:89:0e:52:46:70:01:42:da:01:39:d8:dd:d2:98:95:
93:fe:50:d9:34:be:fe:25:81:e1:2d:db:f4:58:b8:60:ae:da:
ba:ba:c4:64:c6:18:a5:53:90:ff:24:09:1b:5d:bf:5c:b9:ec:
25:49:28:2f:dd:1c:f4:49:3d:a1:d8:4a:3d:84:03:c0:11:4f:
08:29:0a:b7
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUDlwAkWPpkDfctEVuQGAbZJSR9NAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNjEwMjgxMTA2MjlaFw0yNzEwMjcxMTExMjlaMDMxMTAvBgNV
BAMTKDcxMjRBRDdDMzZBRUI5M0I1MEFEMTE2Q0ZGQTAzQjdGMkFGRUIzRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ+qxFaIo9VCT/guDp7NnxcjxV
iXtYxT7sLfX/hO3v7NLcJFrFr5JItDiIhoU12GVdPidU15B849FvujiNuUU2Z3VJ
Qtf/CjMNiodeydTk11f0gct4wfdjhRoGf1IjNlrT1OQUf/pxPPShr951t8BBxDRB
6TyFnGlvtmD9nB5/+i1pTOQfkbjy7aui7HkDZ4N86jZQLNMUJaQBkOIgQQDzIMWb
4heE0oO7cle5y6uLpr9/bpF9RKk2pKlf3BPW5e8nTq6BopvsC8RdLlDcxJ7mlTuA
c6S+nI4eLS5Gwiibeyon9Xv6o4BpaGmZVLo2vR0yirCtbVNWyxWXjQ2it14zAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUcSStfDauuTtQrRFs/6A7fyr+s/8wHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx
MzgzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMjM2MzAzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAG1utDANBgkqhkiG9w0BAQsFAAOCAQEAUm6jlvNyBtlbOkFi8U1RDlediC/9
rV5keBhXeBjfSvghbyjp+W+4snYZpbU5h8zn7xaG+pJ+vQvi+ORwxP3CNUzIjiMq
RigHS6NI8Gkmd2PgCboihkK3XJTzmUwwUHWa81g8Kzq+5M5XY3skrlHQFkOHhUAz
RwT91xVuGLVGPFLtgkNWWfNYc54TMwuYci408/9vcpP8lZTzvTvQM1sCUoVE0aWX
xOiRQz70rWox9L9I7hugKDopiQ5SRnABQtoBOdjd0piVk/5Q2TS+/iWB4S3b9Fi4
YK7aurrEZMYYpVOQ/yQJG12/XLnsJUkoL90c9Ek9odhKPYQDwBFPCCkKtw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:01:26 2026 by rpki-client