Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138302e302f32342d3234203d3e2039333034.roa
File: 3130392e3131302e3138302e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: q1vD0njk+WLihHN8/O5Fbv30aeeIqpvXuntB+vmocOk=
Subject key identifier: 3E:FD:14:53:3B:F2:F5:F8:B4:36:F2:A7:C8:5E:EE:8B:60:14:12:1A
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 6CE70F1CC1502216FAE5D184DCE5CEAF01CDAD10
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138302e302f32342d3234203d3e2039333034.roa
Signing time: Fri 27 Jun 2025 17:43:09 +0000
ROA not before: Fri 27 Jun 2025 17:38:09 +0000
ROA not after: Fri 26 Jun 2026 17:43:09 +0000
asID: 9304
IP address blocks: 109.110.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:e7:0f:1c:c1:50:22:16:fa:e5:d1:84:dc:e5:ce:af:01:cd:ad:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jun 27 17:38:09 2025 GMT
Not After : Jun 26 17:43:09 2026 GMT
Subject: CN=3EFD14533BF2F5F8B436F2A7C85EEE8B6014121A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:67:4c:d5:6e:5d:68:c7:35:2b:52:a1:96:
57:64:2b:6b:ab:4d:9a:6a:66:79:2d:19:b4:a7:de:
77:45:0d:4b:3c:69:d8:22:50:52:eb:c9:fc:fe:b8:
a3:72:39:0d:1a:ab:b5:f0:62:41:79:8a:d9:9c:8e:
9e:ae:26:b4:b5:c2:b4:2d:d0:1e:a8:dd:e5:0e:cf:
66:a6:43:3d:7f:b0:66:dc:bf:0d:ec:3f:7a:44:cb:
8f:4d:be:21:fd:17:88:98:83:51:a0:3f:49:04:63:
f2:83:b5:9e:32:2b:4a:29:75:fa:9b:37:18:5f:83:
df:f1:c3:65:f1:7d:fb:87:68:5b:b0:2c:50:51:32:
ae:b4:d2:41:db:82:ec:a9:4f:0b:1f:ab:de:fe:c5:
6d:24:53:e8:79:dc:5d:9d:f1:df:5b:30:71:23:96:
b4:3b:25:27:49:91:18:52:8f:19:9f:5f:f2:6f:b1:
a3:47:b7:a9:50:77:45:44:1f:c6:6c:4a:86:8f:75:
4e:9c:30:c4:e1:44:77:5b:b5:51:91:fb:6b:3c:dd:
a9:d1:e3:fd:a1:25:7b:36:4d:1c:af:5b:74:23:5e:
0e:99:d1:29:94:e8:64:2f:81:3c:72:f7:cf:e5:fc:
92:3f:eb:3b:60:bc:45:e3:ab:01:f6:74:38:65:9a:
bb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FD:14:53:3B:F2:F5:F8:B4:36:F2:A7:C8:5E:EE:8B:60:14:12:1A
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138302e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.180.0/24
Signature Algorithm: sha256WithRSAEncryption
84:a3:ee:0c:1d:4c:5e:ef:88:8b:88:dc:d3:bb:c3:48:42:4f:
ae:b3:34:20:af:b3:7d:bd:c1:d1:94:8b:e8:23:35:0e:1b:c7:
5a:4d:69:4f:d8:4e:1c:83:c7:b4:78:e1:13:ee:85:b4:6a:5e:
32:7b:dc:bf:91:c6:5f:f7:0c:e9:8d:54:be:3c:57:b7:f2:c2:
eb:78:45:46:27:a7:f2:67:ee:45:24:99:57:ac:a9:0f:88:e0:
0e:98:fd:e3:c1:4d:bd:c7:ac:da:7e:9c:d6:84:b4:f8:77:0c:
7a:f0:23:24:2c:e9:d7:28:cf:96:00:b1:f7:a3:28:fd:68:d9:
c0:7d:93:4d:c8:f3:8d:b1:8a:6d:a6:70:15:f9:c3:a4:81:ab:
37:62:d8:25:0f:9f:59:17:89:a3:c0:55:a3:2a:4e:36:77:d2:
31:12:83:92:be:85:02:00:f0:10:84:c1:9d:e3:f5:c9:da:46:
9f:2e:a2:f6:95:9e:6e:02:10:a2:a5:ad:05:5b:a7:42:8c:f2:
3f:fb:02:b8:bc:61:c2:a6:78:5c:28:f5:12:5a:19:03:51:e0:
9b:a6:9f:79:f9:bf:eb:c7:bd:8d:5f:a5:d6:ae:89:74:73:36:
8b:aa:31:a7:4e:ab:14:ac:c0:69:17:bf:e9:3f:f4:11:d8:cb:
f9:87:e8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:30:52 2025 by rpki-client