Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138332e302f32342d3234203d3e203634323637.roa
File: 3130392e3131302e3138332e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier: MGkCu2D4EPuPWYRIvcmw/0b+nUazJR4lgdpils7BWTI=
Subject key identifier: 44:16:F8:A2:59:92:8D:3E:38:D7:82:89:4E:FF:28:E5:13:51:2F:51
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 10E01148AB0010AFE4982C6E22C1B1D85B1BBF0F
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138332e302f32342d3234203d3e203634323637.roa
Signing time: Thu 14 Aug 2025 19:54:13 +0000
ROA not before: Thu 14 Aug 2025 19:49:13 +0000
ROA not after: Thu 13 Aug 2026 19:54:13 +0000
asID: 64267
IP address blocks: 109.110.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:e0:11:48:ab:00:10:af:e4:98:2c:6e:22:c1:b1:d8:5b:1b:bf:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Aug 14 19:49:13 2025 GMT
Not After : Aug 13 19:54:13 2026 GMT
Subject: CN=4416F8A259928D3E38D782894EFF28E513512F51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:12:4a:0a:e1:2d:17:4f:cb:a8:75:3b:e3:bd:
09:84:67:33:b6:11:11:72:b8:3e:21:33:e2:b7:ef:
c9:a6:ab:df:83:4d:95:0c:5c:a3:91:79:5e:26:da:
8c:18:0b:66:6c:3e:ae:f1:71:2f:64:e5:2f:a5:a4:
2d:38:06:4d:6a:84:f0:dd:3a:fa:ed:1c:9c:b7:fc:
df:67:e6:65:be:35:31:3a:bf:5c:06:a4:09:4b:8a:
a6:00:69:08:57:90:75:00:fe:68:d4:22:7c:93:fc:
16:59:b0:dc:5d:84:09:cc:0f:76:48:04:87:fd:4c:
e0:79:b2:59:01:09:4a:c7:08:83:06:97:58:91:62:
7e:d1:4f:19:70:27:19:19:22:30:c5:eb:54:df:dc:
72:dc:6c:fd:63:5d:a8:95:5c:7c:25:f7:aa:94:fe:
8b:82:02:58:3b:7f:b8:b0:1d:77:64:36:8b:a6:78:
35:fe:2c:47:cc:90:ad:03:0f:f4:ae:a4:e2:c7:16:
a3:d8:40:20:e6:ca:a9:88:a0:4f:a9:f4:0d:2a:42:
65:fa:d0:04:f8:07:ff:63:24:05:5d:ec:04:0e:4d:
9f:b7:ff:bd:b4:b6:0c:c2:43:ba:b9:ca:f8:56:28:
51:5f:3c:4c:44:1b:24:0f:42:1c:ab:ac:c6:31:0f:
4c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:16:F8:A2:59:92:8D:3E:38:D7:82:89:4E:FF:28:E5:13:51:2F:51
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138332e302f32342d3234203d3e203634323637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.183.0/24
Signature Algorithm: sha256WithRSAEncryption
23:b6:6f:c5:38:7e:00:5d:9f:60:06:f1:99:14:4d:62:55:7a:
ca:54:09:9d:e1:c0:bf:0f:78:c6:40:cb:69:12:66:e2:1c:f0:
49:00:90:1e:c4:88:7b:33:73:1f:fe:f6:8b:37:3e:dc:ec:f1:
58:40:2d:b2:e2:70:e3:d1:fb:65:2b:07:22:fb:ab:14:8c:b1:
f3:d5:54:39:05:72:f7:69:25:49:f6:9c:5b:83:e4:40:8b:5c:
3e:06:f0:9f:4d:bb:35:0a:7c:8a:ee:3a:7b:89:f5:83:f6:19:
f5:16:43:4b:ba:45:74:5d:c0:5f:6c:d5:51:b4:58:62:25:53:
29:b5:74:e4:cc:4e:99:9b:5d:8c:f1:e1:b7:ee:d5:88:2d:cf:
07:ec:70:01:16:86:7b:cd:50:49:d4:39:f1:8b:a6:05:21:f4:
fc:d3:f5:5f:cf:b5:b6:b3:bc:31:0e:a2:57:8c:a0:6b:a8:ed:
a5:f2:1e:1b:44:2d:6f:fa:50:91:8d:9d:f8:7f:d2:0d:15:9c:
2d:45:51:12:2f:f0:00:d8:5e:f3:b0:ac:7a:30:81:2c:a9:84:
c5:69:be:eb:aa:bf:70:ff:76:1e:61:4f:c2:5e:23:bd:0c:45:
4e:ba:33:a7:80:c3:d0:f3:75:b6:cf:83:91:6d:8c:48:24:65:
b8:b0:9b:7c
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUEOARSKsAEK/kmCxuIsGx2Fsbvw8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNTA4MTQxOTQ5MTNaFw0yNjA4MTMxOTU0MTNaMDMxMTAvBgNV
BAMTKDQ0MTZGOEEyNTk5MjhEM0UzOEQ3ODI4OTRFRkYyOEU1MTM1MTJGNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVEkoK4S0XT8uodTvjvQmEZzO2
ERFyuD4hM+K378mmq9+DTZUMXKOReV4m2owYC2ZsPq7xcS9k5S+lpC04Bk1qhPDd
OvrtHJy3/N9n5mW+NTE6v1wGpAlLiqYAaQhXkHUA/mjUInyT/BZZsNxdhAnMD3ZI
BIf9TOB5slkBCUrHCIMGl1iRYn7RTxlwJxkZIjDF61Tf3HLcbP1jXaiVXHwl96qU
/ouCAlg7f7iwHXdkNoumeDX+LEfMkK0DD/SupOLHFqPYQCDmyqmIoE+p9A0qQmX6
0AT4B/9jJAVd7AQOTZ+3/720tgzCQ7q5yvhWKFFfPExEGyQPQhyrrMYxD0y7AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQURBb4olmSjT4414KJTv8o5RNRL1EwHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx
MzgzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzQzMjM2Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABtbrcwDQYJKoZIhvcNAQELBQADggEBACO2b8U4fgBdn2AG8ZkUTWJVespUCZ3h
wL8PeMZAy2kSZuIc8EkAkB7EiHszcx/+9os3Ptzs8VhALbLicOPR+2UrByL7qxSM
sfPVVDkFcvdpJUn2nFuD5ECLXD4G8J9NuzUKfIruOnuJ9YP2GfUWQ0u6RXRdwF9s
1VG0WGIlUym1dOTMTpmbXYzx4bfu1YgtzwfscAEWhnvNUEnUOfGLpgUh9PzT9V/P
tbazvDEOoleMoGuo7aXyHhtELW/6UJGNnfh/0g0VnC1FURIv8ADYXvOwrHowgSyp
hMVpvuuqv3D/dh5hT8JeI70MRU66M6eAw9DzdbbPg5FtjEgkZbiwm3w=
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:43:01 2025 by rpki-client