Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138332e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3138332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: yPO3wB/YpGX3f+oPmvnkPcGibbAaFUY0Y4bTGnE5t98=
Subject key identifier: 0A:66:28:D5:8D:35:05:95:C8:73:FF:42:ED:BD:0F:02:CA:8A:B8:E8
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 575C5B0161F3AFEE9CA8A8AE07C9EF34D89C880A
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138332e302f32342d3234203d3e20383334.roa
Signing time: Fri 08 May 2026 09:10:30 +0000
ROA not before: Fri 08 May 2026 09:05:30 +0000
ROA not after: Fri 07 May 2027 09:10:30 +0000
asID: 834
IP address blocks: 109.110.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:5c:5b:01:61:f3:af:ee:9c:a8:a8:ae:07:c9:ef:34:d8:9c:88:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: May 8 09:05:30 2026 GMT
Not After : May 7 09:10:30 2027 GMT
Subject: CN=0A6628D58D350595C873FF42EDBD0F02CA8AB8E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:09:2a:8d:05:07:4c:cb:43:72:5c:11:1c:b7:
b8:e8:4e:5a:10:ee:b7:d4:6b:ac:11:26:2c:5c:78:
7e:35:fb:9f:b6:5d:1e:8d:23:00:ce:41:d3:e5:18:
6e:0a:a7:77:66:00:da:6a:f9:84:19:f4:2c:85:b7:
ab:27:9f:46:b0:10:45:f6:41:ad:fc:9d:c8:c6:f0:
f0:92:e7:61:79:bb:d7:39:95:f8:02:3b:2e:58:c4:
98:4d:72:35:0d:c2:80:91:27:22:1e:fa:84:6a:35:
8a:cd:07:cb:fc:65:c6:cb:39:d5:52:75:f8:9b:3e:
aa:54:cf:81:44:c4:a5:bd:25:bd:34:8d:74:1e:e1:
56:f3:15:e4:a2:74:fd:40:85:22:1a:55:5b:0c:8d:
78:25:dc:4d:cd:2f:db:cc:9c:2d:3f:1a:c6:63:a4:
8a:40:1f:36:cd:17:aa:48:47:39:4e:b8:d6:79:a6:
14:a3:d8:c2:b8:25:75:02:86:0b:de:87:49:e3:ce:
e6:d2:4f:ab:2a:22:5c:1e:e9:52:3a:00:4c:15:d9:
0a:11:c1:a2:41:c4:17:64:cf:86:c9:d8:33:4d:24:
de:15:0c:45:38:fd:97:c0:97:46:64:d4:1f:ff:61:
ec:b1:66:fe:64:e1:54:e8:14:11:29:da:a0:ac:cd:
48:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:66:28:D5:8D:35:05:95:C8:73:FF:42:ED:BD:0F:02:CA:8A:B8:E8
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.183.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:66:0f:95:d7:3f:0e:ce:66:de:a6:a4:13:09:2d:c1:d8:91:
10:f5:34:c3:49:0c:ef:01:f2:d4:da:8d:1c:1d:96:71:96:4b:
10:c9:74:ed:1a:ad:dc:32:b5:ef:e0:bd:4a:b7:33:c2:28:a0:
c8:aa:ef:80:5e:02:9f:33:a8:c7:1e:b5:48:36:41:05:8d:da:
db:07:1a:4a:1f:82:1d:e5:4d:68:56:e4:e0:64:b7:c0:3b:85:
c2:fb:de:6b:4d:5c:77:13:90:61:6d:04:de:c4:66:ed:23:12:
4b:4b:a5:50:16:5d:2c:9a:5a:ac:85:2f:d6:32:d2:47:82:7c:
f8:57:fd:d4:35:55:a1:d8:74:f1:c7:9c:93:69:f1:49:a2:f7:
e4:7f:41:0a:3d:83:f5:56:df:7e:25:7c:86:c4:83:66:c0:a5:
84:0d:8d:d1:f0:c8:e9:d1:53:80:90:57:81:ce:af:1b:e6:6d:
01:8a:61:36:98:96:19:c6:38:b5:b8:1c:f8:c9:d2:60:f9:99:
3d:08:80:63:06:fe:be:99:42:1e:0b:ac:2e:92:4e:d3:1c:a5:
8d:3f:b0:26:da:e5:1d:48:f7:d8:48:88:9b:f6:13:b9:e3:b5:
8e:2a:ce:7e:62:54:94:8a:f8:e6:12:9a:61:49:ea:2c:28:4a:
8d:1d:00:e0
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUV1xbAWHzr+6cqKiuB8nvNNiciAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNjA1MDgwOTA1MzBaFw0yNzA1MDcwOTEwMzBaMDMxMTAvBgNV
BAMTKDBBNjYyOEQ1OEQzNTA1OTVDODczRkY0MkVEQkQwRjAyQ0E4QUI4RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSCSqNBQdMy0NyXBEct7joTloQ
7rfUa6wRJixceH41+5+2XR6NIwDOQdPlGG4Kp3dmANpq+YQZ9CyFt6snn0awEEX2
Qa38ncjG8PCS52F5u9c5lfgCOy5YxJhNcjUNwoCRJyIe+oRqNYrNB8v8ZcbLOdVS
dfibPqpUz4FExKW9Jb00jXQe4VbzFeSidP1AhSIaVVsMjXgl3E3NL9vMnC0/GsZj
pIpAHzbNF6pIRzlOuNZ5phSj2MK4JXUChgveh0njzubST6sqIlwe6VI6AEwV2QoR
waJBxBdkz4bJ2DNNJN4VDEU4/ZfAl0Zk1B//YeyxZv5k4VToFBEp2qCszUixAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUCmYo1Y01BZXIc/9C7b0PAsqKuOgwHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx
MzgzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG1u
tzANBgkqhkiG9w0BAQsFAAOCAQEAG2YPldc/Ds5m3qakEwktwdiREPU0w0kM7wHy
1NqNHB2WcZZLEMl07Rqt3DK17+C9SrczwiigyKrvgF4CnzOoxx61SDZBBY3a2wca
Sh+CHeVNaFbk4GS3wDuFwvvea01cdxOQYW0E3sRm7SMSS0ulUBZdLJparIUv1jLS
R4J8+Ff91DVVodh08ceck2nxSaL35H9BCj2D9VbffiV8hsSDZsClhA2N0fDI6dFT
gJBXgc6vG+ZtAYphNpiWGcY4tbgc+MnSYPmZPQiAYwb+vplCHgusLpJO0xyljT+w
JtrlHUj32EiIm/YTueO1jirOfmJUlIr45hKaYUnqLChKjR0A4A==
-----END CERTIFICATE-----
Generated at Wed May 13 03:09:27 2026 by rpki-client