Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138352e302f32342d3234203d3e20323133393632.roa
File: 3130392e3131302e3138352e302f32342d3234203d3e20323133393632.roa (raw, json)
Hash identifier: 3vokKf1R9lq63ufs+yloAGjZUPLtv+JwWkRVIO5pII0=
Subject key identifier: B2:12:21:27:BE:5B:95:60:0B:D0:39:79:35:CC:52:41:27:E7:54:B5
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 3024F58B275D2A4B82A46A8E1293D19D2B179B4B
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138352e302f32342d3234203d3e20323133393632.roa
Signing time: Thu 19 Mar 2026 16:46:49 +0000
ROA not before: Thu 19 Mar 2026 16:41:49 +0000
ROA not after: Thu 18 Mar 2027 16:46:49 +0000
asID: 213962
IP address blocks: 109.110.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:24:f5:8b:27:5d:2a:4b:82:a4:6a:8e:12:93:d1:9d:2b:17:9b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Mar 19 16:41:49 2026 GMT
Not After : Mar 18 16:46:49 2027 GMT
Subject: CN=B2122127BE5B95600BD0397935CC524127E754B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f8:d7:fd:71:09:34:03:0c:13:49:8e:fb:7c:
6b:8c:dc:1a:80:2b:fe:24:f3:8b:ca:f9:21:b4:62:
bd:89:4b:12:3a:bc:a4:f3:ac:ca:7f:3f:25:80:af:
34:61:ed:9d:8d:b8:c1:a4:49:45:8c:59:a2:da:ff:
4f:6a:ba:d0:54:81:7b:a4:3a:e5:66:85:82:8f:b5:
bb:8a:fc:16:7c:07:6d:93:2b:55:1c:58:40:5b:41:
e7:15:10:d7:af:74:a5:ab:f5:7d:b7:a5:ad:dc:72:
2e:37:d4:05:40:1f:a4:e0:57:0c:e1:27:14:dd:14:
17:68:79:cc:e4:15:b8:1d:2e:d2:00:64:6b:34:59:
78:db:cb:8b:0b:a5:9d:35:2a:ec:55:21:3d:2b:19:
60:ad:58:2b:31:f2:e5:2e:e2:77:b2:af:0f:28:62:
c3:00:99:1a:ef:f2:1c:33:8b:e4:de:f7:7d:76:ea:
29:b2:c4:b6:d8:62:fe:e9:c2:7f:e6:70:47:b3:0a:
d5:df:14:e5:11:86:10:1c:b2:c0:06:9d:98:16:4e:
ed:ed:8c:f5:ac:50:e7:fe:67:94:0c:7b:80:33:16:
ac:55:87:50:da:7b:48:56:b1:e9:2e:be:f0:bb:88:
3c:c8:3a:d2:ce:3b:70:b4:07:a8:9f:b2:c4:c5:51:
57:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:12:21:27:BE:5B:95:60:0B:D0:39:79:35:CC:52:41:27:E7:54:B5
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138352e302f32342d3234203d3e20323133393632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.185.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:5e:20:ae:50:91:87:db:fa:2d:dc:fb:08:03:31:5e:cc:af:
8a:f4:5b:79:00:b1:a0:e3:39:40:fe:66:99:ba:2f:39:14:c8:
65:01:e6:ba:ca:af:50:02:15:58:db:09:3d:77:6b:40:0f:c0:
f5:79:d3:9d:1b:8a:c9:0d:16:3f:a5:c2:c2:77:1f:13:6c:16:
31:59:13:3b:a3:10:32:14:a5:bf:98:04:27:6c:82:a5:66:61:
39:39:b2:f7:06:17:54:ad:8d:9f:74:ad:4b:e2:bd:74:08:87:
98:83:54:06:70:22:b7:ec:4a:ac:ab:1c:d2:57:f9:cd:cb:23:
93:98:70:25:ac:9e:e1:59:87:df:5a:ca:e4:f6:21:2f:21:f9:
1e:56:47:9b:69:b9:58:20:9a:81:d8:a9:64:86:0b:47:8a:ff:
b4:df:50:17:b6:4f:2b:8e:77:f2:b1:4d:26:46:fc:81:16:97:
9f:e8:1a:7b:eb:39:2e:ea:90:7d:b4:85:1e:dc:f9:9d:fe:79:
6c:9d:d8:e3:e6:20:81:d2:de:6a:e8:72:de:ee:87:5a:64:9d:
ad:82:74:77:84:c0:7b:9f:d2:b8:56:94:1e:30:2c:70:18:67:
71:d3:bb:38:12:40:11:1e:3f:55:57:6a:8c:d8:de:0a:14:7f:
45:2d:d9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:34:54 2026 by rpki-client