Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138392e302f32342d3234203d3e20313430323234.roa
File: 3130392e3131302e3138392e302f32342d3234203d3e20313430323234.roa (raw, json)
Hash identifier: fDtFLyqHKmGBbA3StRC+MOUEZvB3d/q90CPIJRMT5AU=
Subject key identifier: C3:A0:FC:5F:7B:49:99:E5:CC:57:65:D5:8A:69:3B:15:68:9C:3A:44
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 31EC3EA1A14B90FC1B7CD51080230281FF6C4610
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138392e302f32342d3234203d3e20313430323234.roa
Signing time: Wed 16 Sep 2026 08:49:35 +0000
ROA not before: Wed 16 Sep 2026 08:44:35 +0000
ROA not after: Wed 15 Sep 2027 08:49:35 +0000
asID: 140224
IP address blocks: 109.110.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:ec:3e:a1:a1:4b:90:fc:1b:7c:d5:10:80:23:02:81:ff:6c:46:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Sep 16 08:44:35 2026 GMT
Not After : Sep 15 08:49:35 2027 GMT
Subject: CN=C3A0FC5F7B4999E5CC5765D58A693B15689C3A44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f7:48:4e:50:e7:6f:41:ad:df:32:6a:9e:f2:
1a:68:84:a6:b2:5a:d3:82:b0:6c:f3:86:93:15:68:
d4:70:ef:87:81:0b:32:b5:4f:59:5a:01:94:8c:b5:
90:62:26:5b:76:ab:bc:20:5e:a1:3d:2e:53:f0:8f:
09:49:ba:b3:43:87:e2:5f:5b:73:38:0c:f6:7d:cc:
b6:34:8e:b3:62:52:6a:23:5c:1e:e4:6a:5f:fc:59:
3f:18:c9:13:95:3a:82:36:09:b0:ba:e8:ac:f4:3a:
79:88:e0:e7:3e:d6:d6:1c:6e:69:47:d0:90:f8:10:
37:3b:a8:b4:9d:2e:11:9b:4c:a8:e6:47:eb:a8:bc:
60:36:09:b3:b0:a3:db:de:db:54:1f:df:cc:46:0a:
f3:07:7c:62:43:e5:e7:30:fe:92:19:2a:d8:af:d1:
6c:1a:a5:16:e1:22:10:af:73:f1:bb:f3:30:02:f9:
50:8f:05:8a:02:5c:c8:f5:c6:07:db:e2:e9:ba:3a:
1d:20:b8:06:41:10:74:f1:97:4c:0c:13:26:1e:c2:
e4:47:e8:9c:bd:9c:82:ed:8e:4f:2c:cc:7d:22:5b:
59:1d:c8:eb:00:72:c3:41:70:fe:52:b9:f1:e9:6f:
f1:7d:5d:72:b9:22:66:46:a7:0f:4d:bf:ff:31:76:
4c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A0:FC:5F:7B:49:99:E5:CC:57:65:D5:8A:69:3B:15:68:9C:3A:44
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138392e302f32342d3234203d3e20313430323234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.189.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a3:d9:8a:b7:32:34:18:0d:32:45:18:74:a7:68:93:48:06:
4d:05:9e:ac:e2:f1:27:59:b8:b8:73:9e:e3:42:f5:3e:2c:8e:
4a:a0:3f:8d:7e:06:e7:b8:08:cb:fb:7c:46:b9:51:42:94:b8:
1b:b2:f0:45:ed:8e:6e:38:7f:a4:77:f9:43:c2:79:11:b4:81:
27:7d:40:ac:f6:78:27:4c:ea:e8:76:84:85:b3:9d:58:e8:9a:
90:51:e9:33:7e:3f:f4:5e:fc:6d:ad:a8:9c:34:2d:f2:d7:72:
d2:32:d2:9c:38:31:61:99:60:53:27:81:14:5d:0f:4b:24:29:
71:aa:11:f8:a5:3f:8a:22:67:5b:f8:77:d4:69:45:c0:b6:db:
5b:51:8d:4b:be:d3:94:34:8f:5a:2a:92:e7:2e:cc:ea:e5:46:
16:ce:74:f6:21:13:e2:66:02:fd:e4:d7:06:81:69:db:98:e9:
3e:a5:13:90:90:1e:d7:6c:95:77:28:c6:80:b8:f0:da:28:d9:
af:f1:ac:01:48:dd:8f:8b:62:23:87:a9:57:e8:5a:df:47:83:
88:ca:31:84:5b:5c:a6:2f:3f:d6:12:74:c5:72:39:5d:81:df:
26:97:e7:5f:1f:c8:4b:8a:a6:a3:72:05:3a:55:bc:55:46:bb:
e2:0b:eb:e0
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUMew+oaFLkPwbfNUQgCMCgf9sRhAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNjA5MTYwODQ0MzVaFw0yNzA5MTUwODQ5MzVaMDMxMTAvBgNV
BAMTKEMzQTBGQzVGN0I0OTk5RTVDQzU3NjVENThBNjkzQjE1Njg5QzNBNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe90hOUOdvQa3fMmqe8hpohKay
WtOCsGzzhpMVaNRw74eBCzK1T1laAZSMtZBiJlt2q7wgXqE9LlPwjwlJurNDh+Jf
W3M4DPZ9zLY0jrNiUmojXB7kal/8WT8YyROVOoI2CbC66Kz0OnmI4Oc+1tYcbmlH
0JD4EDc7qLSdLhGbTKjmR+uovGA2CbOwo9ve21Qf38xGCvMHfGJD5ecw/pIZKtiv
0WwapRbhIhCvc/G78zAC+VCPBYoCXMj1xgfb4um6Oh0guAZBEHTxl0wMEyYewuRH
6Jy9nILtjk8szH0iW1kdyOsAcsNBcP5SufHpb/F9XXK5ImZGpw9Nv/8xdkxVAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUw6D8X3tJmeXMV2XVimk7FWicOkQwHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx
MzgzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMDMyMzIzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAG1uvTANBgkqhkiG9w0BAQsFAAOCAQEAdqPZircyNBgNMkUYdKdok0gGTQWe
rOLxJ1m4uHOe40L1PiyOSqA/jX4G57gIy/t8RrlRQpS4G7LwRe2Objh/pHf5Q8J5
EbSBJ31ArPZ4J0zq6HaEhbOdWOiakFHpM34/9F78ba2onDQt8tdy0jLSnDgxYZlg
UyeBFF0PSyQpcaoR+KU/iiJnW/h31GlFwLbbW1GNS77TlDSPWiqS5y7M6uVGFs50
9iET4mYC/eTXBoFp25jpPqUTkJAe12yVdyjGgLjw2ijZr/GsAUjdj4tiI4epV+ha
30eDiMoxhFtcpi8/1hJ0xXI5XYHfJpfnXx/IS4qmo3IFOlW8VUa74gvr4A==
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:57:54 2026 by rpki-client