Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138392e302f32342d3234203d3e203633393032.roa
File: 3130392e3131302e3138392e302f32342d3234203d3e203633393032.roa (raw, json)
Hash identifier: eWo1D8RXD6UELTZCsw4oiVfK5J0MsA2Vo5gfCti22Jc=
Subject key identifier: 8A:C5:92:11:BA:3A:8F:13:68:16:FC:DE:8D:DD:7B:94:96:79:B6:DC
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 6C89C1A1BF238EEB8BE9919BD04C3E34EB787371
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138392e302f32342d3234203d3e203633393032.roa
Signing time: Wed 16 Sep 2026 08:49:35 +0000
ROA not before: Wed 16 Sep 2026 08:44:35 +0000
ROA not after: Wed 15 Sep 2027 08:49:35 +0000
asID: 63902
IP address blocks: 109.110.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:05:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:89:c1:a1:bf:23:8e:eb:8b:e9:91:9b:d0:4c:3e:34:eb:78:73:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Sep 16 08:44:35 2026 GMT
Not After : Sep 15 08:49:35 2027 GMT
Subject: CN=8AC59211BA3A8F136816FCDE8DDD7B949679B6DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:39:51:61:bf:d6:64:aa:9d:57:14:f8:1a:d3:
50:26:3e:5c:aa:e3:f8:a1:62:6a:cc:f3:78:4e:d5:
76:14:b6:e0:29:f7:fe:f2:b9:8d:f9:99:17:eb:cc:
33:c8:66:c5:c7:43:2b:98:30:11:b4:a6:32:ac:e4:
8e:17:88:fe:d1:69:57:5c:1a:a3:3f:75:9a:20:fd:
d2:71:c1:27:3f:c0:44:ac:72:99:0f:24:51:94:76:
fe:6c:9e:8e:ba:9f:74:15:0a:1d:0c:a7:a8:58:d1:
af:a6:64:81:5a:43:ab:24:8d:4a:14:1c:9c:45:48:
2d:a6:53:84:a7:9b:b4:23:cb:a3:fe:a7:68:ab:9c:
a1:13:41:0d:97:d2:a9:87:06:e5:c2:2a:83:21:e6:
07:d8:07:14:d0:cc:6f:ff:19:74:dc:0f:96:65:8a:
65:f9:62:3e:33:a7:78:d8:c1:01:b0:5d:9c:91:f0:
f3:43:06:bf:f5:bb:f8:bf:a6:b1:af:d2:c1:b1:17:
05:01:cd:af:7c:b2:ea:51:c9:03:9c:29:00:51:b4:
9c:6d:10:11:b4:f0:71:69:91:0d:af:1c:95:2a:a9:
3f:76:2c:23:00:dc:ae:2d:ae:ac:43:61:e7:81:7c:
fe:db:0b:17:d9:6e:10:c9:af:3d:d3:54:9f:26:9a:
4d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C5:92:11:BA:3A:8F:13:68:16:FC:DE:8D:DD:7B:94:96:79:B6:DC
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138392e302f32342d3234203d3e203633393032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.189.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:e1:08:bf:a9:50:16:d4:c7:7e:a5:c4:a9:54:91:55:90:52:
71:c5:6b:f0:3b:e4:c9:65:6b:eb:7f:e9:29:05:a6:01:db:f4:
3f:a5:9d:86:4e:f5:32:9e:9c:33:d4:80:be:a2:3a:8c:cc:32:
fc:29:7b:aa:f8:9a:69:bf:be:0b:0a:97:16:eb:51:7b:cd:60:
90:4d:68:2f:04:ac:e9:a3:c7:b9:7c:77:1a:e3:bc:c4:06:5a:
6c:31:51:0a:c6:38:81:2a:bd:ad:42:7b:7a:d4:2c:38:db:29:
22:56:6f:0c:4d:4f:9e:3d:5b:95:29:e0:2f:f5:7f:45:ab:ff:
11:a7:0c:83:b6:4d:9c:39:61:30:67:e7:04:82:a6:a6:88:aa:
26:13:3c:2c:e4:c9:e9:ca:42:b8:df:c8:17:be:e0:59:2b:1c:
f8:7e:f5:02:7e:dc:1e:82:f3:0e:89:e7:3d:ce:3d:97:00:23:
0e:96:10:99:a0:6a:07:0e:ef:19:da:6c:66:e8:00:54:67:01:
15:78:b8:e5:7a:c6:01:fd:77:12:36:52:54:b4:0d:09:cb:a5:
fb:79:47:e9:fd:66:aa:8a:4a:9e:5b:c3:e0:99:0d:8e:ea:ea:
4c:42:69:7c:e1:81:69:fa:82:93:34:c8:44:36:65:10:4d:0f:
59:77:39:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:37:43 2026 by rpki-client