Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31322e302f32332d3234203d3e2039333034.roa
File: 3130392e3130362e31322e302f32332d3234203d3e2039333034.roa (raw, json)
Hash identifier: 6WHbx56Sbca1dqCDQ7WsjAfH3q4xJMeTzpvpjOBsxPU=
Subject key identifier: 5B:13:6C:E3:42:13:22:7A:FD:80:60:6B:52:F4:56:F7:CF:78:C7:8F
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 085C6A79BCD4918B2C453AD5ECA02DD25E72E6D8
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31322e302f32332d3234203d3e2039333034.roa
Signing time: Tue 23 Sep 2025 08:31:31 +0000
ROA not before: Tue 23 Sep 2025 08:26:31 +0000
ROA not after: Tue 22 Sep 2026 08:31:31 +0000
asID: 9304
IP address blocks: 109.106.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 02:58:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:5c:6a:79:bc:d4:91:8b:2c:45:3a:d5:ec:a0:2d:d2:5e:72:e6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 23 08:26:31 2025 GMT
Not After : Sep 22 08:31:31 2026 GMT
Subject: CN=5B136CE34213227AFD80606B52F456F7CF78C78F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c4:d9:3a:15:29:ae:b0:25:6a:e6:56:c1:13:
36:b1:86:c9:51:69:73:96:43:ea:2f:ea:47:1f:bd:
2f:7d:17:8b:ea:c0:7f:b5:0c:d4:9d:19:28:e1:94:
51:4a:1c:aa:02:4c:88:a3:89:c7:cd:eb:64:a9:10:
3e:62:77:f6:33:8e:45:b2:44:48:76:e8:70:1e:73:
0c:54:3c:1e:68:17:45:49:b0:c9:c3:80:13:03:a0:
d3:88:ce:3b:61:8c:51:39:b1:59:2c:ca:0b:0e:0f:
40:b9:34:4a:50:f0:4f:43:13:09:b0:d1:c1:9f:eb:
da:5b:55:e9:84:37:2a:f2:b5:c1:ba:8c:4e:ab:da:
50:02:c3:db:e1:09:b4:43:13:6d:e0:58:06:9e:9a:
50:fd:a2:cd:b9:53:f6:29:62:7a:9c:a1:5c:7c:53:
a7:28:83:47:96:57:c6:f2:21:07:77:de:5d:f9:4e:
78:f3:66:99:f9:3e:d6:1b:84:60:b6:7b:b1:de:af:
8c:3c:bb:8d:f1:ae:bf:36:29:27:7f:21:e2:11:9a:
35:bd:6d:d9:3b:57:54:c7:f4:1c:ed:63:f5:f3:20:
10:0d:c6:ef:a9:27:21:56:65:a9:63:b1:a2:da:ed:
1a:6d:08:c2:f8:f6:3c:e8:7a:0c:d4:67:7c:8d:6e:
4b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:13:6C:E3:42:13:22:7A:FD:80:60:6B:52:F4:56:F7:CF:78:C7:8F
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31322e302f32332d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.12.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:b6:8e:0c:bc:3e:38:21:08:42:03:8a:88:4b:56:99:d9:bf:
81:f0:75:e3:7b:17:4a:91:e3:17:36:52:d8:ab:48:6f:81:b5:
96:1f:43:cf:49:a0:00:ab:23:e5:73:80:6f:00:1b:2e:04:6d:
33:39:ae:fe:f5:fb:6c:62:3c:72:b9:eb:0a:91:b9:aa:da:0b:
bf:5b:51:1c:c3:67:92:7a:7a:0a:35:96:b4:fb:f9:5d:ef:e9:
74:ec:17:b7:da:10:52:70:9d:e8:6e:14:8d:db:dd:7a:aa:7a:
83:20:4b:3c:65:ef:1a:0b:c7:a4:f9:1e:1e:0d:f3:0c:b5:a9:
84:6f:52:b9:67:2d:71:90:2b:5c:7c:65:58:e5:d6:f6:77:ab:
42:ec:97:9a:b3:55:ba:e6:39:d7:82:cc:d5:fd:18:64:c6:fc:
f8:f9:8b:17:f9:f4:5c:06:cf:ee:22:7c:6d:80:44:05:c2:84:
49:aa:c9:88:e0:7f:ed:a2:68:99:8a:d3:ba:69:1a:3e:44:71:
04:5e:2e:5c:8d:30:1d:4e:56:9f:cd:d9:c9:a5:75:0e:6e:79:
96:19:c2:e8:cf:13:f2:85:4d:ba:c9:9b:dd:5d:e1:90:a9:40:
df:4b:34:8a:2e:7f:1b:04:48:f4:b3:1c:52:74:21:ae:97:9c:
c4:82:4a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:59 2025 by rpki-client