Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31322e302f32342d3234203d3e2039303039.roa
File: 3130392e3130362e31322e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: rWZCW05T57ZHsKmeA7rMNxus1BZ+qEkzmzY2cEWFyeU=
Subject key identifier: A3:58:D2:9E:6F:63:7E:F4:D0:58:03:D4:ED:EA:36:C2:4B:EE:29:5D
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 58D6564E235C0429CAE477E824897017679BE3D9
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31322e302f32342d3234203d3e2039303039.roa
Signing time: Mon 21 Sep 2026 12:26:57 +0000
ROA not before: Mon 21 Sep 2026 12:21:57 +0000
ROA not after: Mon 20 Sep 2027 12:26:57 +0000
asID: 9009
IP address blocks: 109.106.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:d6:56:4e:23:5c:04:29:ca:e4:77:e8:24:89:70:17:67:9b:e3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 21 12:21:57 2026 GMT
Not After : Sep 20 12:26:57 2027 GMT
Subject: CN=A358D29E6F637EF4D05803D4EDEA36C24BEE295D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1a:54:2e:3d:25:b0:e1:4c:b0:4e:b9:b5:fb:
31:c8:b5:ec:2a:17:25:10:38:7d:55:22:33:b9:8e:
0f:40:37:7b:bc:19:3f:d7:fa:87:78:06:52:de:bf:
36:5d:f9:43:5d:cf:47:39:08:84:de:a7:ea:db:06:
05:36:fa:f5:c3:14:00:30:9d:df:4c:3d:68:8a:27:
b0:50:87:91:47:92:91:1b:32:ea:92:cd:6f:f1:d1:
3d:7a:3e:5e:ef:c5:50:e5:c0:74:12:18:7c:b8:94:
3c:e1:ad:6e:44:dd:bc:ac:76:96:31:65:d3:9e:ed:
a3:60:ae:c7:b1:cc:f1:1d:3d:01:79:d1:fa:28:2e:
d9:38:00:1d:b2:a2:31:04:74:6d:22:64:f8:64:3d:
b6:94:eb:01:52:77:a3:23:92:ff:05:06:c5:37:20:
16:e8:c4:55:5b:83:1d:05:c6:2d:de:76:93:40:7d:
13:f1:a7:2a:5e:e4:49:84:a2:63:fe:43:9d:51:8c:
b6:b9:2d:25:b4:1d:73:a3:b7:c2:5b:99:b7:65:b7:
be:aa:ab:b4:ee:d7:0a:64:5d:b0:9b:d5:18:81:60:
0d:e7:0d:72:24:ef:c9:b2:07:c3:ac:1c:f6:d3:21:
bf:5a:fd:01:0d:9b:7e:87:26:5d:62:d6:88:74:69:
98:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:58:D2:9E:6F:63:7E:F4:D0:58:03:D4:ED:EA:36:C2:4B:EE:29:5D
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31322e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.12.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:67:56:a3:f4:50:5f:57:a3:05:44:b8:79:2c:e8:09:64:b8:
82:46:cc:61:04:60:b2:da:b4:68:d3:c1:c6:f5:28:0d:98:c9:
43:76:2f:a1:ee:d6:26:03:04:3c:7d:00:71:51:ef:5b:7c:73:
02:3d:42:9e:94:6d:43:2a:26:71:31:0b:ef:f9:c1:0f:96:72:
15:ab:73:14:47:b5:9a:e6:f2:03:7a:d3:49:d6:9d:af:34:a4:
8b:ba:24:98:d0:f8:6f:eb:c1:4b:b6:fa:7e:8a:96:9c:c2:43:
06:63:ef:e0:0b:f7:1a:cd:80:fa:05:91:12:58:18:32:39:aa:
62:0c:2e:85:06:bc:de:16:f0:22:ce:6f:43:c1:2f:77:79:9f:
21:f8:5a:f7:07:8c:46:51:bd:40:a4:74:6f:30:e6:bd:30:91:
35:f0:a3:d8:eb:e6:0c:cd:d0:c5:71:25:ce:29:a5:6e:19:ca:
2c:e2:6f:00:20:0e:dd:6f:40:fb:2e:e9:76:ba:66:2f:82:70:
e6:91:da:14:21:ed:87:0c:11:a4:d7:70:e3:fb:89:7e:8a:42:
ad:3b:c8:c0:87:00:7b:26:0c:14:88:3e:e1:ab:4e:1d:ff:8f:
4d:0a:b7:9e:d5:7e:3f:2c:70:bd:6d:ba:9d:76:24:67:d4:4c:
7d:47:9e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:01:57 2026 by rpki-client