Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31342e302f32332d3234203d3e2039333034.roa
File: 3130392e3130362e31342e302f32332d3234203d3e2039333034.roa (raw, json)
Hash identifier: uV+UMSlNmSYuhhkjjEFnauzJR2JVpWr3KfPHaQfvED0=
Subject key identifier: B1:A9:CB:AC:E3:C9:B7:C4:0A:38:7F:51:F7:64:E1:49:E7:55:BE:CE
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 04A56CED9BBEDF398FCA2E47F0EE105C32F361C9
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31342e302f32332d3234203d3e2039333034.roa
Signing time: Tue 23 Sep 2025 08:31:22 +0000
ROA not before: Tue 23 Sep 2025 08:26:22 +0000
ROA not after: Tue 22 Sep 2026 08:31:22 +0000
asID: 9304
IP address blocks: 109.106.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 02:58:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:a5:6c:ed:9b:be:df:39:8f:ca:2e:47:f0:ee:10:5c:32:f3:61:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 23 08:26:22 2025 GMT
Not After : Sep 22 08:31:22 2026 GMT
Subject: CN=B1A9CBACE3C9B7C40A387F51F764E149E755BECE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cb:a5:75:90:b0:5e:90:3a:22:d5:66:13:19:
60:3f:fb:f5:aa:95:f3:d3:65:c2:6c:ca:46:49:d8:
0e:19:8d:7d:25:a9:50:6c:8a:99:6e:c0:11:3e:fc:
08:4d:32:ff:ee:ad:3b:02:31:18:df:80:e8:47:4c:
0d:19:c7:ba:51:fd:5e:7d:19:84:c1:4d:76:79:e7:
37:66:4b:94:aa:e5:57:4f:a7:73:66:ba:93:f9:45:
78:b3:f8:bc:6a:f8:ea:37:54:b4:2c:c9:01:9b:58:
70:ba:e5:4f:ee:de:91:11:82:32:37:12:8d:f9:32:
09:1b:c5:98:1b:11:c5:46:82:3a:88:f1:a4:14:c1:
21:0f:fc:11:ea:73:40:e9:52:3c:54:22:8c:04:2f:
a2:ee:38:36:c3:c4:3c:21:46:97:3c:39:aa:08:8b:
8e:21:e4:4c:63:e7:3b:bc:90:ab:31:4f:b6:47:b9:
0f:1c:dd:98:6b:0e:1d:a2:59:a4:94:18:2a:9d:b8:
99:8f:e0:74:5d:be:2f:74:36:c9:c3:4d:85:1e:68:
d3:4b:ce:30:1b:ae:3a:1e:6b:93:ff:46:a7:da:df:
91:7d:72:9e:66:73:7a:42:3f:88:38:d7:61:ba:13:
2b:2c:1d:8d:b1:d5:76:5f:ac:43:c0:86:b0:44:de:
55:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A9:CB:AC:E3:C9:B7:C4:0A:38:7F:51:F7:64:E1:49:E7:55:BE:CE
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3130392e3130362e31342e302f32332d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.14.0/23
Signature Algorithm: sha256WithRSAEncryption
11:ed:4a:9e:b5:d8:83:5e:aa:29:c1:a2:57:4b:54:da:60:12:
e6:b1:6c:ee:47:6f:bf:da:71:a7:49:c2:4a:3d:b4:5b:da:45:
e9:6d:00:e6:52:3e:c1:e0:56:8e:a2:78:08:3a:8a:08:17:87:
35:5c:26:4e:03:3c:62:2f:74:e4:fa:c8:40:24:ed:7c:b0:f2:
2f:b5:d9:c0:84:f4:ab:d7:cd:41:e7:85:b2:82:c6:6c:fb:04:
a2:3e:03:25:74:3f:97:0c:c1:7b:05:63:8b:7c:64:c9:b6:be:
b3:61:6e:ff:f9:5b:38:cd:8c:75:0b:47:aa:70:21:52:bf:14:
7e:af:a3:8b:f5:d9:bd:34:d6:d6:a9:5f:e0:b6:2b:66:22:f7:
77:81:2f:87:f3:4d:e6:b0:e3:fd:16:99:22:3f:dd:d8:ba:94:
7a:c2:c9:38:10:8b:81:69:61:8f:09:97:03:c9:1f:0d:63:aa:
98:b1:a8:eb:f6:04:58:fc:e7:5d:49:7e:c1:2d:40:ae:6b:30:
ab:89:c7:2c:8f:d2:b2:41:94:04:f8:dc:5c:78:72:ef:af:51:
e5:03:50:78:33:87:14:13:b1:4a:43:13:2e:2b:41:a1:7d:08:
9d:74:7e:19:ea:1c:60:35:32:70:26:f6:e1:e5:e1:2b:39:3f:
8c:eb:62:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:01 2025 by rpki-client