Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS131630.roa
File: AS131630.roa (raw, json)
Hash identifier: tc6p65rNPImGTYi3aA7kZKFElDCeizirXFw6EBP1roY=
Subject key identifier: 98:FF:58:02:8E:BA:AD:51:A2:52:0B:AF:9B:DD:B5:92:8E:F4:9D:91
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 463CFC725E2161FA5770505F3A65FA0E760E3B7A
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS131630.roa
Signing time: Fri 16 Oct 2026 07:00:06 +0000
ROA not before: Fri 16 Oct 2026 06:55:06 +0000
ROA not after: Fri 15 Oct 2027 07:00:06 +0000
asID: 131630
IP address blocks: 2a14:7580:6000::/36 maxlen: 36
2a14:7580:f300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:3c:fc:72:5e:21:61:fa:57:70:50:5f:3a:65:fa:0e:76:0e:3b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 16 06:55:06 2026 GMT
Not After : Oct 15 07:00:06 2027 GMT
Subject: CN=98FF58028EBAAD51A2520BAF9BDDB5928EF49D91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:92:2c:74:44:8d:1c:9f:11:2d:0c:ec:0c:47:
46:56:de:ce:c6:6e:41:be:23:bd:b3:e8:01:cb:a7:
1e:c3:e3:1a:c9:62:81:d5:69:98:eb:0d:44:ca:f4:
01:50:80:17:d5:df:65:35:16:24:73:57:1f:a2:b8:
56:f0:b2:f6:0e:45:e2:8b:b6:63:96:80:a5:4d:0b:
a0:cc:0b:87:00:32:d5:0d:53:39:2c:70:51:c6:09:
73:f8:9d:0c:74:98:0b:b6:3d:b5:12:1c:fa:96:eb:
1d:a2:49:06:49:f4:bf:7a:a5:3e:e4:94:ab:37:6b:
14:57:03:68:4c:fa:c2:65:a7:d2:4e:17:c2:c4:9a:
a2:8a:61:b4:2f:ea:e1:3c:b6:d9:30:23:5d:f0:8f:
70:c5:56:ee:55:2e:b5:13:ee:2f:7e:c2:27:5f:c9:
15:e9:45:5e:5e:8f:92:e5:b6:cd:99:f6:c8:9d:4e:
f6:57:ca:39:cc:1f:8e:89:fb:e0:39:e4:f6:21:0c:
f0:00:31:e3:e2:9f:3a:ea:c5:2f:5a:c7:31:b8:07:
6f:c0:5c:15:2c:ee:70:5f:25:dc:ca:fb:f4:94:f9:
13:da:f9:3e:8b:b7:4d:1e:de:1b:11:5e:47:28:ba:
7c:92:aa:80:15:21:f7:90:f4:8a:ea:03:89:d5:9d:
75:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FF:58:02:8E:BA:AD:51:A2:52:0B:AF:9B:DD:B5:92:8E:F4:9D:91
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS131630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:6000::/36
2a14:7580:f300::/40
Signature Algorithm: sha256WithRSAEncryption
47:63:6f:db:6b:b7:f8:c9:bb:0d:b8:e7:56:6f:ac:0d:1a:35:
62:dd:de:48:4c:af:e0:95:9c:e5:81:2f:b2:4b:56:af:3d:6f:
05:ae:49:e5:dd:3a:9d:c9:35:5d:91:13:11:6f:20:52:4b:1e:
5b:0e:a0:37:7b:45:f7:6b:82:73:9a:3c:d6:ee:bc:3d:0b:4d:
96:95:08:e9:75:94:93:ea:08:05:c7:fa:31:7f:93:6f:b9:d7:
7e:8b:74:44:89:6a:08:c5:32:b1:81:7d:db:a0:56:b4:5e:c3:
4c:11:24:c4:61:36:bd:68:66:56:b9:9a:d4:d7:f9:74:43:f3:
92:60:61:73:49:46:2c:87:de:ac:6b:cc:5d:dc:5d:3a:16:c8:
da:90:51:74:62:b0:6c:f4:84:52:81:d5:49:dc:76:c0:41:4d:
5b:08:9f:71:c6:2a:bd:5e:1b:66:00:fa:46:76:f7:40:6d:6d:
ef:42:0d:7e:93:e7:ac:e5:90:c6:6c:70:97:48:fc:88:dd:6a:
56:24:c0:16:42:cc:25:e6:69:a3:56:01:8a:e7:9e:ab:0a:f9:
35:e4:20:b5:f0:79:96:ea:bc:f0:1d:1d:9d:49:50:db:a1:ab:
4c:10:29:bc:f6:ca:a1:ec:dc:31:1d:a0:8f:b7:02:34:9c:9a:
1d:ca:70:50
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:17:09 2026 by rpki-client