Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3132382e302f32342d3234203d3e203231383539.roa
File: 3130332e34392e3132382e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: Gks1amT+rPKiG3Iiuhmb/CKRKvNQxK+jCx7Bb8Ah+xI=
Subject key identifier: 18:05:15:06:6F:9A:25:19:27:75:92:4B:15:B6:30:FB:C2:F7:1D:66
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 48E223928C807E02E2266BCF3F00C6E86A4F216A
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3132382e302f32342d3234203d3e203231383539.roa
Signing time: Mon 13 Jul 2026 02:28:38 +0000
ROA not before: Mon 13 Jul 2026 02:23:38 +0000
ROA not after: Mon 12 Jul 2027 02:28:38 +0000
asID: 21859
IP address blocks: 103.49.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:e2:23:92:8c:80:7e:02:e2:26:6b:cf:3f:00:c6:e8:6a:4f:21:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Jul 13 02:23:38 2026 GMT
Not After : Jul 12 02:28:38 2027 GMT
Subject: CN=180515066F9A25192775924B15B630FBC2F71D66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3c:e9:28:72:06:f1:62:9f:61:85:50:19:f8:
1e:bf:25:5f:ad:4d:af:c5:97:76:27:70:32:68:50:
01:3b:0f:38:74:84:72:a6:f2:2b:31:fc:55:e1:c5:
3e:a5:b8:e2:8f:96:3c:57:8e:a4:66:fa:1d:c7:6e:
19:a3:a5:bc:2c:75:4e:fe:a6:35:0c:b2:d2:43:00:
73:b8:8e:36:be:d5:2f:63:8f:09:41:53:d4:e9:c5:
44:8d:89:bd:6c:8c:43:7e:62:94:3b:13:90:58:c6:
f9:db:76:76:d5:4b:ff:01:39:2a:69:a1:60:ae:72:
64:a3:25:91:44:9a:ab:e3:be:50:2c:48:ab:fc:58:
4b:10:fd:0f:fd:41:3f:dd:67:44:4c:92:ae:31:fa:
75:c8:d5:22:31:1c:9c:81:bb:92:25:40:c5:5e:1e:
69:5c:74:cb:16:1d:12:09:a3:90:fb:0b:a0:21:f5:
16:9f:73:53:ae:70:66:ef:7a:11:84:2b:5b:06:37:
b3:8d:2f:38:2a:22:e1:51:64:81:29:d2:c1:2d:6d:
f3:e9:0d:7b:30:ef:4f:6a:f3:51:b9:22:a3:62:63:
f2:79:0d:8f:be:9a:ec:59:63:80:c9:d0:94:66:a8:
4d:c1:cc:2e:01:1c:5d:84:49:73:d6:d4:c3:b8:96:
7e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:05:15:06:6F:9A:25:19:27:75:92:4B:15:B6:30:FB:C2:F7:1D:66
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3132382e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.49.128.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:71:1b:0b:9f:f2:20:ae:06:3f:5a:1d:c0:4f:2f:a1:a8:d5:
19:5d:bd:c3:38:c2:d1:0a:6c:20:96:a3:ef:2d:b9:00:4b:e3:
82:08:4a:95:31:16:72:10:ab:23:3a:bd:2a:a0:67:cc:df:31:
b8:e7:8a:ca:b8:1c:b8:23:c1:f3:97:97:92:58:72:e1:d4:4c:
0c:56:7f:65:55:99:c2:96:ab:e6:8c:9b:9e:e7:69:58:99:f6:
62:7c:e3:fe:a3:17:b5:8e:eb:97:16:9a:0f:dd:70:9f:62:72:
35:71:2d:54:78:b3:57:a6:f7:45:54:88:0c:0e:0c:0f:e3:41:
6b:66:2e:f3:ec:7a:a4:11:d6:91:1a:0b:a2:e9:5b:83:c0:35:
9f:5f:27:f8:bf:e1:ef:48:a7:44:76:23:b9:a6:7b:9f:06:d7:
dc:30:be:ad:e6:7d:3c:23:dd:c5:21:1b:4c:0f:58:14:3c:a4:
2a:8c:77:ad:ce:e1:47:8d:78:bf:62:95:56:f3:2e:71:24:9f:
9d:1c:9e:7e:48:8d:c3:42:b0:5b:a0:a9:e5:c9:a1:9d:15:4a:
b5:95:94:61:6e:14:c3:35:42:ff:99:f1:da:9e:d4:e5:09:fa:
95:d9:de:e5:b2:f4:80:a2:c6:12:a7:0e:3b:66:0f:a1:0d:50:
fd:bf:41:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:00:37 2026 by rpki-client