Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3132392e302f32342d3234203d3e20313533373836.roa
File: 3130332e34392e3132392e302f32342d3234203d3e20313533373836.roa (raw, json)
Hash identifier: 8ciOgQf/5f2kkiTl0Q7pGFYfq76YJlE+KlbE9/JeEuM=
Subject key identifier: D0:48:72:06:19:AC:21:F3:F3:45:36:C3:5E:5A:A0:D9:3F:64:92:F5
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 650BC6E86CCBA8057EF4C88BDAA5D77300620E07
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3132392e302f32342d3234203d3e20313533373836.roa
Signing time: Thu 30 Oct 2025 16:53:51 +0000
ROA not before: Thu 30 Oct 2025 16:48:51 +0000
ROA not after: Thu 29 Oct 2026 16:53:51 +0000
asID: 153786
IP address blocks: 103.49.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:0b:c6:e8:6c:cb:a8:05:7e:f4:c8:8b:da:a5:d7:73:00:62:0e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Oct 30 16:48:51 2025 GMT
Not After : Oct 29 16:53:51 2026 GMT
Subject: CN=D048720619AC21F3F34536C35E5AA0D93F6492F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:68:27:24:04:43:bb:96:4a:2c:77:91:42:86:
51:f8:f2:bf:90:92:d0:ca:c3:fd:af:32:e8:4f:a8:
bf:1c:5a:5c:4b:0c:f9:b7:5a:67:ab:ae:00:c3:12:
12:1b:4c:5a:06:4b:eb:0a:a1:23:72:70:02:19:d1:
23:43:78:e0:78:af:ed:85:d4:36:71:bb:f6:fe:e0:
ed:ad:d7:74:4c:49:80:3f:ab:7a:50:8c:f7:48:e0:
d2:35:ee:38:8e:c9:22:ae:c4:40:90:cd:85:25:fb:
0f:96:6c:64:64:8d:31:f4:88:7e:3c:7f:36:f1:f9:
c6:7f:bb:4f:ea:51:c2:81:7f:50:69:d6:86:9b:d5:
57:07:eb:92:9e:6f:5a:15:b5:be:5c:9c:a8:24:b9:
70:b3:58:da:9a:f4:9d:18:71:80:c2:be:18:06:5c:
85:7e:04:b8:2a:6b:75:4e:c4:0e:26:f6:01:b7:ac:
23:e9:14:3a:eb:51:be:24:c0:27:86:22:be:0d:39:
b7:49:4e:8e:62:05:5b:3b:e5:86:2f:1a:f2:74:d1:
5f:e1:87:a8:91:7a:ca:2e:a5:f8:7c:ad:ca:3a:d5:
c7:a9:a0:b0:a3:9a:13:5c:33:e9:22:29:9d:92:ad:
65:fc:6b:26:8c:22:f7:1b:dd:ba:46:ca:33:1f:5a:
29:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:48:72:06:19:AC:21:F3:F3:45:36:C3:5E:5A:A0:D9:3F:64:92:F5
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3132392e302f32342d3234203d3e20313533373836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.49.129.0/24
Signature Algorithm: sha256WithRSAEncryption
91:b4:13:9a:4c:d3:e5:d4:fb:25:40:df:c4:79:12:89:77:a7:
aa:45:92:c6:38:24:4d:9f:61:77:2d:28:a1:f9:47:39:e0:d4:
5c:f0:5e:e2:b7:d9:cc:81:7f:69:8c:3c:a5:a7:7a:23:0c:93:
9f:35:89:b1:4c:f1:80:3f:cc:b2:d5:24:cb:7d:89:4d:32:f2:
51:62:ce:53:be:4c:c8:6f:03:c5:e9:6a:a3:eb:8f:91:18:f8:
b0:fc:28:d6:96:49:d7:c5:db:93:ae:87:a3:9e:28:7b:2c:2d:
f3:31:b3:d0:c2:2e:b9:92:f5:68:42:0b:a1:b2:90:38:53:d2:
f8:e7:15:1b:c7:b5:1d:c1:7c:e5:80:d0:f1:94:a4:9d:cd:e3:
b3:52:52:90:eb:67:3f:a7:26:ba:30:46:b7:30:af:49:56:12:
bb:23:55:0e:fa:69:b2:cc:ca:06:aa:50:92:fe:66:8f:eb:9d:
2d:01:0a:b1:56:28:98:84:8a:17:d9:f8:da:88:f1:2b:e5:36:
f0:0c:53:30:81:b1:df:1f:99:51:5b:cf:0c:5a:0f:11:ae:2a:
0c:09:c3:77:e7:31:44:5a:79:f1:ef:3f:67:71:d6:f9:8e:51:
36:a7:48:c8:d1:29:68:7d:98:9e:3b:ab:20:6f:32:6a:0d:f2:
f1:9e:18:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:35:53 2025 by rpki-client