Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3132392e302f32342d3234203d3e20313533373836.roa
File: 3130332e34392e3132392e302f32342d3234203d3e20313533373836.roa (raw, json)
Hash identifier: dqbGTjTU/B8vA6teyanpuEPrxP3e6KA82oBtbQg0IYM=
Subject key identifier: B5:21:92:7E:58:A8:73:6D:92:E0:56:8C:18:FA:03:BF:0E:F5:04:84
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 53198D1737C43BEB5059DFDB85E8296A711C3627
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3132392e302f32342d3234203d3e20313533373836.roa
Signing time: Thu 01 Oct 2026 17:49:35 +0000
ROA not before: Thu 01 Oct 2026 17:44:35 +0000
ROA not after: Thu 30 Sep 2027 17:49:35 +0000
asID: 153786
IP address blocks: 103.49.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:19:8d:17:37:c4:3b:eb:50:59:df:db:85:e8:29:6a:71:1c:36:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Oct 1 17:44:35 2026 GMT
Not After : Sep 30 17:49:35 2027 GMT
Subject: CN=B521927E58A8736D92E0568C18FA03BF0EF50484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f1:88:7d:95:da:77:4e:00:3b:45:f7:f0:fc:
a1:58:2f:ba:5d:a4:d3:01:99:b0:b3:6f:c9:66:12:
8f:a4:d6:b3:37:a7:36:05:e7:52:ac:ea:49:3c:02:
96:16:90:d5:11:f6:78:76:f2:b7:2c:f9:31:4d:e4:
db:67:ee:9e:4c:84:17:88:72:0a:73:28:c0:db:b0:
4f:3b:e0:7f:e1:4a:4c:20:c0:0a:74:e6:0c:e3:87:
22:0d:ce:54:ab:1a:63:38:59:3c:a2:94:51:44:42:
6b:39:e6:fe:a6:cc:6b:36:fa:23:a5:76:40:dd:0b:
e1:8f:6f:e8:3e:0b:d9:08:cc:1f:68:1d:7a:64:1c:
7d:db:28:27:06:6b:07:0f:5f:e2:b4:e6:f5:d1:25:
4c:df:cd:16:f4:c7:08:b5:89:5c:0a:5b:f1:5f:68:
94:0a:a4:c4:02:8f:77:95:2b:01:92:66:01:fc:05:
00:70:98:bf:ec:da:9f:b8:d5:a1:6a:cd:06:12:27:
ef:26:1f:e4:59:cf:ae:74:1a:e1:b5:31:66:b7:e3:
f8:88:a0:d6:a6:b7:f7:1b:ac:7b:f4:51:eb:7d:5e:
7e:f9:a4:84:1e:3d:ce:0b:fc:c8:d3:ef:26:2b:9f:
d5:0e:0e:d2:cd:ee:46:e1:0c:71:6a:04:33:34:8d:
a1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:21:92:7E:58:A8:73:6D:92:E0:56:8C:18:FA:03:BF:0E:F5:04:84
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3132392e302f32342d3234203d3e20313533373836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.49.129.0/24
Signature Algorithm: sha256WithRSAEncryption
61:37:84:7b:38:c2:50:12:03:0f:41:93:67:c1:1b:dc:2b:37:
0a:fc:7c:c9:4c:95:6d:bd:b9:ae:96:62:26:50:3e:f4:3b:b1:
23:2f:c0:5d:7a:21:86:e7:4a:16:fd:9d:20:8e:ea:b1:09:87:
57:46:af:c9:ca:48:a1:05:d1:b8:a5:ca:32:48:b3:f5:17:8a:
16:7e:6e:97:1f:04:5f:f1:5d:25:84:81:b5:96:5e:9a:57:04:
d5:12:27:90:d1:1f:cd:a1:38:97:bb:a9:c8:6c:32:3d:db:da:
c1:4d:8f:50:79:0e:34:0d:79:25:a3:5c:b4:ce:f9:86:7f:fc:
99:bd:de:52:98:a5:c0:ca:5a:02:f6:9c:77:6e:84:0b:ae:16:
ae:d8:8b:86:f3:1b:19:bc:59:81:c5:3b:c4:89:d8:83:db:11:
02:de:4d:7f:b7:23:67:72:75:b5:5f:11:a1:f3:b9:5e:1e:48:
b5:b9:3c:c7:e1:b3:64:45:cd:29:dd:12:09:24:b0:7f:d9:38:
e9:f3:73:11:93:f5:81:43:84:90:70:02:7c:94:de:88:cd:63:
c4:81:34:d4:fc:a0:b6:60:e9:74:4a:6f:84:d2:50:fd:7e:87:
3c:c0:64:f5:ad:b1:58:19:43:84:14:26:76:d6:26:f0:47:43:
87:3f:f1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 23:29:36 2026 by rpki-client