Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133302e302f32342d3234203d3e20313939363935.roa
File: 3130332e34392e3133302e302f32342d3234203d3e20313939363935.roa (raw, json)
Hash identifier: RDauoDGr+i1zVcuayu/4HbEUes85SAVA7OzOaH8ZkX8=
Subject key identifier: F2:6D:D7:5F:FF:81:D0:D4:6F:41:DD:2E:22:C8:75:A0:61:B0:BF:8F
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 0C8C6DFB5B5BF09AC35954935A7F193896F6D339
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133302e302f32342d3234203d3e20313939363935.roa
Signing time: Tue 14 Jul 2026 14:31:28 +0000
ROA not before: Tue 14 Jul 2026 14:26:28 +0000
ROA not after: Tue 13 Jul 2027 14:31:28 +0000
asID: 199695
IP address blocks: 103.49.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:8c:6d:fb:5b:5b:f0:9a:c3:59:54:93:5a:7f:19:38:96:f6:d3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Jul 14 14:26:28 2026 GMT
Not After : Jul 13 14:31:28 2027 GMT
Subject: CN=F26DD75FFF81D0D46F41DD2E22C875A061B0BF8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:bf:46:8c:4d:bd:ea:24:20:03:80:80:46:
de:27:8b:5c:bb:c9:d0:0e:8e:b4:99:00:88:34:f1:
cb:39:03:5c:b8:94:fd:82:03:a1:34:93:e0:3e:47:
f2:2d:fc:94:ce:fd:db:31:41:fb:17:cf:a6:f0:3c:
eb:a7:82:fd:9e:45:89:a7:4c:87:82:0d:de:a2:2c:
07:61:f9:fa:fb:fc:7b:29:6b:25:6e:2f:c9:eb:91:
ba:d3:ad:32:f7:4e:2a:d6:a5:5c:68:4b:7b:96:34:
e4:87:ce:7f:5a:63:ce:ff:7b:d8:5d:ea:80:e6:56:
d0:be:01:ea:1d:99:04:e8:54:27:2d:9e:bb:fe:8b:
f4:d4:bb:41:7b:57:65:72:2d:d7:da:60:b0:8c:cc:
17:0c:4e:81:c1:29:00:08:cd:da:4f:7e:f0:51:da:
d5:6a:55:c4:36:ba:9b:b3:a6:e9:87:c9:4d:4f:79:
e1:16:b4:b8:1a:ef:1b:40:94:a2:c9:be:95:58:dc:
24:1d:29:53:9d:8a:91:ca:6b:7e:e9:6f:89:a7:ea:
66:a0:62:a7:77:28:e0:e8:59:bb:ed:84:61:15:40:
19:40:24:10:69:cf:68:c3:58:5a:2b:46:d5:63:a1:
ab:94:9c:bf:16:e2:05:a9:3c:79:02:30:6c:df:6d:
b9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6D:D7:5F:FF:81:D0:D4:6F:41:DD:2E:22:C8:75:A0:61:B0:BF:8F
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133302e302f32342d3234203d3e20313939363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.49.130.0/24
Signature Algorithm: sha256WithRSAEncryption
24:25:c7:1d:c5:02:3d:0e:0a:e6:9a:aa:9a:1d:3f:00:7f:ef:
a4:d6:03:ce:fd:5c:38:73:a7:da:fa:5d:a3:62:5a:4d:b6:87:
e9:cd:05:4f:cb:0d:00:1a:0c:04:2e:52:e1:95:ba:88:7f:87:
6e:9b:e7:9f:60:53:19:8d:a3:6a:d8:20:33:18:77:00:65:a1:
85:b3:6f:82:e4:e4:a9:0b:5e:86:1f:66:e5:37:72:97:ae:83:
ce:e7:a4:c3:55:ed:26:3a:c7:3b:89:32:a5:b9:c0:1e:77:a2:
ba:a3:1d:b2:1e:7b:87:0f:cb:2a:67:1d:9c:2a:0e:ef:b4:82:
92:9a:2d:32:bd:9d:65:19:ff:2f:a4:ef:7f:5a:bd:92:f4:ff:
50:f8:8b:11:7d:72:68:8a:ce:89:09:f3:1c:a6:ea:49:45:7c:
5c:ea:2a:be:36:17:da:1d:17:03:f3:45:6f:7b:1c:cf:84:9a:
07:af:11:24:82:ae:4d:3a:0e:ff:6a:75:e5:9c:8f:e9:ac:31:
3d:6a:86:02:79:10:b2:57:3b:6e:07:6f:e7:67:58:38:cd:fa:
66:20:f6:c1:59:1b:e7:6d:60:8d:07:ea:3d:a3:f6:d1:58:7a:
6c:f1:6d:36:07:5d:fd:36:da:82:44:2e:84:0e:a9:0e:53:e4:
e1:cb:78:81
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUDIxt+1tb8JrDWVSTWn8ZOJb20zkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw
YWVhYjI5ZDAeFw0yNjA3MTQxNDI2MjhaFw0yNzA3MTMxNDMxMjhaMDMxMTAvBgNV
BAMTKEYyNkRENzVGRkY4MUQwRDQ2RjQxREQyRTIyQzg3NUEwNjFCMEJGOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrAr9GjE296iQgA4CARt4ni1y7
ydAOjrSZAIg08cs5A1y4lP2CA6E0k+A+R/It/JTO/dsxQfsXz6bwPOungv2eRYmn
TIeCDd6iLAdh+fr7/HspayVuL8nrkbrTrTL3TirWpVxoS3uWNOSHzn9aY87/e9hd
6oDmVtC+AeodmQToVCctnrv+i/TUu0F7V2VyLdfaYLCMzBcMToHBKQAIzdpPfvBR
2tVqVcQ2upuzpumHyU1PeeEWtLga7xtAlKLJvpVY3CQdKVOdipHKa37pb4mn6mag
Yqd3KODoWbvthGEVQBlAJBBpz2jDWForRtVjoauUnL8W4gWpPHkCMGzfbbklAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU8m3XX/+B0NRvQd0uIsh1oGGwv48wHwYDVR0j
BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2
NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy
cXNwMC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQt
NmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2NjIwLzAvMzEzMDMzMmUzNDM5MmUzMTMz
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzkzNjM5MzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABnMYIwDQYJKoZIhvcNAQELBQADggEBACQlxx3FAj0OCuaaqpodPwB/76TWA879
XDhzp9r6XaNiWk22h+nNBU/LDQAaDAQuUuGVuoh/h26b559gUxmNo2rYIDMYdwBl
oYWzb4Lk5KkLXoYfZuU3cpeug87npMNV7SY6xzuJMqW5wB53orqjHbIee4cPyypn
HZwqDu+0gpKaLTK9nWUZ/y+k739avZL0/1D4ixF9cmiKzokJ8xym6klFfFzqKr42
F9odFwPzRW97HM+EmgevESSCrk06Dv9qdeWcj+msMT1qhgJ5ELJXO24Hb+dnWDjN
+mYg9sFZG+dtYI0H6j2j9tFYemzxbTYHXf022oJELoQOqQ5T5OHLeIE=
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:27:06 2026 by rpki-client