Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa
File: 3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa (raw, json)
Hash identifier: gI3QMk1nxnVJ3ar9nDADeDjafrF5rxSYgoW75rlLkBk=
Subject key identifier: 1D:8B:EB:5D:95:26:5D:06:B5:A1:57:9F:BA:30:9D:F9:7E:42:BC:CF
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 051D3F73BB801394E888499B6A383F7536A44A85
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa
Signing time: Mon 01 Sep 2025 05:30:01 +0000
ROA not before: Mon 01 Sep 2025 05:25:01 +0000
ROA not after: Mon 31 Aug 2026 05:30:01 +0000
asID: 147261
IP address blocks: 103.49.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 15:44:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:1d:3f:73:bb:80:13:94:e8:88:49:9b:6a:38:3f:75:36:a4:4a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Sep 1 05:25:01 2025 GMT
Not After : Aug 31 05:30:01 2026 GMT
Subject: CN=1D8BEB5D95265D06B5A1579FBA309DF97E42BCCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:75:5d:13:67:b4:56:73:5e:21:f4:6e:48:22:
67:d6:53:3f:66:bc:e3:81:c9:1b:1e:7f:f2:f3:f0:
0f:35:25:eb:bb:63:fa:9c:b1:ec:f2:dd:5d:bc:14:
a7:2a:cf:db:a8:19:76:81:02:4c:85:63:e8:56:a8:
0a:9f:e7:5d:7d:a9:61:14:0a:0c:fc:a9:1a:80:fc:
57:8e:0c:42:99:a1:fb:17:1d:7d:c7:a4:3a:69:db:
3c:98:70:8c:dc:a7:3f:da:2d:a1:a5:c3:27:4f:52:
78:dc:d5:b4:07:aa:24:d3:d6:f5:02:ae:54:b6:1c:
a2:3e:30:e3:47:c8:68:c5:2f:4c:d2:41:21:24:f1:
ca:75:fb:ac:49:44:07:7e:ed:d1:a7:e0:a8:80:77:
76:e8:3f:ae:e8:b4:98:a8:54:c9:53:ed:cd:5f:be:
89:fa:94:6b:95:87:2f:92:75:65:13:a6:ea:57:30:
bf:8f:f7:f5:d2:83:27:c2:d5:3e:1b:c1:db:06:48:
7c:54:e4:24:3b:f8:93:3d:33:30:b2:51:7a:6f:62:
96:80:4c:b4:3d:e7:13:54:a2:94:14:5d:0b:83:30:
b8:91:7f:2e:f6:6a:8a:ae:fe:08:e0:e6:8e:54:6b:
fe:ae:73:b5:3a:11:32:60:bb:f5:e1:26:9e:6d:c3:
c3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8B:EB:5D:95:26:5D:06:B5:A1:57:9F:BA:30:9D:F9:7E:42:BC:CF
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.49.131.0/24
Signature Algorithm: sha256WithRSAEncryption
72:18:40:e6:7c:9e:42:54:08:c8:f4:4f:78:b9:1c:6b:b9:0f:
2e:d6:e1:f5:fa:ee:71:93:5c:2b:75:f2:a8:46:1b:a6:42:60:
8a:7e:e1:78:25:6e:80:ff:7e:2d:b8:25:36:dd:87:a1:0c:66:
30:79:02:ba:9f:b2:c9:dc:d3:2d:70:67:99:26:d1:6d:27:68:
e1:7d:14:20:e1:97:7b:e4:7f:85:2f:e8:dd:87:b3:c0:b7:10:
54:67:2a:20:2a:88:6b:b6:2a:80:b3:ba:19:6c:f2:5d:ab:60:
88:9f:72:e8:d7:43:f4:7d:ae:d8:74:d0:62:e7:00:c0:63:94:
3c:35:67:da:14:fb:fa:08:00:eb:65:74:85:0f:46:70:18:d5:
c5:ad:92:a8:41:f7:ff:29:9d:77:b1:30:6e:c5:46:96:2c:17:
91:fe:0c:4a:0f:21:a3:f1:99:82:a8:39:72:0c:e9:fe:1f:99:
8f:39:d3:b5:70:c4:ff:36:c4:e7:b5:df:52:e0:b2:d1:9d:e4:
12:c4:d2:f0:56:6a:ef:dd:84:2d:9b:cb:5a:99:3f:49:e6:6e:
7c:62:36:7c:4f:db:06:38:e0:d0:3e:07:34:2e:bb:cf:75:05:
3b:ac:90:b6:93:4b:e0:4d:b3:d6:b0:c8:46:0c:ba:c4:89:86:
a5:ca:e0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 22:14:37 2025 by rpki-client