Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa
File: 3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa (raw, json)
Hash identifier: H6z5UgqzzwENibeoaL/jOe9aa5t0uv0+rNtrD0/GlKE=
Subject key identifier: 7C:98:08:6C:B4:7A:FA:3A:C2:E2:C5:06:C8:DE:B7:D6:3E:47:6D:A3
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 3FDBEA0372B0E4649FCF2771C6C3F367464E5D8D
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa
Signing time: Mon 03 Aug 2026 05:49:17 +0000
ROA not before: Mon 03 Aug 2026 05:44:17 +0000
ROA not after: Mon 02 Aug 2027 05:49:17 +0000
asID: 147261
IP address blocks: 103.49.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:db:ea:03:72:b0:e4:64:9f:cf:27:71:c6:c3:f3:67:46:4e:5d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Aug 3 05:44:17 2026 GMT
Not After : Aug 2 05:49:17 2027 GMT
Subject: CN=7C98086CB47AFA3AC2E2C506C8DEB7D63E476DA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:39:f2:d8:bf:26:4b:7e:3a:b0:c7:3c:9e:3d:
80:63:4c:a2:66:93:e2:bd:f1:f9:17:ff:0f:b2:55:
43:7a:e3:14:c8:28:c1:44:e3:ef:45:2e:3d:75:ce:
3d:f3:1b:7d:2a:a4:4e:68:1f:64:8c:ba:b6:35:3b:
cc:14:74:c4:e2:b1:9e:f6:2d:96:56:94:37:72:d6:
d0:49:3e:6b:82:01:d6:3f:81:32:c7:e2:b4:f2:39:
06:1f:38:7d:6b:2b:60:52:cf:14:bf:9d:1d:c4:ac:
2c:e4:4c:30:9a:f1:75:f5:ba:19:a2:00:02:dc:3b:
e4:f0:c6:8c:10:2a:e4:87:06:77:08:b2:34:02:69:
99:b2:cf:dc:ae:8c:5a:bd:7b:31:7a:03:9b:e9:ac:
b9:2a:43:eb:22:38:6f:a7:7f:65:3b:d0:55:b6:1c:
ca:05:19:fd:65:d6:cd:43:80:2f:04:e1:70:cc:0e:
ab:43:6d:52:53:36:ee:87:60:c2:ff:06:a1:74:f8:
14:a8:c3:91:28:1f:5a:60:f6:2f:28:5a:6b:c0:1e:
fe:68:bf:b1:fd:f6:82:a4:fd:a8:a2:46:4f:a8:7f:
57:5c:e1:af:68:4c:45:af:95:03:ce:87:03:11:26:
93:67:60:a8:ee:51:79:ba:ef:6a:b1:02:e0:89:aa:
12:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:98:08:6C:B4:7A:FA:3A:C2:E2:C5:06:C8:DE:B7:D6:3E:47:6D:A3
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.49.131.0/24
Signature Algorithm: sha256WithRSAEncryption
79:eb:01:1f:05:16:7a:f6:26:56:d9:4d:d5:e6:94:d3:2f:01:
7a:ac:68:03:a4:ca:56:57:e6:9a:44:b4:ab:06:3d:50:82:77:
57:0c:1d:79:13:14:b0:6c:15:69:41:8f:35:cc:e0:74:d0:e3:
18:6b:fd:62:83:fd:e0:63:59:65:59:51:fc:12:17:12:db:9d:
32:06:16:85:c2:f8:e5:e5:be:52:28:70:1a:19:25:e1:83:b9:
c1:ba:99:af:77:cf:e5:a2:8e:28:79:4e:34:ca:ca:2d:bb:83:
a6:7a:fb:2b:c2:a3:5f:74:5b:49:bd:8e:30:cd:97:d4:4c:eb:
be:ba:09:08:31:a6:b7:d4:d0:69:2f:96:34:c7:3a:fe:cd:a3:
ec:ec:9c:3f:df:9b:55:17:a1:81:24:38:26:66:4d:b9:d4:5d:
1c:85:51:a5:cf:4a:48:f5:d7:fe:9e:94:06:e7:30:21:29:51:
24:ac:b3:9a:7a:d1:16:b5:d3:f2:09:8e:83:39:3d:33:b6:08:
f5:7d:5e:08:ad:3f:ee:18:b9:2e:de:cc:68:db:a4:85:7a:5a:
d8:92:56:28:25:9f:c4:d5:8a:dd:c4:16:72:c5:fb:fa:dc:25:
2c:5a:c6:a4:4f:54:f0:15:0a:29:e9:32:0c:e4:96:e6:39:d8:
f0:9d:6e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 00:08:35 2026 by rpki-client