Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133312e302f32342d3234203d3e20323133373131.roa
File: 3130332e34392e3133312e302f32342d3234203d3e20323133373131.roa (raw, json)
Hash identifier: 0KQImRtVxQSlo2IkiWEm4Ta1ecdBVyx0gErMixeusbs=
Subject key identifier: A0:85:63:00:DF:24:17:97:0D:C4:40:E2:C5:A9:A2:38:6C:5C:5C:07
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 4B0C51AEE50D2B196569050BF2346FB420F731BF
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133312e302f32342d3234203d3e20323133373131.roa
Signing time: Thu 06 Nov 2025 17:24:23 +0000
ROA not before: Thu 06 Nov 2025 17:19:23 +0000
ROA not after: Thu 05 Nov 2026 17:24:23 +0000
asID: 213711
IP address blocks: 103.49.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Nov 2025 12:53:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:0c:51:ae:e5:0d:2b:19:65:69:05:0b:f2:34:6f:b4:20:f7:31:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Nov 6 17:19:23 2025 GMT
Not After : Nov 5 17:24:23 2026 GMT
Subject: CN=A0856300DF2417970DC440E2C5A9A2386C5C5C07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2e:57:91:51:88:39:ae:23:5d:69:ee:38:f0:
89:06:e3:bf:57:b4:9f:9a:ba:a9:3f:fa:af:36:74:
31:17:35:cf:d3:37:f7:5a:65:c7:4b:50:6d:6a:dc:
7c:92:10:9c:84:0e:a1:8f:74:8f:f2:b4:ab:66:13:
96:c1:fe:c3:37:46:62:64:e7:bb:53:5c:3f:a4:3f:
dd:d8:b4:83:d2:ed:b0:8f:a1:ef:75:91:08:74:3e:
c2:af:f0:fa:4e:76:97:79:db:f7:59:08:35:6f:57:
b0:4e:1c:f6:9d:ff:9d:09:00:79:5e:ab:e6:07:be:
de:d2:61:cc:34:57:59:8d:b9:9f:35:c9:6d:5d:52:
d5:79:fb:50:ef:c5:5b:94:ad:91:f6:c3:62:b8:3f:
99:61:c8:17:0a:d9:da:f3:5a:ab:39:14:65:ea:7b:
1e:2c:ad:9c:fe:12:06:d5:eb:af:2c:56:eb:67:3e:
dd:e9:89:ec:3f:96:c6:5e:f9:ef:20:1c:e0:46:37:
78:93:5e:ce:03:0a:05:54:25:82:e5:d5:df:5b:7b:
50:e3:b4:46:d5:67:91:6d:c6:90:65:58:4b:ac:60:
97:3f:dc:14:10:1b:ef:8a:14:46:ed:b2:20:50:d4:
86:db:b0:87:5a:7b:06:57:34:af:ba:eb:28:44:d7:
56:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:85:63:00:DF:24:17:97:0D:C4:40:E2:C5:A9:A2:38:6C:5C:5C:07
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133312e302f32342d3234203d3e20323133373131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.49.131.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:89:a5:84:42:0d:f3:cb:92:61:61:4a:6d:5b:74:1c:a8:7a:
24:e0:b2:9d:87:79:be:14:15:c8:b8:3f:6a:e9:c3:3d:ce:14:
41:87:96:c4:fe:33:36:66:74:de:45:6d:e2:fb:ae:17:30:5c:
bc:da:e2:83:a3:69:69:e9:f2:31:2e:ec:88:73:a8:53:5c:84:
f8:59:31:0e:44:f3:34:6d:eb:0e:85:6f:28:b2:35:44:d4:7a:
58:1d:c9:20:6e:e8:16:a5:ce:78:6c:5a:94:bc:e4:2b:ce:0d:
56:72:b9:af:4b:b9:d6:9f:cb:94:93:16:78:02:ff:1c:e5:ad:
7a:64:c8:5a:d2:10:eb:3b:54:9b:70:c4:ae:17:b2:ff:f5:2e:
77:b5:ad:25:15:a4:54:5e:34:8a:3b:da:02:b2:68:47:88:3c:
8d:bd:45:7c:cc:ed:87:5a:2c:68:bb:6c:21:90:92:cd:23:61:
4a:68:60:b8:8d:d3:0b:6c:7b:d6:be:e4:03:3e:ab:74:ec:e4:
34:ed:df:37:50:5f:15:a0:75:1a:04:39:cb:b4:80:70:57:35:
4f:03:da:7c:c9:b6:a7:25:18:ef:b2:aa:5d:ea:49:00:08:61:
ef:a6:64:88:e2:2e:20:6a:15:c5:33:f2:2d:87:15:bd:a6:44:
f0:8d:d2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 14 06:38:27 2025 by rpki-client