Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133312e302f32342d3234203d3e20323133373131.roa
File: 3130332e34392e3133312e302f32342d3234203d3e20323133373131.roa (raw, json)
Hash identifier: YaV2coN10mtSdMCwpunQHhnXdXWjWsC3QeS46Z+3lrE=
Subject key identifier: 79:34:A2:C9:E4:94:9C:14:90:9E:06:3E:35:2D:01:B5:64:D0:FD:17
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 040A8EC1348AB8FF00D8AD2DE5B9041983CD69B1
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133312e302f32342d3234203d3e20323133373131.roa
Signing time: Thu 08 Oct 2026 17:49:36 +0000
ROA not before: Thu 08 Oct 2026 17:44:36 +0000
ROA not after: Thu 07 Oct 2027 17:49:36 +0000
asID: 213711
IP address blocks: 103.49.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:0a:8e:c1:34:8a:b8:ff:00:d8:ad:2d:e5:b9:04:19:83:cd:69:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Oct 8 17:44:36 2026 GMT
Not After : Oct 7 17:49:36 2027 GMT
Subject: CN=7934A2C9E4949C14909E063E352D01B564D0FD17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:f0:22:f1:58:6d:47:55:8b:c9:60:dd:8d:
8b:e2:73:5d:7a:0f:66:33:df:0e:bf:37:4c:d9:40:
f8:e7:f1:16:f0:f5:1d:b6:e4:af:28:e7:db:9e:3c:
de:8c:9c:de:a3:ec:40:d9:84:37:cd:90:f3:27:a4:
7d:95:7b:f4:65:43:b5:89:6e:86:be:3d:7c:44:d6:
33:f2:78:50:d4:40:66:7d:c4:1b:61:c7:0f:42:86:
75:3d:89:12:6c:6c:83:9d:92:f8:cc:8e:df:fa:98:
08:14:3b:d1:0b:97:de:e2:70:c0:3d:38:9d:f1:16:
e9:fa:00:1a:bf:f6:4b:74:d7:9e:a1:18:9d:03:a1:
a6:5a:3b:70:66:16:7c:0b:22:be:4c:a2:b5:8a:9d:
a7:6f:c0:4e:f8:b7:5e:5e:8d:cb:c6:7c:97:49:54:
12:48:04:bb:a1:5a:f1:3d:91:3c:f1:1e:d1:8c:6a:
63:27:20:49:d9:f4:b9:8c:95:14:1c:34:61:61:8a:
2f:69:d6:e2:5f:81:d6:50:93:a6:0a:02:96:c7:99:
a5:6c:db:be:32:a5:4d:9d:5c:f0:d6:31:59:f8:9e:
9f:c5:45:9c:93:60:d4:2f:a4:03:b1:74:13:d1:f7:
e5:10:52:9a:68:85:02:1a:6b:8a:71:6d:7d:d7:cd:
08:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:34:A2:C9:E4:94:9C:14:90:9E:06:3E:35:2D:01:B5:64:D0:FD:17
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133312e302f32342d3234203d3e20323133373131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.49.131.0/24
Signature Algorithm: sha256WithRSAEncryption
12:26:67:98:4f:b2:12:8c:4e:0a:76:d6:06:41:6d:14:d2:bc:
40:0e:d2:38:0f:20:c6:77:1a:07:6c:4d:59:46:26:84:5c:dd:
52:62:8d:c3:70:86:40:54:ef:9a:c9:0f:12:7e:9e:1c:a5:18:
81:8f:55:c1:9f:34:b8:12:1a:43:7a:14:79:a3:1e:4a:a0:44:
aa:55:c8:18:44:43:67:14:0c:72:12:44:8a:1e:1d:29:d1:a3:
64:79:e4:5f:11:fe:3d:c4:b3:02:24:55:58:53:67:6b:60:1e:
68:fd:c8:10:2d:ee:23:e3:d4:57:4e:1c:ce:93:12:e2:af:32:
a2:d7:e4:46:5f:b2:b6:be:b0:70:e3:1e:2f:d2:2c:93:76:95:
90:c3:a7:7a:e1:6b:28:55:fc:50:c5:eb:62:a0:a7:00:e5:7e:
b5:f4:ba:62:39:f0:3a:f2:01:68:cf:60:31:af:0a:9b:4b:b7:
2f:fb:8a:ad:d5:7c:82:a6:d1:a3:5a:4a:85:35:98:2a:e4:3b:
0f:aa:4d:fb:55:74:9e:8a:a6:55:22:25:b9:50:b0:42:d9:47:
21:d9:82:c6:f4:d6:5c:c5:9c:ab:48:41:06:13:73:9a:60:ad:
47:be:92:54:33:ec:9d:42:b5:ee:61:5a:7b:a6:7f:f1:b8:d4:
ce:8c:28:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 09:18:32 2026 by rpki-client