Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e3232342e302f32302d3230203d3e203430303231.roa
File: 31332e3134302e3232342e302f32302d3230203d3e203430303231.roa (raw, json)
Hash identifier: vwIgJ5bA9xkhlTrdbgpimaqYXFiKMZbusSLuNbNx/UQ=
Subject key identifier: 98:1A:46:A8:69:3F:96:16:81:86:BF:F6:33:16:9A:04:C4:48:84:A2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7E6A2F1FC3DFE8279B146BD124265783BAF91357
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e3232342e302f32302d3230203d3e203430303231.roa
Signing time: Mon 12 Oct 2026 13:43:12 +0000
ROA not before: Mon 12 Oct 2026 13:38:12 +0000
ROA not after: Mon 11 Oct 2027 13:43:12 +0000
asID: 40021
IP address blocks: 13.140.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:6a:2f:1f:c3:df:e8:27:9b:14:6b:d1:24:26:57:83:ba:f9:13:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 12 13:38:12 2026 GMT
Not After : Oct 11 13:43:12 2027 GMT
Subject: CN=981A46A8693F96168186BFF633169A04C44884A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bf:76:44:95:06:85:b0:25:5e:64:fe:32:2c:
58:b1:e1:0e:fc:ad:ef:59:bb:51:df:c0:80:b0:9c:
64:02:09:4f:2f:d4:ac:09:dc:d8:86:c2:6f:22:58:
6f:55:66:c1:4e:8c:f1:08:50:10:28:e2:aa:06:32:
45:cd:91:e1:60:f6:1e:b2:02:2b:b5:60:a5:54:53:
b5:17:52:e8:b1:8d:14:1e:91:29:e4:77:80:be:2e:
0d:e8:22:cc:3d:3a:f7:18:b6:5d:ae:f4:41:09:94:
cd:ca:f0:4e:4e:40:f7:05:61:f6:ec:2d:8c:29:9e:
b1:bf:2a:b1:c0:42:84:4c:41:05:c6:c7:89:72:0d:
fd:c6:29:84:4c:eb:a8:36:88:ec:53:b5:a4:b4:9d:
06:12:8b:fe:38:8f:fb:9a:a4:6b:72:9d:4f:b4:73:
5d:d2:02:54:6e:c2:81:60:15:cd:2b:25:d5:99:07:
8e:74:f2:b5:8e:27:1a:25:f9:e2:1e:36:d0:8b:3c:
f0:44:6d:63:6c:23:a5:0b:8e:8d:83:c1:7c:bf:19:
7c:68:18:5f:e3:06:2e:eb:03:8d:70:e6:89:a5:5b:
bf:38:43:65:eb:8a:b4:e5:95:e8:88:18:bd:62:a8:
f0:b2:83:2f:89:9e:1b:3b:89:93:25:50:dc:4e:82:
7b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1A:46:A8:69:3F:96:16:81:86:BF:F6:33:16:9A:04:C4:48:84:A2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e3232342e302f32302d3230203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.140.224.0/20
Signature Algorithm: sha256WithRSAEncryption
43:29:3d:37:f2:50:98:bf:55:bc:31:52:bb:98:e4:ca:30:e2:
e2:b4:6f:ad:e7:b1:cc:41:e1:4a:40:b2:e7:05:86:82:80:0c:
a0:e6:a9:06:e6:ab:f7:94:8c:a5:fa:5b:c4:8f:90:f9:f1:82:
05:84:73:44:f7:9f:15:88:8c:03:13:97:ec:27:37:32:20:36:
cc:f1:a4:fd:83:15:09:a6:50:1a:fb:1e:a1:ca:8a:5f:88:31:
19:cf:bf:50:4a:28:5a:0b:df:96:16:a8:1c:77:25:c1:22:bb:
56:4b:58:ad:f5:a3:75:01:fe:84:86:38:6d:07:f9:c7:87:3e:
08:35:9c:6d:24:fb:7f:03:d7:cc:7b:dd:a8:75:7c:2a:1b:b5:
d7:c8:34:24:c9:b6:d5:16:be:ac:46:b0:8c:89:a0:45:72:89:
c3:61:df:9c:44:f5:d1:4b:04:8b:06:f7:17:d7:d6:7a:a8:64:
66:5e:84:ee:3e:7d:03:d2:0c:5b:13:97:4b:33:0f:95:09:44:
37:d2:ff:df:cb:d3:cb:b3:28:15:1a:7d:d9:1c:d5:e7:d7:c1:
c2:d6:65:c1:f0:51:39:bc:73:05:08:f0:27:23:6a:b7:60:5d:
bd:6c:c4:c8:39:88:9a:13:7d:35:a0:e1:3b:e9:5d:68:0b:ca:
30:d2:9f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:07 2026 by rpki-client