Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e3234302e302f32312d3231203d3e203430303231.roa
File: 31332e3134302e3234302e302f32312d3231203d3e203430303231.roa (raw, json)
Hash identifier: sLr59LpIGhO7jQ2gAZUN/qukTnBr2n7C0PWLlwj6YcM=
Subject key identifier: 53:DC:3B:4A:94:E5:4F:3E:8A:C1:E8:4B:C3:47:2F:63:D7:9F:CE:E8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2133F23444FE69F320C8572E80A48FAA3C9E89DE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e3234302e302f32312d3231203d3e203430303231.roa
Signing time: Mon 12 Oct 2026 13:43:14 +0000
ROA not before: Mon 12 Oct 2026 13:38:14 +0000
ROA not after: Mon 11 Oct 2027 13:43:14 +0000
asID: 40021
IP address blocks: 13.140.240.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:33:f2:34:44:fe:69:f3:20:c8:57:2e:80:a4:8f:aa:3c:9e:89:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 12 13:38:14 2026 GMT
Not After : Oct 11 13:43:14 2027 GMT
Subject: CN=53DC3B4A94E54F3E8AC1E84BC3472F63D79FCEE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:77:ea:49:c2:09:37:48:b2:3e:14:d0:58:22:
c3:7f:17:95:67:d4:ad:16:78:58:ab:9f:b2:ca:c8:
7a:b8:5a:7d:24:d1:88:3e:83:bd:7f:c9:9e:6f:71:
ee:80:03:40:b6:fc:61:82:44:95:ae:0f:44:0d:f5:
b3:ce:6a:b3:b7:3c:43:0f:c0:9f:00:62:7e:32:e5:
a0:e1:e6:61:5b:a1:4d:0c:9a:15:a6:b4:80:ac:9e:
fc:02:2c:7e:c2:4b:46:fc:02:6f:c7:aa:aa:78:6e:
b8:40:95:1d:13:a0:84:3c:64:2b:18:1d:47:01:cb:
9e:0a:07:43:c7:f3:48:7e:3c:2e:e9:38:b7:cb:62:
0c:6c:a2:41:bd:d3:af:03:4c:64:35:8a:e3:f5:32:
89:d2:c3:c3:79:88:32:c8:15:68:ce:1b:a5:56:29:
49:7f:cf:df:a1:3c:c8:84:04:5c:b9:1b:38:ee:f2:
a4:23:e7:89:07:d1:99:2a:52:99:55:63:a5:d3:15:
1e:e0:71:fa:c3:0f:71:f2:3c:c0:3b:33:ac:ca:ab:
db:3c:29:64:79:95:ec:80:93:5a:6b:5f:7c:18:6c:
14:14:df:f6:8f:dc:c4:02:f0:58:ec:16:ec:22:e4:
07:cf:54:6a:0b:ef:aa:17:e9:0e:db:14:99:fb:9f:
0c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DC:3B:4A:94:E5:4F:3E:8A:C1:E8:4B:C3:47:2F:63:D7:9F:CE:E8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e3234302e302f32312d3231203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.140.240.0/21
Signature Algorithm: sha256WithRSAEncryption
29:78:8b:b8:66:23:e5:a8:11:3a:de:eb:ad:84:05:e8:04:ee:
11:f6:02:0d:86:df:13:37:a3:53:e1:47:3b:34:7d:37:6d:94:
3d:f6:d2:87:00:14:83:e2:e2:58:32:a3:ba:fb:bb:b0:fe:9c:
9c:f8:d4:50:f6:3c:3b:f7:ef:ed:60:fc:4e:43:1e:97:f3:db:
37:9a:53:5b:ae:8d:ab:2e:4b:e5:55:9e:38:24:04:84:0a:57:
c4:a7:15:97:f8:9c:e2:9f:ed:0b:b0:4b:4e:2a:ab:d0:3a:e2:
a8:c2:ff:b5:54:63:45:f3:42:1c:ac:01:38:bb:66:19:8f:0e:
db:f4:2c:e4:8b:7b:21:ef:aa:00:d7:41:ff:63:a6:be:a4:f8:
ec:f2:a8:fd:0b:e4:bf:90:73:c1:72:93:d7:8b:66:02:94:af:
2b:d7:36:ab:0c:56:d9:23:b8:f9:76:ed:f0:2f:58:94:a5:86:
2e:84:15:91:95:3f:dd:34:7a:24:6f:50:82:59:48:a0:4a:58:
88:e9:29:38:22:2a:c4:f9:4a:83:7c:06:91:bb:43:4a:06:b7:
98:88:ec:24:d9:47:72:91:4e:df:09:a0:8c:64:3e:b5:b5:5c:
46:63:a3:3d:b9:7a:cf:60:e9:be:92:87:47:d8:79:5a:d3:81:
d7:fe:f9:01
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUITPyNET+afMgyFcugKSPqjyeid4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMTIxMzM4MTRaFw0yNzEwMTExMzQzMTRaMDMxMTAvBgNV
BAMTKDUzREMzQjRBOTRFNTRGM0U4QUMxRTg0QkMzNDcyRjYzRDc5RkNFRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkd+pJwgk3SLI+FNBYIsN/F5Vn
1K0WeFirn7LKyHq4Wn0k0Yg+g71/yZ5vce6AA0C2/GGCRJWuD0QN9bPOarO3PEMP
wJ8AYn4y5aDh5mFboU0MmhWmtICsnvwCLH7CS0b8Am/Hqqp4brhAlR0ToIQ8ZCsY
HUcBy54KB0PH80h+PC7pOLfLYgxsokG9068DTGQ1iuP1MonSw8N5iDLIFWjOG6VW
KUl/z9+hPMiEBFy5Gzju8qQj54kH0ZkqUplVY6XTFR7gcfrDD3HyPMA7M6zKq9s8
KWR5leyAk1prX3wYbBQU3/aP3MQC8FjsFuwi5AfPVGoL76oX6Q7bFJn7nwxZAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUU9w7SpTlTz6KwehLw0cvY9efzugwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzMzJlMzEzNDMwMmUzMjM0
MzAyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDMwMzAzMjMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
DYzwMA0GCSqGSIb3DQEBCwUAA4IBAQApeIu4ZiPlqBE63uuthAXoBO4R9gINht8T
N6NT4Uc7NH03bZQ99tKHABSD4uJYMqO6+7uw/pyc+NRQ9jw79+/tYPxOQx6X89s3
mlNbro2rLkvlVZ44JASEClfEpxWX+Jzin+0LsEtOKqvQOuKowv+1VGNF80IcrAE4
u2YZjw7b9Czki3sh76oA10H/Y6a+pPjs8qj9C+S/kHPBcpPXi2YClK8r1zarDFbZ
I7j5du3wL1iUpYYuhBWRlT/dNHokb1CCWUigSliI6Sk4IirE+UqDfAaRu0NKBreY
iOwk2UdykU7fCaCMZD61tVxGY6M9uXrPYOm+kodH2Hla04HX/vkB
-----END CERTIFICATE-----
Generated at Thu Oct 22 20:23:58 2026 by rpki-client