Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e32362e302f32342d3234203d3e20323136313531.roa
File: 31332e3134302e32362e302f32342d3234203d3e20323136313531.roa (raw, json)
Hash identifier: 6on1HR5Hf5Cryb4mCVPgnxRfLZpKXWvhxVL4kvbNOHU=
Subject key identifier: 40:2C:6A:A8:4E:68:D7:0D:D8:DA:D2:E7:8B:EC:6F:AC:12:D3:5C:FA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 17B2CA272FA5A9F410114F1B9A9838E3DA676254
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e32362e302f32342d3234203d3e20323136313531.roa
Signing time: Fri 24 Apr 2026 18:47:35 +0000
ROA not before: Fri 24 Apr 2026 18:42:35 +0000
ROA not after: Fri 23 Apr 2027 18:47:35 +0000
asID: 216151
IP address blocks: 13.140.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 01:40:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:b2:ca:27:2f:a5:a9:f4:10:11:4f:1b:9a:98:38:e3:da:67:62:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 24 18:42:35 2026 GMT
Not After : Apr 23 18:47:35 2027 GMT
Subject: CN=402C6AA84E68D70DD8DAD2E78BEC6FAC12D35CFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:7a:e9:41:6d:23:16:5d:af:5b:8f:80:4d:
10:04:eb:72:cf:56:ab:fe:01:63:02:4d:8f:c6:8e:
1e:0b:c9:86:a7:ec:d7:51:51:5b:93:c4:fa:84:de:
c9:25:c4:71:40:5f:b9:84:6d:8c:bc:d9:e4:56:74:
49:e1:2f:d5:9b:ce:2e:7a:2a:93:66:fc:f6:37:c4:
3d:86:f0:b2:de:6c:41:1d:52:7c:85:af:29:25:7a:
78:95:b8:29:e5:9d:f3:2a:f8:b7:9f:5f:f3:f2:5c:
af:f6:40:36:78:06:3a:96:25:f1:70:fe:7e:f8:ff:
0b:09:a6:6f:e5:6c:d6:af:62:62:21:1b:85:5d:5c:
09:2e:56:d9:c4:f4:2a:89:2b:9b:1a:d9:bc:87:a4:
12:18:d6:2b:67:68:d9:0f:23:fc:dd:92:48:3a:e0:
00:6e:5f:7e:1a:00:15:86:aa:c2:2c:b2:a0:50:cc:
2e:a1:67:6f:d5:53:24:92:35:6c:d5:aa:7a:e7:08:
31:d4:06:66:7b:de:5f:16:fb:ea:2d:6c:cb:d7:3f:
56:c9:67:95:65:bf:ff:77:cf:14:cb:c4:47:94:ea:
b5:45:32:fa:90:46:df:7b:93:e4:72:13:50:0b:07:
fc:bd:e4:8d:ea:07:43:71:93:79:bf:14:45:5e:ff:
ef:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2C:6A:A8:4E:68:D7:0D:D8:DA:D2:E7:8B:EC:6F:AC:12:D3:5C:FA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e32362e302f32342d3234203d3e20323136313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.140.26.0/24
Signature Algorithm: sha256WithRSAEncryption
58:8f:1f:d3:5f:76:7d:c2:e7:c9:bd:1f:d0:7f:82:01:95:88:
47:c0:20:8e:6f:30:ad:37:e3:c5:f7:0d:eb:6a:b0:0d:de:84:
5f:95:1f:ca:7d:00:94:95:9e:86:78:70:9e:23:41:a8:10:a4:
fc:13:ea:da:8b:72:06:be:7b:17:13:0f:f5:92:2e:00:12:a0:
57:51:8c:89:d1:92:63:69:59:33:df:28:d2:99:95:09:e2:38:
d1:32:29:df:ca:fb:57:cb:59:d9:8a:cc:fc:a1:27:09:f6:29:
60:36:75:76:6b:7f:75:14:4f:7e:65:2e:4a:1f:42:f0:3b:5e:
d7:f8:48:2e:06:f8:3a:27:54:76:6e:fe:28:c0:ab:36:40:df:
03:d2:01:10:c6:51:d1:37:32:3c:f1:d3:ac:7d:48:e7:53:4e:
b2:09:24:b8:9b:ae:75:8f:49:08:cb:10:32:65:9d:bd:7a:e3:
2c:4c:c3:9d:28:2f:30:65:87:60:05:e9:fc:3f:8f:ac:e6:0e:
75:04:eb:dc:49:81:90:d3:67:4f:4b:29:8c:60:3c:09:ed:12:
6a:fc:2c:19:2d:45:aa:5b:53:b7:01:c7:d5:52:06:1d:7a:dd:
c9:09:12:18:8d:d8:ab:7d:03:9e:b6:97:a9:5e:5e:8e:ba:7a:
38:fc:7f:c1
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUF7LKJy+lqfQQEU8bmpg449pnYlQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA0MjQxODQyMzVaFw0yNzA0MjMxODQ3MzVaMDMxMTAvBgNV
BAMTKDQwMkM2QUE4NEU2OEQ3MEREOERBRDJFNzhCRUM2RkFDMTJEMzVDRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+/nrpQW0jFl2vW4+ATRAE63LP
Vqv+AWMCTY/Gjh4LyYan7NdRUVuTxPqE3sklxHFAX7mEbYy82eRWdEnhL9Wbzi56
KpNm/PY3xD2G8LLebEEdUnyFrykleniVuCnlnfMq+LefX/PyXK/2QDZ4BjqWJfFw
/n74/wsJpm/lbNavYmIhG4VdXAkuVtnE9CqJK5sa2byHpBIY1itnaNkPI/zdkkg6
4ABuX34aABWGqsIssqBQzC6hZ2/VUySSNWzVqnrnCDHUBmZ73l8W++otbMvXP1bJ
Z5Vlv/93zxTLxEeU6rVFMvqQRt97k+RyE1ALB/y95I3qB0Nxk3m/FEVe/+/hAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUQCxqqE5o1w3Y2tLni+xvrBLTXPowHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzMzJlMzEzNDMwMmUzMjM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM2MzEzNTMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
DYwaMA0GCSqGSIb3DQEBCwUAA4IBAQBYjx/TX3Z9wufJvR/Qf4IBlYhHwCCObzCt
N+PF9w3rarAN3oRflR/KfQCUlZ6GeHCeI0GoEKT8E+rai3IGvnsXEw/1ki4AEqBX
UYyJ0ZJjaVkz3yjSmZUJ4jjRMinfyvtXy1nZisz8oScJ9ilgNnV2a391FE9+ZS5K
H0LwO17X+EguBvg6J1R2bv4owKs2QN8D0gEQxlHRNzI88dOsfUjnU06yCSS4m651
j0kIyxAyZZ29euMsTMOdKC8wZYdgBen8P4+s5g51BOvcSYGQ02dPSymMYDwJ7RJq
/CwZLUWqW1O3AcfVUgYdet3JCRIYjdirfQOetpepXl6Ouno4/H/B
-----END CERTIFICATE-----
Generated at Wed Apr 29 09:02:32 2026 by rpki-client