Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e33312e302f32342d3234203d3e20313937393935.roa
File: 31332e3134302e33312e302f32342d3234203d3e20313937393935.roa (raw, json)
Hash identifier: WsOFJG0M6EpC+gzjEAI5tmU+iNaLhDavyYQLgctHp5A=
Subject key identifier: 4C:EC:D0:6F:C6:2E:58:CB:00:88:C9:DC:4A:75:F8:59:2D:30:C9:26
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 28135B86276EDF38DFCE06E3379621EC0324D5A1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e33312e302f32342d3234203d3e20313937393935.roa
Signing time: Tue 25 Aug 2026 14:58:08 +0000
ROA not before: Tue 25 Aug 2026 14:53:08 +0000
ROA not after: Tue 24 Aug 2027 14:58:08 +0000
asID: 197995
IP address blocks: 13.140.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:13:5b:86:27:6e:df:38:df:ce:06:e3:37:96:21:ec:03:24:d5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 25 14:53:08 2026 GMT
Not After : Aug 24 14:58:08 2027 GMT
Subject: CN=4CECD06FC62E58CB0088C9DC4A75F8592D30C926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:76:c4:00:08:b9:41:0b:cb:95:ea:73:c0:05:
da:13:31:8c:28:0f:55:42:2b:e3:c0:68:ed:4f:e6:
67:64:b9:ac:89:29:b0:23:37:65:3b:64:3d:e8:c5:
d5:c3:97:20:f0:47:8c:cd:36:a8:e7:ed:07:50:24:
6f:4b:5a:b7:35:26:10:7f:4c:57:27:54:1e:1d:f2:
f5:e9:41:ce:ac:e0:24:0d:cd:b8:58:95:28:a6:ed:
77:ad:aa:08:5f:ae:16:1f:a8:a4:ea:43:1b:99:35:
a0:83:de:61:bb:0f:74:8c:eb:0d:a0:f3:60:da:91:
66:2f:a3:60:f5:2b:77:41:32:20:e2:27:8c:f2:89:
54:21:a6:43:40:6b:bf:e9:d6:3a:c9:a8:60:cb:81:
6f:35:85:ee:52:b7:bb:da:98:d6:45:b9:5c:e2:db:
23:04:19:b8:de:f6:e8:9f:88:72:59:83:6c:09:27:
ab:7d:50:9d:0b:13:5a:b9:b3:03:37:b5:ff:b1:8e:
8a:c5:c0:24:c1:f6:8d:0e:75:2e:62:05:92:51:98:
ad:96:13:04:a2:93:57:f7:dc:ce:8c:34:ee:51:6c:
e7:b1:85:14:99:a4:8e:90:12:90:7f:2b:56:c6:59:
65:01:83:d4:dd:ca:de:35:93:a3:a4:78:96:03:55:
c3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EC:D0:6F:C6:2E:58:CB:00:88:C9:DC:4A:75:F8:59:2D:30:C9:26
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e33312e302f32342d3234203d3e20313937393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.140.31.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:35:43:07:19:93:60:90:43:81:31:53:f0:4b:b8:dd:fa:e6:
7d:d5:29:92:b0:09:d2:30:af:40:4a:56:b2:13:b3:2d:eb:1e:
ac:b1:cc:6c:f2:58:d8:96:7d:e7:86:f5:96:ca:90:b0:da:91:
da:c7:cd:bd:78:d6:1c:29:54:59:2f:83:e5:3e:58:5d:f3:d7:
f8:cb:5e:24:b2:3e:7e:03:d6:f9:14:45:2e:18:e6:3d:10:91:
e1:48:ad:3f:40:be:48:3a:6a:be:af:f9:e0:c8:2b:32:83:7b:
5d:cf:7a:7d:85:6f:46:c8:d8:d1:7c:ca:50:1e:a2:97:8c:a9:
55:a2:30:9c:86:17:31:66:02:3a:0c:cd:ed:10:1a:a0:16:fe:
91:52:24:3a:20:d0:89:4d:62:01:4e:a9:ac:28:e6:55:ba:fc:
74:b1:53:24:4c:0e:ec:99:7c:a3:ad:25:a1:76:d2:37:48:b8:
8e:f0:c3:db:81:ba:fc:17:b0:da:7c:98:0b:f2:1f:2c:5f:66:
5d:76:f7:fc:84:d0:f3:b5:5b:98:15:d7:88:e1:1b:c2:48:56:
2c:4e:43:17:bd:dd:08:da:68:97:46:4c:45:76:ca:6d:0f:53:
97:55:1c:56:6e:a3:43:ac:35:51:61:43:01:e8:d5:b8:35:c6:
4b:90:11:99
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUKBNbhidu3zjfzgbjN5Yh7AMk1aEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MjUxNDUzMDhaFw0yNzA4MjQxNDU4MDhaMDMxMTAvBgNV
BAMTKDRDRUNEMDZGQzYyRTU4Q0IwMDg4QzlEQzRBNzVGODU5MkQzMEM5MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKdsQACLlBC8uV6nPABdoTMYwo
D1VCK+PAaO1P5mdkuayJKbAjN2U7ZD3oxdXDlyDwR4zNNqjn7QdQJG9LWrc1JhB/
TFcnVB4d8vXpQc6s4CQNzbhYlSim7XetqghfrhYfqKTqQxuZNaCD3mG7D3SM6w2g
82DakWYvo2D1K3dBMiDiJ4zyiVQhpkNAa7/p1jrJqGDLgW81he5St7vamNZFuVzi
2yMEGbje9uifiHJZg2wJJ6t9UJ0LE1q5swM3tf+xjorFwCTB9o0OdS5iBZJRmK2W
EwSik1f33M6MNO5RbOexhRSZpI6QEpB/K1bGWWUBg9Tdyt41k6OkeJYDVcMhAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUTOzQb8YuWMsAiMncSnX4WS0wySYwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzMzJlMzEzNDMwMmUzMzMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzOTM3MzkzOTM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
DYwfMA0GCSqGSIb3DQEBCwUAA4IBAQA/NUMHGZNgkEOBMVPwS7jd+uZ91SmSsAnS
MK9ASlayE7Mt6x6sscxs8ljYln3nhvWWypCw2pHax829eNYcKVRZL4PlPlhd89f4
y14ksj5+A9b5FEUuGOY9EJHhSK0/QL5IOmq+r/ngyCsyg3tdz3p9hW9GyNjRfMpQ
HqKXjKlVojCchhcxZgI6DM3tEBqgFv6RUiQ6INCJTWIBTqmsKOZVuvx0sVMkTA7s
mXyjrSWhdtI3SLiO8MPbgbr8F7DafJgL8h8sX2Zddvf8hNDztVuYFdeI4RvCSFYs
TkMXvd0I2miXRkxFdsptD1OXVRxWbqNDrDVRYUMB6NW4NcZLkBGZ
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:44 2026 by rpki-client