Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e33322e302f32302d3230203d3e203430303231.roa
File: 31332e3134302e33322e302f32302d3230203d3e203430303231.roa (raw, json)
Hash identifier: CYFSZPzb0QC9hMlVmlf1TXz9MYSLi8n6fyo9+niW0qk=
Subject key identifier: 02:59:66:5F:B4:76:11:8E:C9:E3:02:1D:2C:00:25:6C:1D:EA:B8:D2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3A014AF360A4CBA466E96E1EAB75E43A79EDB2C6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e33322e302f32302d3230203d3e203430303231.roa
Signing time: Wed 19 Aug 2026 06:55:04 +0000
ROA not before: Wed 19 Aug 2026 06:50:04 +0000
ROA not after: Wed 18 Aug 2027 06:55:04 +0000
asID: 40021
IP address blocks: 13.140.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:01:4a:f3:60:a4:cb:a4:66:e9:6e:1e:ab:75:e4:3a:79:ed:b2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 19 06:50:04 2026 GMT
Not After : Aug 18 06:55:04 2027 GMT
Subject: CN=0259665FB476118EC9E3021D2C00256C1DEAB8D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:58:73:6d:b5:82:94:4e:1d:6c:52:22:6f:1b:
97:2d:1d:64:aa:c3:b3:56:1b:89:38:01:fd:63:f8:
48:f0:5d:30:19:ed:a4:90:08:80:0f:d6:73:fe:be:
44:34:c8:f8:93:f5:29:50:37:d6:01:da:ec:18:b4:
f7:a7:5c:c9:8d:c5:cd:51:53:97:9b:a3:b6:12:1a:
7b:24:24:13:6f:e0:b4:1a:a1:d5:3c:3c:a2:76:45:
a7:4e:18:39:fa:dc:6f:b1:f3:69:2c:9e:0f:5a:70:
07:83:24:7a:0d:94:75:bc:66:64:8f:24:32:87:e3:
e3:ac:e2:0f:24:3c:7c:de:f9:3d:af:99:c0:cc:8f:
22:13:ab:ea:89:92:46:2b:d6:6a:74:3d:89:45:00:
15:6d:74:d8:f3:eb:0a:11:6f:13:96:58:f6:c6:88:
b7:7c:6c:d8:ea:54:37:1e:5e:96:2d:be:aa:73:7e:
50:b8:11:b1:d7:0c:e9:28:94:bc:ab:e3:3c:a3:95:
94:e3:26:99:3d:0a:31:b6:cc:bf:b8:ab:fd:81:72:
47:db:00:c0:7a:e6:99:c3:8f:16:25:7c:17:ae:08:
e1:3a:20:f0:6a:87:c3:5c:be:d1:89:84:f6:76:12:
9d:6a:7b:b8:f5:ff:fc:46:17:b6:57:77:17:4f:d9:
ea:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:59:66:5F:B4:76:11:8E:C9:E3:02:1D:2C:00:25:6C:1D:EA:B8:D2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e33322e302f32302d3230203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.140.32.0/20
Signature Algorithm: sha256WithRSAEncryption
4d:ad:c7:25:d5:b0:44:57:61:28:94:b6:ca:7d:c5:8c:1d:61:
52:9d:78:9a:9d:33:52:8a:97:64:24:f7:1b:25:23:de:b0:3f:
2b:5d:5f:a5:e3:63:fd:bf:02:ae:e7:18:f5:08:40:e1:1d:26:
3c:93:22:a5:9d:c4:c3:db:7d:b3:5e:9b:09:4d:f4:18:a7:9a:
36:65:61:60:81:f4:a8:c5:4b:01:3b:74:36:96:21:b2:32:a1:
eb:03:fd:ef:72:30:6b:20:f9:46:61:c3:ee:ea:84:d6:4f:35:
22:89:27:c8:d2:c9:08:bf:1d:6f:5e:ce:b4:3f:7c:ff:68:18:
ba:8f:6f:22:d7:48:72:0c:f5:c4:5d:d0:f9:7d:b9:ef:55:4a:
f6:b8:33:9a:16:1c:a8:2a:a0:b0:eb:fe:3c:0b:52:a2:80:2e:
91:e8:48:d3:60:25:fc:bb:38:ba:b3:e0:c9:88:36:eb:43:0a:
30:42:ee:34:61:c9:0d:19:e5:56:2d:d1:70:a9:fa:c7:d6:53:
1d:bb:fd:d1:c8:a9:78:b2:27:3c:05:97:2f:26:c5:25:57:6d:
aa:1c:c5:a8:55:87:36:0e:7c:ff:b9:b9:c9:1d:eb:15:7a:e4:
bb:bc:47:30:e9:23:cf:33:2d:02:c7:ca:f0:ce:12:b3:b8:af:
c1:5f:2e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:41:55 2026 by rpki-client