Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e34392e302f32342d3234203d3e20323136323533.roa
File: 31332e3134302e34392e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: 7V5OOGQ4h58LMnp8HiW8rxZV5UlZ2SVvjn/sJGv2OMM=
Subject key identifier: 5E:68:A4:A9:8B:E4:37:8B:9A:0A:9E:E7:8C:97:E0:7D:62:79:A3:A5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 185F12DA1E54860C019B900EB46ED0257E24392B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e34392e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 03 Jul 2026 21:44:14 +0000
ROA not before: Fri 03 Jul 2026 21:39:14 +0000
ROA not after: Fri 02 Jul 2027 21:44:14 +0000
asID: 216253
IP address blocks: 13.140.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:5f:12:da:1e:54:86:0c:01:9b:90:0e:b4:6e:d0:25:7e:24:39:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 3 21:39:14 2026 GMT
Not After : Jul 2 21:44:14 2027 GMT
Subject: CN=5E68A4A98BE4378B9A0A9EE78C97E07D6279A3A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cd:da:e8:89:7b:a8:a7:2e:62:07:b1:74:d8:
c0:5e:7e:4d:a2:db:f8:a1:d3:ff:24:dd:ff:dd:35:
fd:9c:bb:67:07:25:86:3b:95:8f:78:bd:2e:44:8c:
98:8e:5b:78:e9:4b:1d:5d:23:1c:02:5e:57:74:9b:
cd:bc:62:ba:d2:f0:74:69:7f:11:06:45:08:1e:9f:
4e:84:59:90:16:9d:64:e4:02:ea:23:e6:33:44:57:
9e:14:cf:5e:e2:6d:d4:0a:fc:c2:24:58:9f:78:1e:
15:17:a4:98:55:c9:31:84:38:ff:08:97:37:19:d0:
4d:8c:c9:55:5e:8a:c9:50:d2:8a:f9:41:94:88:d3:
9a:b6:9e:2c:49:fe:3c:ce:71:77:01:47:bb:25:ed:
41:81:c4:cc:23:b5:5d:8c:f6:e4:b9:16:df:f2:2f:
c8:59:55:38:1f:57:26:91:ce:11:b0:a1:e7:70:c7:
4b:23:7e:2a:79:16:28:59:92:fb:a1:2d:b0:0c:1f:
ee:1d:c5:84:3b:a5:3d:e5:ef:0c:be:86:d8:a9:88:
ee:07:f0:da:4b:4f:75:66:35:ca:a3:19:f9:d5:8a:
2e:8c:f1:fc:eb:64:32:ac:25:52:47:25:f9:b4:6b:
63:c2:ec:3e:d6:90:1e:13:37:08:40:bd:65:75:9c:
93:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:68:A4:A9:8B:E4:37:8B:9A:0A:9E:E7:8C:97:E0:7D:62:79:A3:A5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e34392e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.140.49.0/24
Signature Algorithm: sha256WithRSAEncryption
33:f6:b5:a7:df:a0:e0:72:cf:11:40:99:a3:dd:2f:bd:5b:a1:
52:ff:1b:eb:26:d7:1d:44:8e:42:60:36:c2:98:c6:4e:5e:bc:
3c:b1:4c:60:2e:4f:b7:79:c6:ff:76:40:d1:bd:dc:13:f0:d8:
0b:7a:d2:59:a9:c1:c9:6d:46:21:ad:22:ce:88:60:41:a7:04:
79:33:5c:20:7a:09:e3:05:19:35:6d:5b:a5:14:3e:de:2e:d1:
b8:d1:53:38:54:2f:c8:e9:77:3c:f0:01:e3:70:81:7b:77:bd:
c7:f2:8e:ea:06:41:db:97:ca:d1:6e:f6:43:96:91:83:51:9e:
9f:55:5c:b0:ac:e1:e2:bc:f5:9b:8a:a4:6d:67:2b:01:5b:03:
ae:79:e2:e6:37:21:6a:cc:12:a5:95:58:35:f4:15:90:4f:a5:
3d:3d:7e:b4:bf:b3:be:02:0e:07:6f:20:8e:0e:e6:7f:5b:b6:
fe:30:63:c1:1d:6b:33:af:de:66:74:4c:dc:1d:e5:2e:86:06:
d0:48:ae:f5:82:f8:a8:59:8a:81:a0:28:81:85:5d:12:42:75:
73:06:49:c9:8d:8a:eb:b3:05:06:6c:c0:ea:93:c6:e2:dd:12:
b0:cc:dd:fe:26:43:97:2d:37:4d:5c:97:80:78:c5:e6:90:d3:
19:fb:d0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:48 2026 by rpki-client