Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e35302e302f32342d3234203d3e20323136323533.roa
File: 31332e3134302e35302e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: fj2zE5rPPTkMm5hZYhCKmWtOcKTjx+kGgxrgAnmGkL8=
Subject key identifier: 8F:5B:48:47:7E:97:2A:9D:92:6B:F4:B4:42:0A:C6:DD:0F:10:C0:C2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 79C378CA59291C827CAEC4DB1532314F96A56DF1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e35302e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 03 Jul 2026 21:44:15 +0000
ROA not before: Fri 03 Jul 2026 21:39:15 +0000
ROA not after: Fri 02 Jul 2027 21:44:15 +0000
asID: 216253
IP address blocks: 13.140.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:c3:78:ca:59:29:1c:82:7c:ae:c4:db:15:32:31:4f:96:a5:6d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 3 21:39:15 2026 GMT
Not After : Jul 2 21:44:15 2027 GMT
Subject: CN=8F5B48477E972A9D926BF4B4420AC6DD0F10C0C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7a:26:f0:31:8d:18:1c:1e:6c:5a:c5:e6:b8:
05:24:54:a5:02:8c:a5:d9:a8:6a:31:18:d3:ad:0e:
a9:ec:ff:e9:3b:63:3b:ce:50:3f:87:c5:19:4a:a2:
c9:d2:18:eb:90:bb:a1:45:17:f9:bf:38:bd:5f:5e:
c3:6d:98:ae:18:ed:f3:1d:18:be:01:9c:db:27:a8:
45:b6:5a:1b:74:f2:b8:d9:19:eb:6f:46:3a:67:b5:
e0:7b:5f:7f:0b:98:66:f1:57:e5:a8:51:42:f4:f3:
a4:8e:b3:f9:76:ea:9b:84:2e:35:1b:eb:52:68:71:
58:19:54:a5:4c:dd:b1:63:74:bf:5e:c2:3e:80:98:
a8:ef:e1:53:aa:ab:32:0f:7c:3c:e4:28:62:2c:bb:
a2:32:c6:80:9b:4d:cc:13:42:7a:11:f4:79:17:10:
4e:2b:a7:ca:bf:cb:a4:d5:c2:5f:25:83:70:14:70:
99:e8:43:ef:5b:72:cf:1d:e5:de:d9:6f:6d:8d:c7:
f4:6f:a0:07:9b:75:12:3d:96:53:7d:c0:7f:1b:04:
62:2e:a2:0a:c4:13:b5:4c:d2:12:fe:f1:4c:45:a7:
3f:f5:2d:dc:be:43:3a:bc:07:7d:56:43:d9:fc:db:
3a:86:63:75:f0:77:44:a1:3d:93:39:8e:26:b2:64:
30:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5B:48:47:7E:97:2A:9D:92:6B:F4:B4:42:0A:C6:DD:0F:10:C0:C2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e35302e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.140.50.0/24
Signature Algorithm: sha256WithRSAEncryption
95:f7:ea:0a:23:58:5b:1d:d5:36:67:15:6d:2a:3c:d9:8c:50:
4f:37:26:6f:c9:b1:83:a2:20:7a:16:67:14:0f:49:fa:c8:7a:
1c:94:cf:1b:5c:c5:8e:6f:eb:57:44:ef:c7:e1:cf:1d:f0:58:
42:2b:b3:91:d4:c2:4f:3b:65:7c:9e:9b:69:e2:34:ba:81:85:
7e:09:80:2c:2c:8c:1f:b3:69:22:e2:57:23:ed:d1:a3:17:c5:
f8:b7:4c:dc:73:50:10:25:2a:fc:13:8b:c1:c4:2b:7d:da:05:
b2:79:7b:7e:71:4e:d7:76:19:52:88:97:5c:17:46:18:bd:0e:
70:b3:4a:f2:60:50:83:b1:36:b7:ee:28:52:0a:ce:0a:4f:6a:
49:9d:c0:27:41:b1:91:09:ab:61:6c:b2:16:2a:63:ab:b3:ef:
ed:15:45:13:f0:62:ef:a1:b0:9c:fb:ad:86:e6:fc:57:73:64:
bb:fb:c8:5f:60:15:6f:de:52:ee:a3:b2:f5:e7:27:9a:96:0c:
54:12:a2:8b:ab:77:31:a0:90:6c:53:fe:0f:82:4b:55:7e:12:
aa:72:b5:e1:fa:66:d2:3b:7f:ac:32:60:ac:11:65:86:d1:a0:
c3:70:cf:d7:8d:70:a1:ac:e2:d6:f9:60:5f:08:1b:8f:8e:71:
63:fb:a8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:49 2026 by rpki-client