Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e35312e302f32342d3234203d3e20323136323533.roa
File: 31332e3134302e35312e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: eyOsLpy+/LMV5JD4dpQd+2jecH9+OugGuXEkRFrUDXU=
Subject key identifier: 2B:0E:31:F5:D8:BF:8B:9B:F9:09:D4:46:DE:BB:B7:C8:C8:0D:02:95
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4E171E492227F17BDAE125C07F2CBD764D3B4212
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e35312e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 03 Jul 2026 21:44:16 +0000
ROA not before: Fri 03 Jul 2026 21:39:16 +0000
ROA not after: Fri 02 Jul 2027 21:44:16 +0000
asID: 216253
IP address blocks: 13.140.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:17:1e:49:22:27:f1:7b:da:e1:25:c0:7f:2c:bd:76:4d:3b:42:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 3 21:39:16 2026 GMT
Not After : Jul 2 21:44:16 2027 GMT
Subject: CN=2B0E31F5D8BF8B9BF909D446DEBBB7C8C80D0295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4d:a4:73:77:91:f7:4e:2b:fa:08:b9:e9:b5:
87:3c:b0:8c:22:01:70:8a:57:5c:8b:d0:99:78:44:
29:2d:3f:47:f3:d6:2a:85:4f:93:db:16:3d:af:f0:
66:5c:2a:90:75:5e:53:7f:f6:e9:43:b8:be:24:55:
18:70:7d:c3:77:ca:99:79:0c:ab:75:63:01:c8:03:
3a:2e:f0:f5:df:ce:cf:79:c4:61:18:7e:d9:65:32:
e9:f1:12:b0:24:e6:da:80:12:08:27:26:81:db:1e:
b7:e6:82:f6:4e:cc:3e:ef:f2:88:91:ac:fa:fe:bf:
13:44:f8:72:ab:2a:63:fa:ec:99:10:09:19:45:00:
d5:b1:4a:bc:19:7e:c5:26:96:fb:a3:36:05:00:98:
a1:5f:03:03:fe:52:5e:81:07:64:1c:9b:53:42:17:
77:8c:2d:17:06:3f:07:f0:02:2e:e2:96:c6:24:29:
c0:3e:35:71:d0:d8:05:3f:59:02:a1:05:27:77:6c:
a7:9b:b2:8b:42:f1:bb:95:ab:f6:ce:30:71:0f:7f:
25:cf:73:9a:10:0b:43:bc:e6:e0:ed:51:ec:51:13:
89:b1:10:48:b8:61:6e:1d:7b:6b:1a:c0:8c:06:72:
79:52:15:7b:18:99:2b:82:10:49:6f:43:ce:b2:04:
49:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0E:31:F5:D8:BF:8B:9B:F9:09:D4:46:DE:BB:B7:C8:C8:0D:02:95
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e35312e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.140.51.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:7f:3d:b6:9f:d3:01:6b:43:70:9d:01:25:0d:85:dd:f3:f6:
d7:96:be:6c:fa:3f:75:bc:4f:1e:35:23:1b:c3:b7:86:3b:6d:
29:15:1d:0d:b7:11:3e:e3:3c:f8:40:2c:3a:13:23:c3:8e:af:
b2:e5:5c:ca:26:a5:b4:be:cf:0c:8c:75:94:54:6a:41:30:e0:
77:ed:d1:dd:d2:0d:57:5d:f2:81:a0:9f:b6:6f:b8:51:59:f9:
6f:45:d0:df:12:29:ac:d8:0f:27:f7:a6:16:ca:9c:3e:61:5c:
5e:7b:dc:bf:bf:80:8a:7a:90:83:78:52:5b:73:cd:36:a6:5c:
55:8f:3c:6c:67:13:30:58:29:65:bb:bc:b7:06:d8:f3:33:32:
0f:4d:88:bd:c2:6c:ca:85:5a:01:6d:62:31:e3:03:aa:c2:3d:
af:12:62:42:67:5a:85:9a:84:ff:15:78:14:5b:5e:7d:c7:a2:
38:76:ef:8f:4f:01:70:bc:9c:b2:aa:da:54:aa:1c:e6:d8:52:
9e:21:49:1d:ec:e7:c3:7b:ec:c9:d4:4e:0a:fe:8e:65:b2:f7:
e4:6a:cf:99:5d:7b:38:72:00:e5:5b:c4:2c:8b:8d:42:b7:8d:
18:eb:a2:c3:ec:4b:c8:25:dc:f4:d8:94:91:95:fd:f2:ec:7c:
5a:81:55:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:49 2026 by rpki-client