Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e35322e302f32342d3234203d3e20323136323533.roa
File: 31332e3134302e35322e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: WoumEyy4lcq5OMrZ12fMjIJ991+iYQNVksl+XZE9orA=
Subject key identifier: 65:95:04:19:93:59:41:41:15:37:B8:58:EF:03:41:54:0A:A2:AE:4A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 41DAC48D30217425FE5A61B4BE9062B793DA5833
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e35322e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 03 Jul 2026 21:44:18 +0000
ROA not before: Fri 03 Jul 2026 21:39:18 +0000
ROA not after: Fri 02 Jul 2027 21:44:18 +0000
asID: 216253
IP address blocks: 13.140.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:da:c4:8d:30:21:74:25:fe:5a:61:b4:be:90:62:b7:93:da:58:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 3 21:39:18 2026 GMT
Not After : Jul 2 21:44:18 2027 GMT
Subject: CN=65950419935941411537B858EF0341540AA2AE4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1e:45:16:80:89:9e:af:5b:46:82:29:a4:87:
6f:6a:14:3d:c3:36:fa:f3:b1:94:c4:05:7c:5f:97:
ca:b6:64:d3:e5:c8:a7:f4:ce:e8:68:cb:77:f8:20:
e4:99:e4:d3:d9:41:a6:5a:4b:0f:ef:fa:68:bb:b1:
9c:33:ce:d0:93:b0:38:a6:b4:3f:e1:a6:82:59:37:
71:9c:3a:75:08:6b:99:1d:40:cf:d2:de:9b:c5:d0:
5a:56:6d:ea:b4:f1:e2:06:64:6f:bd:29:41:9f:5e:
c9:67:51:e3:6e:87:f2:36:aa:a5:67:fb:79:37:fa:
8a:83:b9:99:0b:37:40:b2:9e:d6:fc:cd:c9:83:38:
57:3c:9b:ec:d6:3c:b9:a3:b3:e3:6b:80:30:48:29:
85:c7:00:fc:f4:f6:86:19:31:08:3b:d3:67:0d:cb:
90:e5:5b:95:39:c7:80:e1:8d:40:68:fc:b6:95:40:
bd:c5:c6:8a:f4:cb:93:fe:d4:f7:44:9f:c4:27:1d:
01:0c:ed:4e:57:12:28:ac:a9:e6:e1:5c:22:13:ae:
65:dd:e0:cc:86:14:3b:51:66:bb:c0:ea:88:80:48:
b3:e6:f4:34:d9:c9:94:8f:ea:19:f9:b5:32:9e:2e:
95:7e:6d:e7:df:3f:61:6b:d0:44:27:6a:3c:13:96:
bc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:95:04:19:93:59:41:41:15:37:B8:58:EF:03:41:54:0A:A2:AE:4A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e35322e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.140.52.0/24
Signature Algorithm: sha256WithRSAEncryption
89:ed:c2:6d:dd:f1:26:79:30:bb:c3:f8:02:67:69:9d:ea:23:
3d:c8:98:2d:33:93:6c:4f:48:63:a3:fd:c2:cd:2e:6c:2b:65:
99:1f:2c:01:00:81:26:1f:9f:c1:a0:d7:4d:9d:85:d0:28:b5:
40:c1:09:f1:90:16:aa:59:26:87:26:5e:b6:b3:62:21:4d:21:
df:9a:62:a1:7b:f5:de:16:ce:12:cd:df:75:10:6a:93:23:c0:
58:37:b2:c6:b0:e1:ee:8b:42:ed:cb:57:d8:7e:12:f8:59:18:
c9:05:cb:27:d4:76:b7:05:4a:c5:2b:e4:65:4c:8a:c5:f5:73:
28:3c:b2:cb:e5:86:54:ed:89:1d:06:72:2c:db:02:94:97:99:
37:e7:5c:19:94:fc:61:de:8b:f6:39:f4:ed:30:38:8e:5a:1f:
fa:77:7e:06:c4:72:a0:bd:85:d8:65:5e:bc:43:06:bd:1c:e6:
e0:df:76:b7:1e:a8:eb:66:cf:15:ed:a7:2d:fb:ad:57:1e:76:
ec:92:5f:1a:45:0e:5e:38:0b:00:21:a6:e7:8c:31:54:1b:2b:
6a:2f:b4:6f:b3:a9:ba:b1:3b:f7:3c:24:7d:d3:ae:89:7a:6a:
86:e0:01:8c:38:35:c3:ce:51:1a:7f:f3:2e:40:68:ae:a3:ac:
ba:51:79:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:48 2026 by rpki-client