Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e35332e302f32342d3234203d3e20323136323533.roa
File: 31332e3134302e35332e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: zDMltC9FN1pZc+fzIxBQghgs5bT+Paa/HDQKdPAP6fk=
Subject key identifier: 3F:20:06:FF:C7:48:FE:CB:61:08:9B:9E:17:54:6F:1B:30:D3:F7:7D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5D14083B8F8FE0C1D5FDB43889E78B2463467EA3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e35332e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 03 Jul 2026 21:44:19 +0000
ROA not before: Fri 03 Jul 2026 21:39:19 +0000
ROA not after: Fri 02 Jul 2027 21:44:19 +0000
asID: 216253
IP address blocks: 13.140.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:14:08:3b:8f:8f:e0:c1:d5:fd:b4:38:89:e7:8b:24:63:46:7e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 3 21:39:19 2026 GMT
Not After : Jul 2 21:44:19 2027 GMT
Subject: CN=3F2006FFC748FECB61089B9E17546F1B30D3F77D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2f:be:02:0e:55:4e:a2:68:cb:b6:df:d0:90:
ec:07:47:ca:8c:3b:c8:3b:89:ad:c5:b0:31:83:fb:
92:bf:03:40:6e:50:42:0b:4c:e3:e4:0e:f6:8e:41:
60:17:80:e3:5a:53:a2:36:7b:9c:d4:8b:38:e0:92:
d3:e6:26:46:dd:f8:59:33:88:6a:c2:bb:4b:62:f4:
56:98:62:d8:13:4f:77:59:16:37:e6:cf:cc:62:85:
41:a9:25:7b:2b:c7:c1:e6:92:bc:d4:e3:14:a1:73:
4e:8b:56:4e:7b:9d:df:0e:26:da:d2:ef:a1:3f:60:
b0:f1:a4:c7:38:10:13:c9:54:1b:fa:6a:21:44:5f:
76:70:49:6e:bf:78:63:22:ab:38:8f:6a:32:50:f8:
6b:60:55:d7:0a:b1:ed:97:b4:99:b4:d0:97:ef:8f:
43:dd:35:55:ac:ba:1b:d3:0e:75:95:04:4b:db:82:
6a:6b:e2:32:b9:39:0a:92:ce:05:dc:05:45:2d:c9:
57:a1:56:ef:96:59:63:b4:5d:99:e1:48:d0:f6:f9:
fd:5f:53:1b:24:95:c6:2b:d4:c2:4a:3a:ca:7f:e0:
65:46:8c:d0:2c:de:4b:a0:ab:d7:bc:5f:3f:a1:84:
00:82:12:2e:4c:f6:4c:71:3a:ed:3f:4b:bf:84:58:
5d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:20:06:FF:C7:48:FE:CB:61:08:9B:9E:17:54:6F:1B:30:D3:F7:7D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e35332e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.140.53.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ac:73:29:16:9f:2c:78:78:d7:51:f0:c2:37:e7:9a:f2:c5:
37:f2:bb:09:be:50:9d:c7:7d:66:aa:35:85:86:b5:a1:9c:41:
5e:a4:8d:17:ad:14:e2:12:36:ed:f0:82:92:3f:6b:d0:e0:0f:
cd:0e:fd:40:45:e3:30:b8:cf:48:4b:19:ce:4c:4b:87:7b:6d:
cd:28:7c:76:4c:a3:22:47:69:74:12:45:58:ee:fc:5e:74:4f:
a9:bd:e9:ec:7b:57:bd:9e:d1:3e:5e:17:9c:73:c2:d8:fd:b4:
1a:96:c3:be:a2:46:17:40:61:bb:38:f3:bc:25:87:d1:d3:9a:
5b:64:47:97:76:23:71:e0:61:6a:39:ef:2c:0a:a0:5a:6d:e2:
d2:76:fb:2f:c8:b7:26:0a:ed:58:50:3a:8e:28:e2:2d:1b:cb:
7d:19:7c:b1:d7:f1:bb:2d:c9:41:5a:cc:5b:3d:6f:d5:23:6b:
76:97:e7:d4:85:5b:39:a5:58:f0:82:d3:79:18:82:42:0d:1b:
29:4b:fc:51:4c:05:dd:07:ef:79:73:2c:28:22:12:a4:59:8d:
32:7f:66:d3:07:44:f7:01:18:11:79:88:1a:aa:05:7a:56:90:
c8:e7:38:00:89:60:d1:39:d8:15:4a:61:10:4b:9a:f5:a9:63:
ca:2d:35:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:49 2026 by rpki-client