Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e35342e302f32342d3234203d3e20323136323533.roa
File: 31332e3134302e35342e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: vmBZQao5fB1y2k7GJPWouhv5a/DX0eZWWdJup05m9Mc=
Subject key identifier: DF:15:37:A6:BA:EA:E6:C7:FD:0A:BF:15:D5:AC:09:95:5D:4F:29:BB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1524641EC11675B50918A532BD2C5E2647B05270
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e35342e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 03 Jul 2026 21:44:21 +0000
ROA not before: Fri 03 Jul 2026 21:39:21 +0000
ROA not after: Fri 02 Jul 2027 21:44:21 +0000
asID: 216253
IP address blocks: 13.140.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:24:64:1e:c1:16:75:b5:09:18:a5:32:bd:2c:5e:26:47:b0:52:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 3 21:39:21 2026 GMT
Not After : Jul 2 21:44:21 2027 GMT
Subject: CN=DF1537A6BAEAE6C7FD0ABF15D5AC09955D4F29BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:43:63:70:a9:5e:6e:c1:c3:cf:f4:2b:33:d6:
97:79:4e:47:2b:7b:51:79:b7:27:56:df:9d:49:9d:
09:2f:df:da:d0:7d:f9:22:11:bd:3a:fe:bd:66:38:
45:a4:e3:e0:83:24:cc:0a:6b:83:3f:13:93:e0:74:
4a:f4:a3:a1:27:61:e0:6b:bc:28:81:6e:2e:9a:5b:
82:ae:74:3e:84:f2:1f:62:9a:b3:24:67:8d:c4:73:
72:f5:bb:b8:e2:26:64:87:af:f6:ca:a7:5d:e6:8a:
61:6c:00:c5:0b:6f:8d:4c:e9:e4:15:0b:aa:6b:c5:
a8:69:a6:8d:41:c5:0d:bf:26:7d:39:d4:b7:08:e1:
23:33:6f:d2:5f:85:dc:a3:b7:3f:db:ce:d5:30:62:
f0:1d:ff:86:17:41:db:ed:05:d3:98:ad:45:57:35:
08:bf:cc:28:c1:25:e2:02:95:c2:8f:3e:b0:87:c6:
c1:8e:14:15:3d:a7:19:ad:78:2d:18:9c:5f:5b:da:
a4:d8:5f:78:15:af:42:90:3c:9a:df:a6:fe:cd:69:
8c:91:b3:1e:c4:35:4e:77:eb:cd:e2:77:d0:ad:96:
60:0c:60:2d:bb:d1:72:1b:4f:68:90:8b:c3:21:6c:
98:c8:b2:38:cb:ab:9a:75:d9:7d:7f:da:4c:37:83:
19:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:15:37:A6:BA:EA:E6:C7:FD:0A:BF:15:D5:AC:09:95:5D:4F:29:BB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e35342e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.140.54.0/24
Signature Algorithm: sha256WithRSAEncryption
44:9f:15:43:c7:68:34:5f:11:c1:09:69:6c:66:01:73:79:7d:
83:75:70:dd:fb:9e:23:8c:4a:04:e2:e8:d0:70:da:a0:94:07:
b9:88:c1:8b:79:bb:c5:a9:ff:5c:36:ac:cf:d4:14:c9:eb:00:
14:a2:6f:4c:7c:44:3d:c7:55:07:78:9f:c5:f8:38:ce:ee:44:
c3:02:43:75:69:f2:a6:f1:ab:81:95:08:ad:3f:17:72:da:5f:
6d:75:4a:ab:0c:6b:33:ee:a7:3c:33:fc:c5:0e:96:48:48:70:
d0:ee:a6:6b:f4:e6:aa:e0:30:e7:74:94:4d:68:36:7d:0e:d4:
22:20:f0:ee:fc:6a:1e:0b:24:d7:d5:7b:90:28:6f:df:73:62:
e5:03:9c:66:09:94:2d:93:8a:0d:35:b4:cd:12:9a:b2:4e:51:
a0:be:a0:61:2d:48:ae:69:db:4d:69:66:7b:15:83:31:57:86:
95:35:32:8e:08:cc:ef:cc:ed:c8:bf:77:21:53:fc:31:70:d7:
a7:14:cc:cc:9e:3c:91:26:1d:45:b7:93:60:53:04:75:61:22:
c0:60:37:54:80:62:34:43:d4:7f:15:55:d9:1c:42:67:c9:47:
35:5e:da:77:be:0b:03:91:88:7c:32:73:f6:07:29:68:11:54:
30:a9:f5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:50 2026 by rpki-client