Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e35352e302f32342d3234203d3e20323136323533.roa
File: 31332e3134302e35352e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: eSfAnoo/UPIx6iCtuiCDtuxbT3Lrtf8HVKracyBndIE=
Subject key identifier: 1A:69:74:EC:96:A4:79:5B:8E:C5:B9:5A:1E:DE:3F:CA:5B:22:93:FF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1925CBB7E04BD20565FDD4EA4F0E5F652209B743
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e35352e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 03 Jul 2026 21:44:23 +0000
ROA not before: Fri 03 Jul 2026 21:39:23 +0000
ROA not after: Fri 02 Jul 2027 21:44:23 +0000
asID: 216253
IP address blocks: 13.140.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:25:cb:b7:e0:4b:d2:05:65:fd:d4:ea:4f:0e:5f:65:22:09:b7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 3 21:39:23 2026 GMT
Not After : Jul 2 21:44:23 2027 GMT
Subject: CN=1A6974EC96A4795B8EC5B95A1EDE3FCA5B2293FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1c:69:0e:4a:f1:f4:5c:b2:fa:46:05:22:9e:
74:22:c7:02:6e:ee:42:8a:3f:c0:ae:7c:b9:ae:c6:
2e:1b:f0:c7:a9:40:1c:31:48:07:27:36:4d:8b:36:
3f:b3:2a:80:06:a7:e4:46:10:e9:f0:37:ef:78:38:
d4:6c:e5:64:00:82:67:e6:66:bb:e3:09:d2:c9:fe:
79:c0:c0:b7:60:1d:77:45:53:9e:4b:ca:00:a2:c4:
f3:bd:0d:7c:ab:fe:17:d6:b5:bf:3a:23:27:94:f1:
3e:be:84:6b:08:90:24:82:07:0d:b2:eb:97:0c:97:
45:7e:cd:7c:bf:ed:04:15:e4:bf:83:81:cf:4d:b4:
57:8f:32:27:01:1d:31:32:9e:3d:a9:6a:9a:df:2f:
d8:0f:46:48:b8:bb:01:b2:e8:ad:ca:77:48:16:ce:
70:db:aa:c6:fa:bd:5a:8d:10:4e:e3:4a:aa:09:3b:
cf:65:9e:af:03:98:9c:68:ad:17:7f:55:ae:ed:bc:
64:aa:e7:9b:78:eb:c3:58:cf:9a:f3:f0:51:66:16:
3c:08:38:32:50:d9:5d:3b:cd:22:8b:26:cb:53:13:
4f:c6:d6:af:39:02:2f:9b:ea:3e:6c:6e:e4:86:b0:
39:8f:a9:53:f9:26:55:6c:d8:27:f4:1d:0a:46:c9:
a0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:69:74:EC:96:A4:79:5B:8E:C5:B9:5A:1E:DE:3F:CA:5B:22:93:FF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e35352e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.140.55.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:ca:7d:3e:56:7c:de:91:83:1b:f1:29:50:15:3c:77:1d:c0:
5d:b1:92:6e:c4:36:7e:ad:01:8f:eb:2e:d6:a7:ec:4a:56:e8:
56:73:e0:dd:09:43:cd:da:13:3f:df:e7:20:41:69:2b:aa:7f:
8e:e3:bb:f4:6b:9f:39:c4:91:fa:16:f0:89:5f:01:a7:e0:ff:
a8:9b:2b:a7:4d:5c:ca:4d:e7:06:57:3d:fa:b1:a0:03:e6:6e:
a9:6e:aa:17:b2:7e:3f:53:d9:fa:eb:31:48:e7:4c:57:ed:7d:
bc:21:a7:ca:22:ab:bd:62:9c:a2:c2:eb:e1:2b:2d:42:ce:2b:
b4:be:e7:59:7d:15:07:e0:af:9f:03:f9:27:08:4d:4a:6f:5f:
5d:eb:a4:97:f1:a3:ca:f8:a9:ee:6d:12:26:c7:01:13:35:73:
4a:9b:29:16:ab:69:03:8a:11:e9:62:45:d9:41:4b:c5:7e:25:
dd:c8:91:3b:7a:19:6e:86:96:21:f6:d1:97:40:81:ee:ba:a2:
f7:f2:e0:8d:db:42:bd:14:db:3c:09:de:e7:28:d0:8c:da:ce:
a7:d6:77:48:6a:d0:69:58:59:b2:b6:f0:19:ef:5d:34:98:55:
41:ec:26:e0:7a:87:50:fb:01:66:cc:79:8d:76:32:0c:ec:1e:
2c:2f:4c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:48 2026 by rpki-client