Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e35362e302f32332d3233203d3e20313431393935.roa
File: 31332e3134302e35362e302f32332d3233203d3e20313431393935.roa (raw, json)
Hash identifier: /lUXuzTPiEDBGbP8GMoAkp7SxfYkc4M2CdQtiJQJ0OI=
Subject key identifier: 8D:D1:54:95:A4:CC:66:47:CB:B2:5F:19:96:B3:95:AC:C5:0F:D9:CA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7B66B6745BA9DEB52B047EAD31FB7417F73C8D59
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e35362e302f32332d3233203d3e20313431393935.roa
Signing time: Fri 17 Jul 2026 11:27:04 +0000
ROA not before: Fri 17 Jul 2026 11:22:04 +0000
ROA not after: Fri 16 Jul 2027 11:27:04 +0000
asID: 141995
IP address blocks: 13.140.56.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:66:b6:74:5b:a9:de:b5:2b:04:7e:ad:31:fb:74:17:f7:3c:8d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 17 11:22:04 2026 GMT
Not After : Jul 16 11:27:04 2027 GMT
Subject: CN=8DD15495A4CC6647CBB25F1996B395ACC50FD9CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e6:a6:9b:ea:30:cb:e3:2c:b9:e2:74:62:21:
c8:e9:5d:e6:05:f8:12:4b:12:fc:d8:cb:48:a0:6b:
9b:f5:66:e9:17:0d:a2:e5:50:f0:85:8d:fb:45:53:
61:e2:eb:af:a8:7c:1d:3d:dc:7b:5d:73:35:0e:bc:
56:02:df:e9:d6:38:82:f6:5e:6d:36:9e:ce:c9:c8:
e6:9d:8f:fd:a0:d1:48:23:f4:85:c6:7e:77:ab:27:
64:78:f7:81:9b:fb:ae:59:6a:eb:3b:2a:9c:22:0c:
ea:82:c4:fc:e0:ee:f0:e9:47:b3:28:26:8c:ae:de:
f4:f6:bb:f5:03:91:72:e6:a0:50:dd:ba:ec:80:8c:
d5:5e:ca:4e:95:0d:fa:16:c5:06:c0:91:1e:4a:f4:
0f:86:25:37:c6:45:f3:ad:88:0d:91:72:78:1b:45:
62:20:51:21:ba:4a:a0:da:e7:ef:3f:41:af:6a:8e:
2d:58:af:96:a6:04:8c:ca:9b:b9:f9:a5:ad:ac:7a:
71:0b:04:34:35:9e:5c:5e:d3:95:80:4f:f0:c2:7b:
4b:21:c9:59:da:cd:b7:17:7c:ad:5d:31:43:3d:75:
55:28:34:7a:a3:dc:e0:c7:c3:a7:70:90:df:5a:de:
51:3a:72:88:0f:75:d6:23:71:a8:3f:85:f4:da:bf:
e4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D1:54:95:A4:CC:66:47:CB:B2:5F:19:96:B3:95:AC:C5:0F:D9:CA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e35362e302f32332d3233203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.140.56.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:88:ba:e3:d0:af:0e:ec:ec:53:b4:68:6d:a5:ab:72:11:bb:
ad:02:99:16:bc:00:2c:80:e2:7b:d5:8b:8b:ed:fa:f5:95:c4:
c2:d8:10:31:16:5b:20:3e:be:92:d2:3b:79:b3:4d:69:56:8a:
fa:08:d0:81:82:76:44:61:01:69:ed:77:9e:72:2f:74:e4:26:
12:f9:af:04:12:42:57:c5:69:b9:a1:f5:45:ab:26:22:a4:42:
8b:87:07:b9:c5:cb:c6:9c:4e:97:1c:ac:dd:c3:ab:77:41:a0:
e8:62:e5:b8:84:d9:33:31:4c:35:8d:44:e8:82:4d:e0:3a:ec:
d3:94:c3:23:a8:2c:aa:9b:b1:6e:7f:45:27:d3:dd:8f:53:3a:
33:a9:f8:72:bb:31:06:30:58:82:9e:ab:73:66:8f:d1:09:ee:
5f:95:3f:61:d1:e9:84:9d:22:7e:b1:93:ba:f2:24:17:6a:2c:
26:de:84:ae:58:28:a7:1a:57:b2:77:fa:b0:6f:d4:0f:0f:e0:
44:a2:04:77:d5:06:10:a7:2d:b2:a0:c5:7b:7a:de:3d:20:dc:
a5:0e:81:37:7c:f4:57:f9:44:8c:0e:71:76:88:8c:98:30:87:
8d:93:b9:e0:36:b4:ee:ac:f7:c6:40:a8:4a:d0:b9:60:6d:99:
d8:33:09:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:50 2026 by rpki-client