Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e38302e302f32302d3234203d3e20323138373634.roa
File: 31332e3134302e38302e302f32302d3234203d3e20323138373634.roa (raw, json)
Hash identifier: WQhJVguN0Oi8n4XCSh5XiJnAFOHBCibWjK6G30AeVsA=
Subject key identifier: 8E:8A:F9:74:08:A4:24:E5:AF:DB:91:84:83:E8:4D:E0:0A:73:DF:71
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 79D7075F18FEE5E2F068C59747D5C3DE2997C464
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e38302e302f32302d3234203d3e20323138373634.roa
Signing time: Thu 01 Oct 2026 13:41:14 +0000
ROA not before: Thu 01 Oct 2026 13:36:14 +0000
ROA not after: Thu 30 Sep 2027 13:41:14 +0000
asID: 218764
IP address blocks: 13.140.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:d7:07:5f:18:fe:e5:e2:f0:68:c5:97:47:d5:c3:de:29:97:c4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 1 13:36:14 2026 GMT
Not After : Sep 30 13:41:14 2027 GMT
Subject: CN=8E8AF97408A424E5AFDB918483E84DE00A73DF71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b6:d9:f7:95:5d:e9:5f:43:8b:28:15:b1:5c:
bb:7f:ce:23:6e:48:ed:23:3f:72:a5:d1:15:78:29:
73:d3:58:f3:45:1d:2f:3d:3b:70:65:80:c5:7f:c7:
7d:0f:ef:e1:cc:19:6e:39:01:b1:fa:90:b4:63:f9:
02:96:99:31:7c:fe:5c:9a:fc:b9:c0:dd:50:32:b0:
ad:a0:28:e1:e5:a9:ae:c9:ff:05:50:5a:52:1e:2f:
8d:80:6a:61:03:7c:04:72:1f:92:72:3c:e7:79:63:
b2:48:7e:0b:ee:ed:0e:b8:81:7b:9a:dc:a7:01:81:
ae:51:7c:79:02:e1:7b:72:7b:1b:93:e0:16:60:22:
a4:d3:ab:76:02:6e:76:34:65:4a:83:40:83:9b:48:
8a:e7:e4:bc:86:c5:7d:da:ed:52:ae:f9:82:8e:a7:
df:fb:da:69:59:b0:1c:9d:8f:af:7a:51:36:fa:5a:
40:e3:71:3e:59:cd:4d:82:80:5b:7b:5a:74:e4:6c:
1c:0b:99:a2:8d:a4:36:40:4f:77:3e:d2:cb:71:9b:
ff:cf:02:d1:8c:ca:08:e2:bc:c2:4d:f6:93:d9:9f:
db:2f:3e:b3:84:06:8b:f7:77:58:61:13:e3:6f:2d:
43:4a:eb:c2:56:0b:e9:75:7d:c1:f3:a1:05:f8:fd:
80:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8A:F9:74:08:A4:24:E5:AF:DB:91:84:83:E8:4D:E0:0A:73:DF:71
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e38302e302f32302d3234203d3e20323138373634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.140.80.0/20
Signature Algorithm: sha256WithRSAEncryption
6b:bf:f1:f9:33:70:fd:d0:c4:79:43:73:b1:fc:c3:33:c1:05:
d9:2d:1f:d5:fb:4d:6a:91:ca:ec:c9:18:8a:68:de:2d:d8:6b:
bc:e6:57:fb:03:af:eb:f5:0e:55:f4:19:3a:8b:5e:dc:d6:16:
20:76:8e:28:4a:3f:f2:eb:9f:9a:52:cc:02:63:20:da:bc:89:
aa:fa:7e:45:ff:ff:71:b1:09:62:95:90:69:78:fe:48:54:cd:
e8:a3:d5:8b:4d:c1:bb:92:b2:b2:4c:13:f8:3f:88:1e:f2:6a:
37:9d:2d:85:b9:22:9f:8a:b9:c0:3b:38:79:bc:3b:b0:24:b0:
82:4c:c1:d1:1b:dd:0f:a4:18:c7:bc:46:5a:e5:0b:d2:e2:dc:
79:44:f9:ad:ff:e4:31:c0:03:96:90:02:9c:1d:26:a3:fd:69:
36:a1:45:d4:2c:3c:f0:68:39:36:ee:5e:4b:16:69:76:a3:00:
1b:11:4b:f7:c1:82:f3:4c:06:6c:64:e0:ed:f1:5c:ef:eb:b7:
84:31:81:e7:66:59:cd:a8:26:a7:be:88:8c:59:c2:84:90:01:
19:c1:05:69:aa:1c:24:c4:96:56:15:32:a1:7c:31:a3:c3:ff:
81:3b:81:d1:f1:ea:ab:fe:a8:ee:ff:55:b4:46:ca:f7:8d:06:
e6:68:d6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:44:43 2026 by rpki-client