Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa
File: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (raw, json)
Hash identifier: ePbF2vyH2L99pKVYNfid/LRmeBkCDC+g6PeSrnBn10Y=
Subject key identifier: DA:A1:33:4A:BD:01:32:8B:38:A1:CF:59:E8:D3:E4:A5:A3:A8:1F:A4
Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial: 6FA3958D29A004CED252106B50C52C6EDA9612AF
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa
Signing time: Sun 10 May 2026 18:26:35 +0000
ROA not before: Sun 10 May 2026 18:21:35 +0000
ROA not after: Sun 09 May 2027 18:26:35 +0000
asID: 215248
IP address blocks: 103.149.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:a3:95:8d:29:a0:04:ce:d2:52:10:6b:50:c5:2c:6e:da:96:12:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Validity
Not Before: May 10 18:21:35 2026 GMT
Not After : May 9 18:26:35 2027 GMT
Subject: CN=DAA1334ABD01328B38A1CF59E8D3E4A5A3A81FA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c3:dc:84:47:16:45:d4:99:37:64:0d:5d:af:
02:16:da:3a:1c:31:68:4c:cf:41:a3:28:16:87:21:
ad:c9:83:83:28:ab:49:f8:db:7c:04:37:8d:55:a8:
e0:69:4d:e7:07:41:65:16:b1:e2:a5:d2:e3:8b:91:
f6:56:24:64:ce:68:fc:a7:f7:f1:a4:7f:5e:df:8c:
40:42:df:9c:b6:61:f7:7e:f0:88:00:c4:22:a3:4b:
d5:e9:3a:b0:ff:6c:22:25:10:23:ff:09:d2:8c:12:
57:b2:bd:dd:cb:40:a6:f1:c1:df:89:ee:aa:e1:75:
93:08:20:a7:4b:8f:ae:44:8f:0a:55:75:23:48:23:
01:e6:ef:70:00:61:c7:99:c5:92:ec:d6:34:48:41:
47:7c:75:17:02:25:2c:8f:c8:11:12:1e:e8:7d:7a:
bb:41:21:29:5f:3b:e8:2e:64:a3:b6:4d:6f:4d:af:
f3:22:11:57:7c:d1:fb:c9:62:6e:ad:7a:ec:7e:c1:
22:6d:84:98:c4:1a:fa:cd:5b:cd:b2:d6:6c:d1:82:
4e:99:21:ba:4d:dc:18:de:1a:e5:95:2a:45:a3:54:
1e:fe:15:9c:1f:c8:62:8e:f0:4c:43:cf:86:91:bc:
36:ec:b7:e3:2c:63:12:33:64:dd:3b:de:6a:8d:1c:
9c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A1:33:4A:BD:01:32:8B:38:A1:CF:59:E8:D3:E4:A5:A3:A8:1F:A4
X509v3 Authority Key Identifier:
keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.149.168.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ee:40:19:0e:63:e1:51:31:9b:c9:75:ef:f9:b6:ae:59:e4:
0b:f3:8d:45:33:05:f6:48:2c:68:cc:ee:be:eb:cb:f7:9e:ec:
5a:4a:fc:28:84:a6:d8:8e:81:1e:30:db:49:00:f7:13:e6:ec:
51:92:65:b9:4d:c4:1b:12:36:87:42:b6:f3:7b:20:dc:3e:f4:
50:ac:c6:d2:67:70:e8:a3:9b:48:15:1e:d3:70:55:af:bd:51:
53:c9:e9:75:a8:11:7e:0d:4c:40:b1:d3:26:a1:4e:34:bc:15:
36:78:cc:6a:31:b4:8b:6e:4a:3f:28:0f:87:28:94:a2:15:51:
72:25:92:47:a7:27:41:79:98:16:ba:76:0b:5b:ff:52:03:30:
a4:83:46:0b:d7:f2:b3:d4:c2:b6:d2:98:7e:56:98:26:ed:63:
64:bf:9f:8b:2f:39:8b:ff:a3:a6:2a:34:96:cb:ec:ef:49:6c:
fe:99:d8:e6:ca:b6:58:e6:fc:10:33:68:23:98:6f:d9:cd:76:
4c:0c:66:5d:6e:21:e9:da:75:4c:1a:3a:1d:da:1e:f9:1f:2c:
a3:6e:a6:4e:14:79:8d:58:65:e6:26:1f:92:ff:66:f4:a3:84:
60:cc:74:64:72:72:87:94:26:33:44:8e:3b:9e:09:cb:af:a9:
9d:ca:a4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:19:22 2026 by rpki-client