Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3132392e302f32342d3234203d3e20313530363534.roa
File: 3130332e34392e3132392e302f32342d3234203d3e20313530363534.roa (raw, json)
Hash identifier: ZmNqb6SQ04nrnt7KP4kUO8EO/zoOBhgAf3oJbSFf7Ys=
Subject key identifier: 16:CC:7A:04:4A:41:56:FD:68:7C:E9:15:1F:BD:61:88:75:D0:30:A5
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 48E4AD480901BC1B8045EC0B4F6894C63095A9DB
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3132392e302f32342d3234203d3e20313530363534.roa
Signing time: Fri 15 Aug 2025 17:45:42 +0000
ROA not before: Fri 15 Aug 2025 17:40:42 +0000
ROA not after: Fri 14 Aug 2026 17:45:42 +0000
asID: 150654
IP address blocks: 103.49.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:e4:ad:48:09:01:bc:1b:80:45:ec:0b:4f:68:94:c6:30:95:a9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Aug 15 17:40:42 2025 GMT
Not After : Aug 14 17:45:42 2026 GMT
Subject: CN=16CC7A044A4156FD687CE9151FBD618875D030A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:11:9b:c7:d2:61:be:4c:a6:07:31:a1:1a:e7:
c5:81:b4:bc:5d:5c:8b:7a:82:a7:be:c1:af:67:45:
9f:0b:d0:f4:82:66:0a:df:2d:9e:af:95:37:de:6b:
48:38:38:07:72:3e:51:f0:77:f9:9d:98:c7:21:2c:
c0:02:78:39:a7:41:1a:6f:e2:15:6a:0c:cc:ed:3e:
17:c6:c6:55:99:76:fc:35:be:cd:f0:70:8d:1b:ab:
d3:5a:a0:ec:62:75:af:b0:83:0d:31:6a:f8:f0:40:
06:a9:2a:f6:bc:f1:6d:30:a4:95:c6:06:69:18:4d:
ca:12:c9:93:f0:0a:33:96:ae:73:08:92:6c:32:a8:
9f:79:6d:26:9a:e8:69:af:5d:86:ff:f0:78:63:d9:
9d:7b:1a:a5:3e:13:5b:23:62:9b:81:02:bc:b9:b3:
ee:df:29:ed:86:05:09:f5:74:0a:b4:74:46:48:a5:
ad:74:75:ff:61:01:b0:16:09:08:c6:82:3d:e1:de:
c8:39:9f:90:8c:4b:a0:65:ed:8a:90:63:7f:1c:b3:
ab:01:8e:39:17:69:61:0b:fa:7d:54:fb:28:f3:7f:
c2:9d:18:42:77:05:3e:5a:93:4c:41:27:dd:32:e7:
02:72:3f:13:64:8c:f1:ec:38:71:9f:de:ed:ec:20:
3f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CC:7A:04:4A:41:56:FD:68:7C:E9:15:1F:BD:61:88:75:D0:30:A5
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3132392e302f32342d3234203d3e20313530363534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.49.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:51:c7:97:de:30:c6:32:bf:5a:06:e4:ec:e6:89:6d:cd:16:
6c:29:15:a2:55:8d:22:b3:cf:e5:87:8e:8d:44:79:f5:ec:7e:
73:3a:3b:f3:77:4c:32:a1:19:9c:19:e4:92:0e:d3:1b:a0:7b:
93:26:11:59:46:11:34:fe:65:f4:00:07:a6:45:b6:95:f5:e0:
9e:88:46:c4:f1:54:7b:6d:b5:6e:f1:33:a6:04:7e:cf:dc:8a:
2e:91:ef:1a:dc:b6:fc:8f:b5:b5:c8:28:de:6c:50:12:b7:78:
de:ad:d3:14:ed:7b:60:73:e9:a5:28:37:d6:45:d3:97:43:14:
b5:19:20:5b:76:7a:e7:08:17:f4:d8:e2:5b:df:ce:ce:9e:68:
52:f2:07:80:6c:af:16:4d:0c:d6:59:62:0e:c2:42:21:68:f8:
59:ef:76:2e:87:6d:c8:41:b3:be:ce:b0:e7:47:26:3d:ac:86:
7f:8a:e9:ad:c2:66:a1:0a:aa:83:91:09:c2:d7:aa:ac:41:51:
41:01:c5:18:0f:07:c6:8e:05:0d:ad:b3:34:60:5b:66:ec:f2:
90:20:54:27:f6:97:ca:c7:41:cf:61:d5:df:37:e5:2e:9d:9f:
1f:c0:a9:ec:5a:4d:4a:ae:15:b7:e6:39:bd:df:42:d4:44:c0:
00:0d:56:5c
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUSOStSAkBvBuARewLT2iUxjCVqdswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw
YWVhYjI5ZDAeFw0yNTA4MTUxNzQwNDJaFw0yNjA4MTQxNzQ1NDJaMDMxMTAvBgNV
BAMTKDE2Q0M3QTA0NEE0MTU2RkQ2ODdDRTkxNTFGQkQ2MTg4NzVEMDMwQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNEZvH0mG+TKYHMaEa58WBtLxd
XIt6gqe+wa9nRZ8L0PSCZgrfLZ6vlTfea0g4OAdyPlHwd/mdmMchLMACeDmnQRpv
4hVqDMztPhfGxlWZdvw1vs3wcI0bq9NaoOxida+wgw0xavjwQAapKva88W0wpJXG
BmkYTcoSyZPwCjOWrnMIkmwyqJ95bSaa6GmvXYb/8Hhj2Z17GqU+E1sjYpuBAry5
s+7fKe2GBQn1dAq0dEZIpa10df9hAbAWCQjGgj3h3sg5n5CMS6Bl7YqQY38cs6sB
jjkXaWEL+n1U+yjzf8KdGEJ3BT5ak0xBJ90y5wJyPxNkjPHsOHGf3u3sID9bAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUFsx6BEpBVv1ofOkVH71hiHXQMKUwHwYDVR0j
BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2
NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy
cXNwMC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQt
NmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2NjIwLzAvMzEzMDMzMmUzNDM5MmUzMTMy
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzNjM1MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABnMYEwDQYJKoZIhvcNAQELBQADggEBAJtRx5feMMYyv1oG5OzmiW3NFmwpFaJV
jSKzz+WHjo1EefXsfnM6O/N3TDKhGZwZ5JIO0xuge5MmEVlGETT+ZfQAB6ZFtpX1
4J6IRsTxVHtttW7xM6YEfs/cii6R7xrctvyPtbXIKN5sUBK3eN6t0xTte2Bz6aUo
N9ZF05dDFLUZIFt2eucIF/TY4lvfzs6eaFLyB4BsrxZNDNZZYg7CQiFo+Fnvdi6H
bchBs77OsOdHJj2shn+K6a3CZqEKqoORCcLXqqxBUUEBxRgPB8aOBQ2tszRgW2bs
8pAgVCf2l8rHQc9h1d835S6dnx/AqexaTUquFbfmOb3fQtREwAANVlw=
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:19:09 2025 by rpki-client