Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e31362e302f32312d3234203d3e203432353332.roa
File: 31332e3134302e31362e302f32312d3234203d3e203432353332.roa (raw, json)
Hash identifier: ya/E7BON1a7y3bQ9vNMxg9hLTaTNxMN9UB/0iPW8CvI=
Subject key identifier: 4F:10:EE:6A:78:29:33:58:C9:B0:07:4D:F6:63:EE:02:AE:E2:3E:25
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 69F112B24A72A1A3132AF8DB9BA7F4097E860AF3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e31362e302f32312d3234203d3e203432353332.roa
Signing time: Wed 18 Mar 2026 20:50:39 +0000
ROA not before: Wed 18 Mar 2026 20:45:39 +0000
ROA not after: Wed 17 Mar 2027 20:50:39 +0000
asID: 42532
IP address blocks: 13.140.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:f1:12:b2:4a:72:a1:a3:13:2a:f8:db:9b:a7:f4:09:7e:86:0a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 18 20:45:39 2026 GMT
Not After : Mar 17 20:50:39 2027 GMT
Subject: CN=4F10EE6A78293358C9B0074DF663EE02AEE23E25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8b:ee:88:89:bb:3e:3d:98:0d:69:f7:95:09:
57:e1:e1:9b:da:a6:2f:6d:fa:1e:2f:52:20:ed:3c:
a6:a7:3b:0b:0a:9f:39:18:8c:e3:32:21:99:9c:d7:
3c:34:61:a7:7f:26:96:6b:29:96:a5:64:4b:ac:2f:
3d:4c:e3:f8:a8:e3:8f:5c:33:db:9e:f3:98:bd:da:
d1:f7:3a:64:da:d2:1a:17:ba:7a:61:ff:3b:83:9b:
7f:53:de:e2:35:3c:b4:85:fa:0a:f4:48:0e:05:29:
69:2f:3e:41:4e:63:78:ba:17:1f:79:15:c2:82:b5:
c5:2a:af:0d:04:ef:f8:b5:5c:c9:c1:2e:cf:85:70:
33:98:31:bb:db:b7:b3:2e:e6:eb:e8:6e:3a:a9:1e:
40:37:ed:2e:a9:22:4c:04:e2:dc:18:57:44:c6:c3:
9d:c1:5c:47:5e:99:cc:16:cc:0e:f0:01:32:6f:53:
74:18:16:05:32:b8:be:00:c9:a7:86:f0:ea:ad:0f:
1a:85:84:0d:08:c0:d8:84:62:ed:26:19:73:90:0e:
87:22:25:98:f2:cf:76:b0:99:92:40:e0:6d:6a:d9:
64:ee:aa:ee:5d:06:f3:4e:11:74:0c:c7:16:33:13:
0a:bf:75:2f:50:cc:c9:4a:72:8a:e4:6c:c0:3d:16:
a4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:10:EE:6A:78:29:33:58:C9:B0:07:4D:F6:63:EE:02:AE:E2:3E:25
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e31362e302f32312d3234203d3e203432353332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.140.16.0/21
Signature Algorithm: sha256WithRSAEncryption
69:9c:17:bc:73:63:3a:e0:7f:c7:6b:c0:20:cd:10:36:62:55:
81:2f:4c:07:a4:0c:8e:7d:6d:8f:34:cf:ec:57:82:96:c3:30:
ff:80:4e:d6:6f:c2:2e:b5:e0:d8:6d:bb:f4:b6:c6:3c:ef:15:
6f:4e:7e:9b:c3:d6:32:ce:3b:a3:f3:04:0a:27:c3:60:d6:52:
36:d7:20:c5:5a:39:6d:f2:cd:8d:d3:07:fc:73:e4:ad:7a:2d:
23:3b:c3:63:95:35:b2:a3:e4:a8:df:7c:ef:5f:a1:88:92:0b:
64:be:fa:65:a9:7c:bb:2c:fa:64:81:db:a9:18:d1:c7:dc:9f:
94:70:e8:d4:a4:a2:e7:87:be:88:8c:b8:f5:98:ef:3d:55:1e:
a6:e3:20:25:87:eb:3e:53:54:cf:73:c1:b5:40:01:00:df:b0:
22:57:a8:5e:47:94:20:f5:ca:1a:b8:31:5a:12:7e:92:99:e1:
a7:c1:79:e2:e5:87:fc:1f:20:fc:04:73:39:50:d3:5a:53:67:
76:51:c8:be:79:e0:7b:67:c2:27:d8:f7:b1:7c:cd:4a:7e:e4:
46:ca:78:2e:64:ce:e8:f4:9b:f7:86:f8:4d:26:5a:93:f9:a9:
c8:86:b4:be:0a:44:27:c1:03:6a:6d:88:7f:94:d5:6a:4c:74:
30:3d:5e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:01:19 2026 by rpki-client