Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e32342e302f32342d3332203d3e20323136313531.roa
File: 31332e3134302e32342e302f32342d3332203d3e20323136313531.roa (raw, json)
Hash identifier: Zv+KTyFqTGuSZdhhQOu/gyRNuem4Odek5Lp2Mb79ksw=
Subject key identifier: B9:FD:68:BB:D1:98:87:3B:F9:90:35:31:A3:AD:EA:E1:7B:14:EB:1D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 725016BE2A30FEB816155E78A2459833FA9F5ED8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e32342e302f32342d3332203d3e20323136313531.roa
Signing time: Tue 20 Oct 2026 07:51:37 +0000
ROA not before: Tue 20 Oct 2026 07:46:37 +0000
ROA not after: Tue 19 Oct 2027 07:51:37 +0000
asID: 216151
IP address blocks: 13.140.24.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:50:16:be:2a:30:fe:b8:16:15:5e:78:a2:45:98:33:fa:9f:5e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 07:46:37 2026 GMT
Not After : Oct 19 07:51:37 2027 GMT
Subject: CN=B9FD68BBD198873BF9903531A3ADEAE17B14EB1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:da:5d:b3:2e:19:27:cf:d5:d2:d7:9b:cc:8d:
61:d0:4c:d0:1f:a6:0d:34:14:2d:0f:3e:d5:a5:27:
51:23:fd:f4:3e:2a:71:90:42:f0:1f:3e:3e:a8:18:
2d:52:7a:00:a3:67:48:e6:ab:8a:e3:23:5c:86:60:
81:50:e5:eb:08:c1:65:4e:8b:10:6a:30:fe:1a:d7:
92:bd:92:dd:95:27:9b:f9:91:b5:12:96:cf:72:f1:
42:c8:6f:5f:0b:f6:9f:09:31:d8:01:2b:41:19:30:
4f:fd:be:ad:48:60:8c:65:c8:c6:dc:d1:b4:29:0c:
27:a6:77:e6:e7:7f:71:ca:f3:27:18:77:e0:95:a3:
cc:0e:97:e4:d3:2d:31:ef:33:9c:48:38:73:86:44:
33:d6:7f:8f:0e:20:fb:18:cb:e7:30:63:a0:9a:6e:
66:6d:8c:50:02:2f:07:cd:6d:a4:1c:47:9d:03:28:
dc:e7:93:26:aa:f6:ee:54:6c:94:a7:ca:f6:43:47:
a1:00:f2:cb:c5:9e:ca:6f:cc:c6:7d:4b:42:8a:d0:
cd:c1:6a:99:ec:ae:ac:16:29:a5:cd:f6:6a:0f:08:
b2:e5:60:58:f8:fc:d7:2b:00:19:e2:c9:fa:02:dc:
7e:7a:d9:68:77:8f:b3:92:17:11:ef:9f:e6:44:15:
a3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FD:68:BB:D1:98:87:3B:F9:90:35:31:A3:AD:EA:E1:7B:14:EB:1D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e32342e302f32342d3332203d3e20323136313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.140.24.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:1a:be:91:2b:d4:e7:ef:15:16:a3:f1:47:38:d7:64:5d:26:
83:ab:84:af:7e:07:4c:10:1b:0e:a6:12:50:41:b2:e7:b9:4e:
c1:a7:63:cf:d5:17:93:9e:56:4b:b1:8e:97:17:2b:5f:3b:5c:
2d:d4:a5:09:30:8e:35:25:20:d9:d2:fb:cc:ee:ae:b4:f5:ed:
0f:fd:e0:55:40:c3:c7:e9:23:d1:f1:09:09:b5:1b:2d:7d:7f:
db:bb:cf:79:c1:d0:a5:4c:1e:b1:8d:ee:57:75:e3:42:ab:7c:
62:d2:c3:c4:1b:bb:68:b1:1f:62:2d:68:db:ae:9a:0d:88:c9:
6a:62:20:c0:86:20:53:a8:b9:cb:79:03:08:e2:a0:27:23:44:
89:e0:72:45:c0:d8:89:ce:14:a2:d3:1f:2c:01:61:2f:c5:5a:
1c:a8:49:8e:6f:9b:cb:ce:fe:78:2b:1f:cd:58:f1:41:02:95:
e5:07:46:67:37:1d:fb:19:4a:e4:a8:49:b8:53:66:30:bf:bc:
da:f3:9f:e9:a5:ef:f2:76:c8:c7:52:a6:26:36:59:af:0f:5e:
e6:83:19:02:86:60:7b:07:94:32:57:f5:3e:fa:eb:f4:69:8d:
23:d5:cc:97:3e:89:bb:af:78:29:4c:21:f0:26:0a:74:b9:78:
50:09:a9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:23:09 2026 by rpki-client