Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e37342e302f32332d3233203d3e20313431393935.roa
File: 31332e3134302e37342e302f32332d3233203d3e20313431393935.roa (raw, json)
Hash identifier: 2//3hL6RUMT7XggCZIq0zmS7c7QYyiOLf6NLeBJO0AY=
Subject key identifier: 25:23:33:D2:4C:EC:D6:82:D1:06:01:54:2E:F9:CF:2D:80:FE:55:A4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5FB4611ACA1FF90787592D9C4656324C3211F233
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e37342e302f32332d3233203d3e20313431393935.roa
Signing time: Mon 21 Sep 2026 12:27:03 +0000
ROA not before: Mon 21 Sep 2026 12:22:03 +0000
ROA not after: Mon 20 Sep 2027 12:27:03 +0000
asID: 141995
IP address blocks: 13.140.74.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:b4:61:1a:ca:1f:f9:07:87:59:2d:9c:46:56:32:4c:32:11:f2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 21 12:22:03 2026 GMT
Not After : Sep 20 12:27:03 2027 GMT
Subject: CN=252333D24CECD682D10601542EF9CF2D80FE55A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:fa:f9:67:70:68:e5:e6:c3:53:72:c8:bc:
9e:e7:3c:6c:d5:6f:fe:82:f1:2b:53:58:bf:13:a7:
e9:82:b5:2f:84:9b:00:1a:df:b6:4b:56:11:fa:07:
37:48:e4:c8:b8:3b:d2:9b:80:24:c0:72:5c:d6:6f:
ec:f5:d3:29:7a:c9:e7:54:61:d9:93:4c:05:54:01:
cb:83:90:66:15:5f:d3:3a:95:6f:22:af:60:5b:9d:
ab:bd:02:fc:4c:67:f4:9e:40:30:1c:76:fa:4e:cb:
80:f7:9b:5d:ae:3a:8b:32:bd:2e:e0:8e:de:6a:67:
db:56:e7:b5:a8:3e:4c:8d:09:83:e7:88:64:54:e8:
0b:d6:b4:9d:3f:c3:91:a7:4e:19:53:0c:d0:7c:a0:
b0:40:03:c6:bd:e2:fc:d1:7c:c1:b9:a9:5a:a6:2c:
9e:9c:55:94:18:ff:08:00:b8:31:85:c8:62:29:da:
92:52:55:46:25:93:b5:82:15:70:66:f2:3f:0b:07:
eb:f8:53:ec:46:19:f6:92:a3:41:db:b0:f5:55:e8:
fd:b6:dc:9b:8a:54:b9:b9:ac:cd:ee:76:d2:cf:b3:
ee:fb:b0:eb:40:df:2d:90:f1:2e:8a:95:80:18:92:
5f:07:20:e8:2b:b0:3d:65:4c:66:27:2b:ea:f6:be:
22:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:23:33:D2:4C:EC:D6:82:D1:06:01:54:2E:F9:CF:2D:80:FE:55:A4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e37342e302f32332d3233203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.140.74.0/23
Signature Algorithm: sha256WithRSAEncryption
54:76:f9:05:bf:65:8d:12:79:3a:19:fc:c4:79:91:62:ab:48:
aa:09:b8:06:4e:c8:25:47:da:af:1d:d7:da:31:8d:e3:83:fa:
a4:70:4e:66:17:ed:e3:80:1a:a2:44:68:46:dc:fe:96:e0:5d:
69:ff:b9:5d:da:c9:52:41:23:8a:d1:ec:6b:8c:d4:bd:67:01:
fa:75:52:69:2e:84:b8:e3:a6:fb:10:c3:8e:34:5b:f2:e8:2e:
8b:26:7f:b6:25:06:d1:c5:bd:a8:07:a0:11:9a:2f:11:c7:77:
c6:5e:9e:a6:db:15:12:11:f2:bb:43:c4:9b:6e:41:80:9d:a4:
eb:6c:f3:d6:f6:8d:21:43:1e:7c:b3:ab:93:29:12:a9:b4:cd:
34:8f:c2:83:fc:ba:4b:4c:ea:c0:39:d5:08:dc:01:87:ad:e4:
80:f5:82:5f:89:aa:1a:f6:b8:3c:0f:6f:9a:8a:da:4e:65:92:
50:f5:3a:24:38:af:ef:8b:cb:e3:e6:a6:64:2e:b2:62:90:48:
c7:92:33:0d:93:cf:cc:a4:17:5e:fc:92:6e:11:e4:70:86:6b:
e3:ea:62:cc:36:e5:f8:4a:f3:1f:66:38:c6:e8:e6:46:7f:4d:
f1:88:15:fd:4d:9d:58:e3:ef:a2:8a:f0:ee:fe:31:3c:69:6e:
f1:91:7c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:43:59 2026 by rpki-client