Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e37382e302f32332d3233203d3e20313431393935.roa
File: 31332e3134302e37382e302f32332d3233203d3e20313431393935.roa (raw, json)
Hash identifier: bHArWV2JQnzmMiOLClko8vCERqgzfEkB1FsSkL1D/1k=
Subject key identifier: C3:76:DD:4D:14:DB:75:94:E5:67:3E:06:BA:B4:3D:6A:DF:BF:B6:93
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7DE003DBF74687417906CB82C8CB7F11BBE6A457
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e37382e302f32332d3233203d3e20313431393935.roa
Signing time: Mon 21 Sep 2026 12:27:05 +0000
ROA not before: Mon 21 Sep 2026 12:22:05 +0000
ROA not after: Mon 20 Sep 2027 12:27:05 +0000
asID: 141995
IP address blocks: 13.140.78.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:e0:03:db:f7:46:87:41:79:06:cb:82:c8:cb:7f:11:bb:e6:a4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 21 12:22:05 2026 GMT
Not After : Sep 20 12:27:05 2027 GMT
Subject: CN=C376DD4D14DB7594E5673E06BAB43D6ADFBFB693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:be:62:ff:fd:48:3b:f3:8c:c2:61:c6:5a:9d:
d1:33:34:66:d8:f2:f6:59:f3:af:71:ed:f2:d9:f5:
eb:99:55:ad:68:7c:d2:8c:14:54:36:38:6a:e8:c3:
8d:08:41:6b:ac:12:36:5a:d2:42:28:7e:ad:60:27:
23:fd:b6:b9:d9:3c:cf:33:19:14:5b:f6:31:fa:38:
7c:46:1e:84:e1:cf:d7:99:68:94:6d:9a:52:d0:bb:
6a:ab:a6:b4:20:9e:a3:e4:10:32:16:52:9a:66:54:
12:a6:b7:c4:ed:2d:30:e8:9c:e4:2b:a9:02:24:87:
c5:0a:5c:56:08:87:c0:53:6b:6c:3e:32:39:44:7c:
8d:10:53:b5:03:02:c5:02:db:e1:49:92:0b:80:4d:
3a:9a:41:3e:12:6b:55:ef:81:e3:e0:33:44:46:dd:
95:a1:65:cb:81:53:f2:24:c4:2e:ca:ce:16:ec:90:
98:e2:ac:bb:a3:db:73:8e:83:d1:89:a2:2e:d6:5d:
1f:ca:99:d1:3e:25:a1:44:d7:a4:9d:2a:c3:ee:c5:
0c:04:68:60:c7:8f:bb:00:e0:a6:59:61:97:f7:f4:
33:81:00:51:46:09:b3:a6:92:ec:92:17:f9:ba:f6:
5e:92:c4:5b:49:df:e6:c1:95:0d:3a:f9:83:9c:a8:
13:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:76:DD:4D:14:DB:75:94:E5:67:3E:06:BA:B4:3D:6A:DF:BF:B6:93
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e37382e302f32332d3233203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.140.78.0/23
Signature Algorithm: sha256WithRSAEncryption
78:30:64:3e:e8:da:55:e9:92:3a:7c:82:e6:60:6f:76:fa:43:
a6:91:6b:ed:33:b0:ff:4e:ec:9a:6f:b7:2c:67:8e:fb:00:94:
9a:6d:f4:74:81:e3:9b:11:5b:ad:e4:ac:20:83:a2:f0:2b:40:
f9:51:52:a5:b1:12:cc:0c:9c:f8:56:e5:91:99:76:9c:50:6e:
1f:3b:11:ba:bc:3b:da:27:44:36:2a:e1:6d:78:99:18:65:5f:
29:e4:bd:4d:72:2b:40:05:4d:c5:17:46:81:0a:91:d7:1a:23:
04:9b:00:9f:a6:59:a8:75:e3:6f:eb:84:fe:42:8e:5b:db:3d:
f2:ae:47:65:7a:5f:cf:40:ec:4d:1a:3e:c1:2e:ea:57:d0:7e:
16:cc:0f:b9:cb:53:56:e8:44:63:13:78:04:02:80:e8:12:97:
c5:5b:5f:24:0f:88:1c:67:7a:2a:c0:f3:fa:d3:16:61:17:52:
ee:31:16:dd:09:8a:aa:11:eb:a5:9f:5d:b2:06:4f:96:ce:08:
09:d8:ff:88:c3:bc:63:aa:74:10:cb:5f:68:32:91:0a:8b:8f:
ec:e4:de:8d:f9:87:28:4f:0a:0f:8b:e7:1c:aa:f3:1d:08:14:
78:45:34:00:e7:c8:bd:6b:5e:b8:7f:13:1d:fb:bd:01:84:9c:
61:07:c2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:47:37 2026 by rpki-client