Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa
File: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (raw, json)
Hash identifier: LW6kn7JmXaDtlgwub/TPDMUxsW78GAEBeOP03pg/4Ko=
Subject key identifier: C7:44:D9:7A:33:0D:F2:69:A7:24:AE:FF:4B:FB:61:41:20:D4:CA:65
Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial: 030191362BEBFAC1AE97B8CA493CA5EB274BA6F5
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa
Signing time: Wed 27 May 2026 00:26:36 +0000
ROA not before: Wed 27 May 2026 00:21:36 +0000
ROA not after: Wed 26 May 2027 00:26:36 +0000
asID: 60781
IP address blocks: 103.149.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 15:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:01:91:36:2b:eb:fa:c1:ae:97:b8:ca:49:3c:a5:eb:27:4b:a6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Validity
Not Before: May 27 00:21:36 2026 GMT
Not After : May 26 00:26:36 2027 GMT
Subject: CN=C744D97A330DF269A724AEFF4BFB614120D4CA65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f3:d9:18:17:c4:c0:5e:43:e3:0d:6f:d7:a7:
7a:7f:2a:3d:1e:6a:97:17:b9:c9:71:84:d4:97:30:
3f:c4:34:3f:58:a6:d7:7c:52:55:c7:ee:94:df:c5:
bb:21:31:ce:9f:9d:5b:cf:73:ff:64:cc:55:14:83:
89:8a:eb:11:8d:64:39:bd:29:09:9d:5b:08:6b:5b:
20:d8:ef:d1:37:dc:db:ad:6c:19:de:66:55:8f:bd:
b3:24:a1:f9:3a:5e:c7:b1:99:fd:22:fa:87:33:93:
28:09:fd:d4:4b:8e:6d:03:4c:fb:02:b5:a7:7f:ce:
a0:48:62:0c:49:b3:47:85:4b:27:8c:83:56:56:9e:
35:9f:27:ad:ec:f5:6a:dc:7e:44:4d:98:d2:1a:0d:
db:c5:81:aa:d1:45:14:5b:78:1d:5e:b6:d8:30:18:
a4:2c:b9:9d:d8:3d:7f:35:88:62:fb:e6:a5:ee:9b:
00:a8:4f:39:42:59:30:9c:a7:59:d4:47:2b:59:59:
61:6e:3e:da:d1:1f:30:51:8b:72:b4:89:ac:4f:16:
79:c2:21:0e:81:50:a7:92:e6:47:9f:36:a9:8c:c1:
14:5f:a4:31:e1:f7:9d:8c:ce:37:0a:1e:4b:e3:82:
74:63:62:3c:7b:14:88:29:4c:78:90:44:d4:d0:39:
70:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:44:D9:7A:33:0D:F2:69:A7:24:AE:FF:4B:FB:61:41:20:D4:CA:65
X509v3 Authority Key Identifier:
keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.149.169.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:e4:b1:74:0e:69:d9:91:c3:e1:0b:26:04:7f:cc:51:2e:74:
a2:23:9f:9e:87:bd:24:7f:19:74:87:95:88:32:36:09:f9:51:
9a:c5:b9:91:e6:6b:f3:19:29:ea:37:aa:af:6f:9c:fa:67:db:
c5:2a:0f:ac:bc:f5:1d:bc:91:e5:94:93:0c:84:84:5e:15:0a:
b7:bf:77:6e:13:c2:75:5a:5b:19:0a:85:cc:ea:e3:0c:55:a7:
a1:da:5d:2f:75:9c:ee:ba:10:8c:4a:b9:84:5b:a9:6f:53:95:
c9:c0:28:77:bc:ce:da:e9:84:87:b6:48:03:8d:24:4d:91:88:
aa:2c:d6:38:ee:50:a4:c2:89:55:fb:d2:72:86:98:e9:16:92:
d5:aa:78:4b:30:2d:01:fa:0e:b6:98:71:25:82:a1:6b:94:a2:
4c:7a:91:ae:33:92:3a:b1:80:27:56:53:52:a2:79:c8:64:85:
34:f4:e2:ca:42:8b:05:ee:60:82:d0:c1:6b:02:4f:53:c9:fb:
7e:d4:04:76:7b:89:4c:7f:ae:61:42:36:5f:e3:61:22:4a:12:
46:1f:ca:d9:08:00:ed:46:db:91:62:1b:52:c8:aa:ef:55:f1:
76:d4:2e:67:10:00:b4:5d:f1:cf:aa:b2:7d:8a:f6:de:f6:73:
d2:c7:03:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:07:24 2026 by rpki-client