Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133302e302f32342d3234203d3e20323135323238.roa
File: 3130332e34392e3133302e302f32342d3234203d3e20323135323238.roa (raw, json)
Hash identifier: 147h2J6b+NOJXC28D6UU/j3YTYLc8UIqVeSHprm2aSY=
Subject key identifier: 29:C9:04:8B:5D:C4:0B:A0:46:2D:8B:A8:DB:3A:F5:FB:4B:93:C3:D4
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 5B0A944585A1C0596D27D843A249F3597759AB6F
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133302e302f32342d3234203d3e20323135323238.roa
Signing time: Sat 07 Feb 2026 16:26:16 +0000
ROA not before: Sat 07 Feb 2026 16:21:16 +0000
ROA not after: Sat 06 Feb 2027 16:26:16 +0000
asID: 215228
IP address blocks: 103.49.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:0a:94:45:85:a1:c0:59:6d:27:d8:43:a2:49:f3:59:77:59:ab:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Feb 7 16:21:16 2026 GMT
Not After : Feb 6 16:26:16 2027 GMT
Subject: CN=29C9048B5DC40BA0462D8BA8DB3AF5FB4B93C3D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:78:4d:11:b6:1c:9c:1f:b7:bf:99:05:2b:
81:46:79:e5:a1:37:14:14:8c:f7:92:56:ee:d5:cc:
ec:ba:86:cc:77:e1:4e:03:93:b5:09:ae:bf:ac:f0:
b4:a4:1d:b8:e9:23:bd:13:05:3c:13:70:69:22:d8:
8b:cd:8d:a2:99:0e:d6:6b:6a:2b:eb:bc:af:52:bc:
66:be:af:3e:38:06:cb:7b:ea:3e:57:24:59:6c:8c:
6b:0e:02:dd:87:49:c1:bf:5d:df:95:99:24:42:41:
c4:63:bf:14:6b:89:61:b0:a4:4d:65:ee:ff:b4:63:
8d:1d:40:ba:00:b9:89:76:86:7c:e2:05:a7:22:ab:
70:62:a6:e6:6f:d6:28:1e:99:b2:8e:4c:16:99:a4:
71:dd:c2:25:f1:43:bc:a2:0c:63:cf:5e:82:f4:a7:
2e:cc:00:7e:cb:3d:38:2f:bf:72:6c:94:98:f0:4e:
8d:cc:f2:8b:ce:94:89:f7:63:8b:bf:98:f1:e6:70:
6c:f1:8b:41:2f:f7:58:a7:14:d4:32:1b:9a:cf:78:
2d:16:cc:11:d6:0a:b1:4d:b5:dc:47:a9:3f:c3:93:
e8:f3:fd:2a:fc:49:a4:0e:c1:c9:e0:bf:02:b4:c8:
c3:3b:41:77:83:8e:d5:21:c6:39:0c:ca:f7:76:a5:
22:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C9:04:8B:5D:C4:0B:A0:46:2D:8B:A8:DB:3A:F5:FB:4B:93:C3:D4
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133302e302f32342d3234203d3e20323135323238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.49.130.0/24
Signature Algorithm: sha256WithRSAEncryption
02:a9:56:c3:96:65:8f:1c:dc:07:08:9c:e1:c5:c6:3c:d1:b6:
1e:04:66:48:40:3e:b2:2b:db:ef:1b:09:c7:d4:96:f8:65:41:
2d:ce:bb:49:4b:7d:41:d7:7b:14:96:98:42:78:4a:61:3e:89:
a0:07:79:b8:36:ae:9d:5a:c1:26:a4:db:e1:81:18:4e:53:7f:
8d:16:9f:24:5e:f2:49:91:32:72:dd:4b:b5:88:cd:f0:bc:14:
66:ca:95:ff:32:cd:f1:3f:1f:b7:17:e3:b6:e6:c2:fd:f9:9f:
1c:62:46:58:2a:dc:30:a3:53:23:75:b3:21:5d:6e:69:f1:99:
4a:b2:d8:a1:da:6a:80:4b:d0:37:ca:7c:b0:5f:60:87:38:7b:
22:23:e8:d7:b4:49:49:aa:c2:01:fe:eb:f9:11:51:94:52:02:
c7:45:5f:79:fd:59:d4:59:24:81:79:e7:bd:a4:40:ec:fa:8a:
25:7f:95:9a:cd:44:9a:1d:39:15:f6:8f:29:e4:91:c8:29:dd:
f2:53:f9:88:b3:61:be:31:7f:c9:c2:09:66:5d:d8:17:a8:98:
12:45:90:2d:df:17:38:6b:c7:ca:84:68:4f:56:df:ee:7b:16:
d8:dc:38:62:a4:b5:92:ef:bf:ed:f0:74:4f:50:a9:d6:2f:41:
7f:73:4b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:47:29 2026 by rpki-client