Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133302e302f32342d3234203d3e203535313737.roa
File: 3130332e34392e3133302e302f32342d3234203d3e203535313737.roa (raw, json)
Hash identifier: Iw83hVbw1MST0UjRlAMudxk4iizrVaWamdUAy9o4Wp4=
Subject key identifier: 8E:58:67:B5:FA:C7:71:8E:58:2B:EA:18:DB:FA:AE:FE:80:85:E9:0A
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 585911C65AE9A1ED68FB35CA6C7654F898904028
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133302e302f32342d3234203d3e203535313737.roa
Signing time: Fri 17 Apr 2026 05:51:21 +0000
ROA not before: Fri 17 Apr 2026 05:46:21 +0000
ROA not after: Fri 16 Apr 2027 05:51:21 +0000
asID: 55177
IP address blocks: 103.49.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:57:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:59:11:c6:5a:e9:a1:ed:68:fb:35:ca:6c:76:54:f8:98:90:40:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Apr 17 05:46:21 2026 GMT
Not After : Apr 16 05:51:21 2027 GMT
Subject: CN=8E5867B5FAC7718E582BEA18DBFAAEFE8085E90A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:83:d8:86:e8:9c:08:9d:5a:f2:3d:29:4f:f4:
50:bc:92:ee:d2:6f:4d:51:fc:7f:27:94:f7:84:53:
e0:58:d8:1d:51:a4:da:9d:f6:f8:29:f5:a7:06:4c:
c6:94:d7:09:f4:64:42:a4:15:93:c2:bf:02:81:20:
63:e6:fd:13:e1:3b:0b:c5:a3:65:9e:c4:00:31:b9:
65:27:09:c2:b3:15:4b:47:62:b0:c7:1d:de:75:26:
c0:a4:d4:2a:06:4a:0c:f2:4a:a2:05:54:6e:8f:ce:
da:d5:92:6f:b6:74:80:17:1a:c9:13:c5:d1:1f:88:
46:35:aa:09:be:3f:b1:ed:57:35:94:a6:18:6d:bc:
25:ab:32:2c:1c:db:d3:aa:40:94:d0:ce:a0:fc:65:
bd:6a:e1:b5:fe:40:26:da:92:10:da:4f:32:37:78:
41:10:9d:21:65:a6:ca:0f:e7:4f:87:9c:c5:0d:3b:
7e:ab:72:42:20:2c:ff:86:3e:c4:a5:94:c2:aa:5b:
63:b6:0a:c1:4f:6a:93:37:8a:95:7a:b6:1e:1d:29:
38:18:d5:d7:78:12:fe:2f:61:79:ac:f9:f1:dc:46:
99:07:04:49:2c:89:6e:79:80:03:f4:98:37:05:cc:
35:ef:af:b4:17:3b:18:10:60:57:fa:a5:98:b3:60:
92:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:58:67:B5:FA:C7:71:8E:58:2B:EA:18:DB:FA:AE:FE:80:85:E9:0A
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133302e302f32342d3234203d3e203535313737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.49.130.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:cd:60:62:0f:01:3d:a2:ef:24:33:4b:7d:54:1e:b8:dd:12:
2b:e7:46:88:37:13:a5:f2:6a:18:46:9b:7d:e7:89:78:ff:07:
8c:f9:a8:8e:06:b2:65:92:8c:22:e4:d6:17:d4:84:f0:ae:19:
e9:ef:bf:86:61:33:30:2e:20:41:bc:fa:2e:84:cd:b8:5a:ef:
1a:dc:e4:58:b5:5f:5f:90:db:c5:60:81:ba:f6:21:80:d0:44:
ce:fa:95:0f:14:41:b8:fe:19:1b:4f:24:ef:e7:46:ed:98:aa:
76:43:68:09:27:a5:38:ce:8a:ff:d8:bf:ab:14:08:89:c7:c9:
48:11:6c:8b:e2:5d:56:fb:d5:79:31:e0:8a:72:7c:ac:f9:c9:
0b:8b:e8:0d:8b:c0:3e:00:2c:ad:16:10:74:aa:dd:f5:d6:b8:
7d:d1:0d:95:2e:0e:e3:62:8c:bc:fc:52:6a:89:a7:5c:82:b0:
d4:75:04:d1:4a:d1:83:2f:0e:bb:00:6c:57:b2:ff:e4:c1:82:
29:4a:24:06:3f:1e:80:69:44:d5:f0:61:db:e1:ad:7e:ef:23:
3f:b5:6b:35:b1:57:4b:23:a2:49:36:6f:1c:d3:e1:af:c4:61:
f7:96:79:35:16:4f:c2:09:55:88:30:9b:7c:9b:fc:b2:89:9b:
57:19:21:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:32 2026 by rpki-client