Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa
File: 3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa (raw, json)
Hash identifier: yKZlfj+dim9IpeOPok1lfUiZi1MHzmaDZPGLMC3tfYU=
Subject key identifier: 7E:CE:C1:3F:1F:19:AC:E7:D7:B8:80:5B:2A:AC:A1:72:BB:D5:CC:32
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 44B3E9FCEF5AD2353A1801DAEE1E3020DD17CD03
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa
Signing time: Thu 31 Jul 2025 14:03:31 +0000
ROA not before: Thu 31 Jul 2025 13:58:31 +0000
ROA not after: Thu 30 Jul 2026 14:03:31 +0000
asID: 147261
IP address blocks: 103.49.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:52:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:b3:e9:fc:ef:5a:d2:35:3a:18:01:da:ee:1e:30:20:dd:17:cd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Jul 31 13:58:31 2025 GMT
Not After : Jul 30 14:03:31 2026 GMT
Subject: CN=7ECEC13F1F19ACE7D7B8805B2AACA172BBD5CC32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:59:9f:56:08:cd:07:43:fc:2e:29:b6:0a:9e:
d6:b3:8b:28:f8:ee:96:5b:27:c9:f9:41:03:57:20:
b2:e2:bc:ec:28:a0:aa:db:ce:95:32:3f:3e:63:4f:
93:97:c4:86:24:3d:1a:34:97:ce:cd:f4:f1:6c:6e:
cc:94:36:7f:c2:26:c1:36:bf:a1:88:0b:59:90:ba:
68:6e:d7:0e:ad:f8:8d:cf:37:6c:ee:25:5a:5f:7c:
b9:47:c2:6c:39:25:6f:a0:3f:20:14:77:18:b4:11:
18:da:11:48:36:71:89:0b:27:98:28:61:81:13:36:
fb:33:cf:62:d1:1d:d0:5c:30:51:dc:3c:79:f4:c0:
ef:33:6e:38:e5:0e:5e:97:c6:bd:25:51:a4:5d:71:
aa:04:b6:4f:33:77:59:3b:3d:03:da:3d:2b:3b:59:
6b:5e:0d:47:b2:d8:bc:ff:fd:df:95:3f:49:c9:ac:
f2:b2:30:97:3c:76:09:a3:2e:a6:ec:37:9e:81:f0:
65:aa:ce:29:86:4d:e8:ee:17:7a:73:d4:04:5b:d1:
bb:e1:ef:6a:65:20:7d:39:1a:86:d8:89:0b:5b:7f:
fb:c5:2b:9d:52:ac:ea:cb:d6:0e:83:58:4e:64:8c:
80:b7:92:73:a8:77:5a:8d:56:24:5b:13:4a:0e:7a:
d4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CE:C1:3F:1F:19:AC:E7:D7:B8:80:5B:2A:AC:A1:72:BB:D5:CC:32
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.49.131.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:72:59:5d:95:dc:19:65:eb:dc:d0:c9:a9:5a:c8:96:5a:dc:
10:65:24:da:15:d4:4d:67:d7:f1:de:90:b6:6e:b5:61:b1:5c:
21:2c:f2:46:40:a8:5f:6c:83:00:e0:26:7f:f9:ee:86:fd:a3:
40:75:90:86:6a:c1:7c:de:dc:ce:db:38:08:06:e0:9d:99:d8:
09:fd:93:55:de:0f:a5:39:d3:a8:e8:2f:e2:18:cd:8e:ea:e1:
ea:54:53:d8:98:92:aa:9f:07:b1:f2:39:43:e2:b6:b3:85:d4:
6d:d3:93:39:b0:ba:54:d2:5d:d0:1f:4e:25:f4:18:84:62:8b:
bf:e1:c5:44:aa:a1:fa:c3:d5:b2:f6:75:1f:82:f3:d1:29:fc:
b9:d1:ac:12:db:00:7c:03:e8:3f:05:4f:5a:bb:e3:9b:77:de:
e0:21:df:a4:cd:b6:df:b1:e9:45:43:95:72:8d:e7:31:9e:aa:
54:f9:c6:93:fa:c6:18:e3:3c:0c:23:0c:cb:dd:e9:f3:b9:b6:
07:ae:74:2d:ad:29:5c:d6:b4:bd:65:ac:d8:89:43:fb:2e:04:
be:e7:50:63:f4:6c:a8:0a:e4:45:71:33:a9:04:2e:7d:62:43:
54:be:75:9e:66:6e:01:06:a4:df:a8:1d:28:16:2a:93:06:2f:
12:5a:a5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:47:30 2025 by rpki-client