Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e32342e302f32342d3234203d3e20323136313531.roa
File: 31332e3134302e32342e302f32342d3234203d3e20323136313531.roa (raw, json)
Hash identifier: SnpnT/ajWwbJ9pdeomz06Du/PQkoZPHtd17s4EOWAMY=
Subject key identifier: 72:E5:FC:D8:23:47:34:3D:B9:1F:3F:7E:FF:12:24:88:B5:2A:A3:40
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 63B7947DBBB4FAE71B2F8AA71C77971CEB660687
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e32342e302f32342d3234203d3e20323136313531.roa
Signing time: Tue 31 Mar 2026 09:05:15 +0000
ROA not before: Tue 31 Mar 2026 09:00:15 +0000
ROA not after: Tue 30 Mar 2027 09:05:15 +0000
asID: 216151
IP address blocks: 13.140.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:b7:94:7d:bb:b4:fa:e7:1b:2f:8a:a7:1c:77:97:1c:eb:66:06:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 31 09:00:15 2026 GMT
Not After : Mar 30 09:05:15 2027 GMT
Subject: CN=72E5FCD82347343DB91F3F7EFF122488B52AA340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:77:cf:cb:bc:b1:f4:68:17:29:f5:92:aa:36:
17:25:83:f0:a5:22:bf:68:7c:10:53:80:61:9d:fd:
6f:7f:bb:af:34:e4:aa:7c:1e:14:3b:32:16:9e:0f:
5c:19:f4:e9:bf:be:a3:6d:ba:d0:57:06:7d:12:e4:
b4:23:a8:66:c4:13:9c:21:e5:3c:a9:7c:c8:a7:e2:
d2:d4:0b:45:5e:cd:eb:ca:7c:a4:5a:f6:f3:22:80:
ae:29:53:0b:20:b7:0d:94:d6:7a:8f:ad:83:a4:5b:
5e:c4:e6:13:a6:e9:e4:11:6f:65:84:cc:64:a8:72:
1f:e7:d5:a6:54:c8:74:c5:6f:51:cf:ec:80:88:44:
b3:45:e1:4f:7b:90:1c:1a:1e:46:ad:29:c6:a8:4b:
17:70:61:2a:ec:10:3e:62:e7:5b:31:e3:ec:d4:64:
87:b1:8f:ac:e0:45:09:50:71:0b:77:fe:15:a7:a6:
89:49:e9:37:ed:bb:38:60:33:40:a3:05:c3:31:c0:
d4:74:46:f7:23:11:81:3d:39:ac:ff:5e:a7:0d:40:
5d:01:00:8a:f0:09:db:61:4c:91:ea:7d:fb:26:83:
f4:18:d0:a7:d3:41:97:15:42:7c:28:10:bd:bf:d7:
8e:37:ff:f5:01:03:b9:12:cb:6a:fd:d4:a8:6b:8d:
09:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E5:FC:D8:23:47:34:3D:B9:1F:3F:7E:FF:12:24:88:B5:2A:A3:40
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e32342e302f32342d3234203d3e20323136313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.140.24.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:fa:7a:1f:aa:06:95:9b:20:0a:0e:a0:ff:8f:d2:7a:b1:0d:
d0:23:ce:53:49:94:79:4c:b4:1a:5d:af:7c:e4:94:77:72:cd:
f9:cc:ea:45:53:bd:f1:6f:ab:a0:53:d0:50:c7:e9:ff:05:5e:
54:6c:ad:b3:bd:98:1e:89:d2:38:9b:9c:17:25:b0:55:12:b8:
6a:7f:a1:f5:8c:21:b0:4b:66:96:34:df:17:93:7c:c7:94:04:
1a:28:05:c5:4c:54:53:c9:a8:81:fd:cf:9e:72:7f:2f:9d:dc:
ac:0c:e5:24:cf:22:0c:e8:dc:de:b3:70:3f:d4:e3:ad:c2:92:
7c:d9:7d:3c:e3:0c:f1:ea:c1:e4:e5:4c:5c:95:13:3d:9d:b5:
9f:f4:cf:f1:c3:06:37:fb:ba:75:ae:77:46:b6:2f:69:c4:1c:
2d:ff:bc:a6:a5:9f:39:d3:05:fe:7f:ab:53:be:f9:92:c2:1d:
12:29:6f:06:85:97:f8:e5:9d:fb:32:12:2b:e9:ca:23:34:29:
6f:74:d8:c3:f1:fd:17:51:a3:33:36:cb:30:1c:78:86:81:c8:
7c:1b:2a:ac:eb:8b:8e:b1:9f:6a:bf:26:f8:02:88:95:fe:da:
0c:53:52:67:c2:b5:d9:2b:f7:54:a7:65:aa:33:bd:bc:89:3a:
37:c2:20:0b
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUY7eUfbu0+ucbL4qnHHeXHOtmBocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjAzMzEwOTAwMTVaFw0yNzAzMzAwOTA1MTVaMDMxMTAvBgNV
BAMTKDcyRTVGQ0Q4MjM0NzM0M0RCOTFGM0Y3RUZGMTIyNDg4QjUyQUEzNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+d8/LvLH0aBcp9ZKqNhclg/Cl
Ir9ofBBTgGGd/W9/u6805Kp8HhQ7MhaeD1wZ9Om/vqNtutBXBn0S5LQjqGbEE5wh
5TypfMin4tLUC0VezevKfKRa9vMigK4pUwsgtw2U1nqPrYOkW17E5hOm6eQRb2WE
zGSoch/n1aZUyHTFb1HP7ICIRLNF4U97kBwaHkatKcaoSxdwYSrsED5i51sx4+zU
ZIexj6zgRQlQcQt3/hWnpolJ6TftuzhgM0CjBcMxwNR0RvcjEYE9Oaz/XqcNQF0B
AIrwCdthTJHqffsmg/QY0KfTQZcVQnwoEL2/1443//UBA7kSy2r91KhrjQmDAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUcuX82CNHND25Hz9+/xIkiLUqo0AwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzMzJlMzEzNDMwMmUzMjM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM2MzEzNTMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
DYwYMA0GCSqGSIb3DQEBCwUAA4IBAQAv+nofqgaVmyAKDqD/j9J6sQ3QI85TSZR5
TLQaXa985JR3cs35zOpFU73xb6ugU9BQx+n/BV5UbK2zvZgeidI4m5wXJbBVErhq
f6H1jCGwS2aWNN8Xk3zHlAQaKAXFTFRTyaiB/c+ecn8vndysDOUkzyIM6Nzes3A/
1OOtwpJ82X084wzx6sHk5UxclRM9nbWf9M/xwwY3+7p1rndGti9pxBwt/7ympZ85
0wX+f6tTvvmSwh0SKW8GhZf45Z37MhIr6cojNClvdNjD8f0XUaMzNsswHHiGgch8
Gyqs64uOsZ9qvyb4AoiV/toMU1JnwrXZK/dUp2WqM728iTo3wiAL
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:20 2026 by rpki-client