Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e32352e302f32342d3234203d3e20323033333830.roa
File: 31332e3134302e32352e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: DoIZKFVzzvvje5v+y1l2OEuJ4n2NFLA2pKqOKS/cgMA=
Subject key identifier: E5:C3:34:59:5F:53:9D:E3:C8:E1:14:EE:88:95:88:2A:61:6D:42:7E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3CF3BAA541E5AD00ACC9353DD8F9F85928E94A3F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e32352e302f32342d3234203d3e20323033333830.roa
Signing time: Sun 19 Apr 2026 07:30:18 +0000
ROA not before: Sun 19 Apr 2026 07:25:18 +0000
ROA not after: Sun 18 Apr 2027 07:30:18 +0000
asID: 203380
IP address blocks: 13.140.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:f3:ba:a5:41:e5:ad:00:ac:c9:35:3d:d8:f9:f8:59:28:e9:4a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 19 07:25:18 2026 GMT
Not After : Apr 18 07:30:18 2027 GMT
Subject: CN=E5C334595F539DE3C8E114EE8895882A616D427E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:02:af:61:f6:03:14:81:49:b3:dc:8f:9b:5d:
2a:e8:72:0a:11:08:3d:e8:1a:5c:10:53:58:4c:b2:
8b:12:a9:d6:92:4f:4b:59:bb:92:35:f8:1b:5c:c5:
0f:ce:96:8a:a1:f6:c1:ac:b3:4f:d3:be:9a:4a:66:
f6:7b:a2:5d:1e:4a:c3:9a:24:13:df:17:11:a7:fc:
3d:58:ed:28:41:e2:62:e7:90:d6:9b:e6:d7:7a:23:
6d:a3:42:e9:dd:e7:0d:18:38:5c:0b:d1:e2:d5:13:
6e:8e:95:13:ec:dd:48:1a:14:1b:fc:08:da:cb:e8:
31:67:e9:cf:7a:5f:c4:01:f3:74:3e:44:92:ed:85:
91:b6:61:c4:0a:23:7b:0e:2b:be:67:e8:35:8a:d4:
b8:ba:42:bb:cd:3f:86:44:3f:3e:10:d4:cb:66:64:
7c:68:45:09:d2:1c:98:ef:6f:3e:2e:83:77:6d:0c:
8f:18:92:1e:33:4d:c8:fd:0e:57:96:77:27:c3:a7:
ff:a2:a4:87:d9:db:fd:9b:e8:4f:d9:ef:cf:46:6a:
0e:ce:b3:ca:51:e5:6d:03:8b:fb:1e:4c:34:fd:b7:
f5:04:ad:f7:62:bf:82:9f:e4:15:ea:dc:66:f3:f3:
f6:50:7a:50:ef:1c:e4:15:58:98:09:73:06:40:4e:
65:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C3:34:59:5F:53:9D:E3:C8:E1:14:EE:88:95:88:2A:61:6D:42:7E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/31332e3134302e32352e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.140.25.0/24
Signature Algorithm: sha256WithRSAEncryption
46:c9:0d:d7:71:bc:49:ab:60:2c:a4:c2:c2:cd:df:d5:d3:38:
a7:31:fb:a8:49:e9:53:c9:ad:c7:ea:ff:a4:25:fb:70:ff:d4:
c3:03:7c:79:3b:e7:fa:60:55:d4:96:e1:b1:3c:a0:2b:e4:07:
50:29:41:8b:a5:19:fa:b7:6e:3f:a8:96:14:9e:cd:64:4d:6f:
91:d7:a4:f0:9d:1d:c3:ae:c6:68:64:15:cc:c0:59:13:f2:39:
88:58:21:3a:da:e8:62:e0:3c:6b:07:a0:6d:94:22:ed:0d:6e:
3d:2a:96:35:f7:85:57:01:9c:47:fe:0e:f5:46:22:73:91:0b:
e9:eb:87:01:49:f2:e4:a6:bf:d5:1c:32:28:11:5a:53:7a:e6:
bc:07:e8:ce:f7:b3:98:84:5d:52:48:1e:05:44:a0:d4:39:46:
12:14:55:07:f9:9d:b9:e8:c3:10:80:68:55:7f:8a:49:70:9c:
db:6e:55:da:c2:41:b3:80:a8:4c:de:d4:63:bf:45:49:9b:94:
09:a6:7b:bd:0f:7b:00:b3:87:b3:26:b5:16:7b:0b:fb:eb:81:
f7:1d:de:87:75:23:db:19:57:43:2a:3c:3b:f5:79:90:76:43:
6c:03:06:2b:7a:d0:26:38:34:b4:c7:e1:6d:89:e6:6d:58:46:
22:b8:75:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:36:43 2026 by rpki-client