Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS33355.roa
File: AS33355.roa (raw, json)
Hash identifier: QAAMUff0e9pUVQfQr1YIkvwkNbloznsDdEs1+ivheH4=
Subject key identifier: CA:B4:16:06:67:9D:FC:B6:6A:30:D0:A8:F2:4B:C3:31:07:26:B0:B9
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 42CCBDD42FF9F37A6B047CEF2178BF7A7832D1FB
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS33355.roa
Signing time: Thu 04 Jun 2026 11:32:36 +0000
ROA not before: Thu 04 Jun 2026 11:27:36 +0000
ROA not after: Thu 03 Jun 2027 11:32:36 +0000
asID: 33355
IP address blocks: 51.146.100.0/24 maxlen: 24
188.220.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:cc:bd:d4:2f:f9:f3:7a:6b:04:7c:ef:21:78:bf:7a:78:32:d1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 4 11:27:36 2026 GMT
Not After : Jun 3 11:32:36 2027 GMT
Subject: CN=CAB41606679DFCB66A30D0A8F24BC3310726B0B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f6:34:9c:a4:bb:d0:30:45:19:b8:88:12:19:
1f:0b:97:18:53:85:66:2d:73:71:9c:b5:b0:8f:bd:
02:73:cf:85:4c:dc:e7:ff:95:8b:ee:98:3e:69:ea:
fe:e9:83:37:93:58:81:6a:f8:17:ff:c5:20:bd:f3:
65:a0:bc:eb:c1:ee:6c:79:30:59:c6:be:9e:f9:33:
cb:4e:ae:e5:3f:42:f5:ac:6a:75:26:64:65:93:db:
75:74:89:50:d1:e3:ee:d5:c3:cd:21:d7:72:65:a1:
ae:b6:b2:95:19:4c:a6:36:65:29:15:11:e8:a6:2e:
0f:1e:9b:b6:3e:1f:23:ce:f3:34:aa:bb:bc:34:de:
1c:95:71:6a:2b:fc:51:60:9d:4f:53:bf:c9:52:1d:
fe:37:4f:b3:39:3f:f5:3d:64:ef:87:48:61:e1:39:
d5:2b:92:7d:4c:16:9e:a7:3a:41:0c:d0:dd:6d:23:
db:a9:7c:58:90:28:7e:b2:36:59:80:c9:4b:bf:6e:
32:de:32:54:56:62:16:63:53:0c:b8:cb:08:52:77:
bc:eb:ea:90:1b:9f:dc:35:e1:d6:fa:e9:02:9a:27:
f7:9c:44:54:ff:71:f3:77:0c:b4:0f:7f:02:be:96:
34:55:6e:be:bc:04:de:ab:32:1b:e9:dd:d0:9a:01:
d9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B4:16:06:67:9D:FC:B6:6A:30:D0:A8:F2:4B:C3:31:07:26:B0:B9
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS33355.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.100.0/24
188.220.136.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:3d:fe:5c:4d:02:5c:e9:35:5e:2c:31:06:d6:4b:35:fd:8a:
41:49:1a:0d:44:d9:8a:c4:34:cf:94:e5:d1:e0:fb:11:15:30:
21:58:64:bc:da:ad:df:fb:56:11:b3:b0:06:85:79:b6:b5:76:
ff:f0:c9:13:4f:2c:db:e4:38:c8:ae:a3:41:dc:f5:82:ab:c4:
75:bd:d0:38:0d:0d:0d:dc:1b:19:91:88:6a:a8:a7:ce:ff:33:
d8:5b:1b:8d:03:66:68:62:24:37:e6:17:0f:f6:04:e2:84:f2:
96:3a:25:ce:2b:67:40:03:7f:35:42:e6:83:b8:b0:6a:9b:ee:
5d:c4:d1:29:15:33:72:e6:a2:38:de:1b:8a:e5:f3:e0:7f:e4:
44:dc:0f:1d:87:d9:8a:b0:96:a9:f4:1d:6d:c5:e0:84:27:61:
96:74:02:f8:f3:90:fa:88:1a:48:66:12:3f:9d:69:23:71:06:
0b:17:b0:1f:89:19:e0:fe:b2:2f:63:d1:01:84:89:9e:35:e3:
98:2c:6f:fb:8a:52:0d:41:d0:85:9d:9b:40:e9:fe:b0:3d:97:
b8:e7:57:1b:e9:57:a6:cd:a1:b3:a5:b2:8b:1d:c6:8b:6e:f4:
fa:f9:61:ac:8b:72:f9:e1:f7:dd:1a:2a:e3:11:a7:0c:fb:a0:
13:a4:51:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:16:43 2026 by rpki-client