Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa
File: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (raw, json)
Hash identifier: BDHilFVFazV1NVQVasFrYxHm84RYPEPgutds1qndvSo=
Subject key identifier: EE:C5:32:6B:01:B2:C0:E8:2F:0A:89:EE:FA:3B:8D:B2:2B:5E:49:DA
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 3ED024FBA20EDF6F81E74E5854A63BFE5725DFCF
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa
Signing time: Mon 02 Feb 2026 03:55:36 +0000
ROA not before: Mon 02 Feb 2026 03:50:36 +0000
ROA not after: Mon 01 Feb 2027 03:55:36 +0000
asID: 395374
IP address blocks: 31.185.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:d0:24:fb:a2:0e:df:6f:81:e7:4e:58:54:a6:3b:fe:57:25:df:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Feb 2 03:50:36 2026 GMT
Not After : Feb 1 03:55:36 2027 GMT
Subject: CN=EEC5326B01B2C0E82F0A89EEFA3B8DB22B5E49DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:63:2b:12:7b:78:2d:0e:bd:f7:98:e6:f4:a9:
70:25:21:56:7e:89:0a:d7:07:10:ba:09:7b:00:ba:
ab:cf:36:9a:2b:d3:4f:18:e0:3f:f5:14:42:df:c8:
22:92:78:d8:7d:b2:53:cb:ff:31:21:4c:94:76:5e:
06:89:79:c1:11:a5:d6:d6:80:18:c7:2a:5e:8d:e2:
a4:f6:a5:48:b0:cb:e3:e3:14:46:81:18:32:44:46:
ce:c0:db:74:c2:92:c6:9c:fb:3d:7c:5d:5e:68:40:
7a:9f:b0:80:a9:3f:3c:9a:79:dc:a0:09:18:cc:1e:
d8:a3:72:f6:eb:ca:6b:78:a3:d1:9d:a5:5b:c9:b9:
78:16:09:09:aa:25:eb:18:e9:1f:a5:6f:ed:5a:cd:
0b:e6:4d:75:0c:88:32:6c:1b:a7:16:c0:ce:56:92:
d5:e1:62:1c:6a:14:c8:d1:f2:d5:2b:f5:59:a3:7c:
c6:3b:7e:95:bc:09:54:cc:5d:a8:8b:cf:6d:79:a8:
5f:75:98:a5:29:dd:c3:b5:92:f6:f7:94:bd:75:ac:
32:8d:0e:3c:5c:5c:99:7b:d8:27:b7:8d:6c:64:f6:
26:87:0a:a2:00:ca:ce:90:da:55:ab:0c:84:df:ba:
d8:df:cc:bd:54:99:42:2d:e9:ba:d3:60:70:5d:a2:
33:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C5:32:6B:01:B2:C0:E8:2F:0A:89:EE:FA:3B:8D:B2:2B:5E:49:DA
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.106.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:85:46:d3:8e:80:03:02:81:fb:5d:0f:f8:33:d6:b7:55:ca:
d3:54:67:af:d7:c6:6d:99:84:7d:ab:e8:c4:8c:33:c6:51:cf:
a1:46:ad:5a:99:66:11:41:88:aa:0e:50:cc:af:6a:82:24:e6:
d3:ed:36:5d:58:8c:6b:eb:35:33:f2:22:ee:0f:a3:69:2b:97:
54:e6:dd:0a:48:c3:20:2b:10:22:5e:71:dc:3f:1a:5b:d0:2d:
9d:f8:76:d6:28:fd:e2:b1:ef:d1:83:88:60:68:b4:c4:58:7c:
d0:b2:14:b1:89:c0:06:9b:2a:a0:ec:8d:c7:ec:3d:41:e5:7b:
7c:ee:50:b0:a4:8b:9d:ad:08:32:c4:1b:b5:35:94:e4:18:fd:
05:39:62:04:04:f4:a4:82:7a:26:7d:f2:7d:8b:78:9c:62:a9:
24:59:5d:41:8b:be:d3:88:db:57:eb:5d:d6:d5:73:32:bb:06:
10:47:67:82:fb:c9:64:c2:7e:0e:d3:a0:94:79:b5:61:2f:39:
e6:c9:44:48:eb:36:4f:75:d8:61:c8:2e:3c:6a:d9:32:1c:a1:
1a:bf:31:eb:a2:f6:05:b4:fd:0d:0c:5d:22:a2:ca:ec:1c:38:
c1:f3:14:25:dc:a9:bc:5a:3b:91:42:d8:11:9c:f9:2b:25:ed:
52:67:c0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:31:33 2026 by rpki-client