Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130392e302f32342d3234203d3e2035303635.roa
File: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (raw, json)
Hash identifier: iRELkqpaBbCAlaM6y+J6q4kh+pIWEdfXLorHhotW+GY=
Subject key identifier: 80:02:B8:67:96:FE:78:67:0A:DD:43:1F:53:81:BA:E3:E4:38:63:53
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 486FF7A7FA59971042DAA348D4281B3310211553
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130392e302f32342d3234203d3e2035303635.roa
Signing time: Thu 05 Feb 2026 07:55:36 +0000
ROA not before: Thu 05 Feb 2026 07:50:36 +0000
ROA not after: Thu 04 Feb 2027 07:55:36 +0000
asID: 5065
IP address blocks: 31.185.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:6f:f7:a7:fa:59:97:10:42:da:a3:48:d4:28:1b:33:10:21:15:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Feb 5 07:50:36 2026 GMT
Not After : Feb 4 07:55:36 2027 GMT
Subject: CN=8002B86796FE78670ADD431F5381BAE3E4386353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d7:b6:e6:57:28:e3:ca:27:22:58:7a:4b:eb:
94:40:3b:98:a7:58:07:f8:56:f3:8b:06:70:df:57:
84:1c:38:e0:c9:7e:81:00:2d:87:b5:d7:6e:42:28:
00:67:d0:fd:3a:30:21:76:96:51:ca:9b:fe:50:39:
6c:a0:78:fb:80:b6:19:19:ef:af:c8:fd:8d:53:b0:
d2:96:d6:01:e5:1a:af:3f:56:d7:86:55:f0:b7:fb:
e8:59:44:14:35:d9:41:78:40:26:3e:9f:94:73:8f:
ee:34:12:e2:33:8a:e7:9e:cc:65:1e:18:7f:b3:8d:
87:08:b1:c8:e6:9c:6d:2c:e8:cd:b8:a3:1a:f9:7b:
2b:8b:85:66:9b:35:41:88:b4:66:82:3e:55:d4:5f:
e9:a6:ef:d0:1d:30:61:30:a5:46:a0:2f:92:2d:17:
fd:89:e3:f6:26:52:83:cc:47:71:d5:f3:d6:19:01:
b9:e8:ff:9c:74:d1:3e:f9:be:04:b3:27:3e:e4:7c:
38:b5:27:42:97:6a:04:19:d5:1d:16:59:68:c6:90:
c4:57:ec:7f:f5:c0:13:5a:f3:6a:f7:ce:22:ef:30:
38:2a:fe:83:fe:7e:cc:73:66:9a:e5:43:aa:23:e0:
e6:c0:7c:03:bb:bd:08:eb:04:78:79:d5:1e:1d:e5:
24:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:02:B8:67:96:FE:78:67:0A:DD:43:1F:53:81:BA:E3:E4:38:63:53
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130392e302f32342d3234203d3e2035303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.109.0/24
Signature Algorithm: sha256WithRSAEncryption
48:9b:94:bc:1e:fe:d6:4c:67:f2:9f:fd:77:dc:3c:2a:5f:cb:
66:58:83:bb:9f:bb:06:2b:a1:ba:2d:76:5b:a7:6a:73:b7:ba:
4d:05:a1:95:6a:66:de:4f:ac:1e:13:e7:76:91:94:08:15:43:
eb:d3:4c:eb:11:9e:e5:e9:50:f9:e9:b8:af:fb:ee:17:f4:d7:
e7:10:5a:40:ab:71:5a:ad:86:38:fb:6f:94:f7:71:08:0b:1c:
cb:3d:d2:86:9a:88:6f:a3:e9:a4:be:7e:e6:3d:89:c9:94:9b:
e1:8c:da:be:42:3f:28:8f:52:d3:bf:78:38:51:42:7e:e1:a8:
8c:13:1a:71:a8:f5:bc:92:48:c9:3b:78:9d:9d:59:fe:00:4a:
19:c2:03:48:11:4f:40:7d:92:fb:e2:c0:71:8f:af:88:3f:c5:
23:d8:e2:6f:26:56:13:70:e3:f6:a2:54:f4:9b:5a:04:82:c9:
9b:60:eb:ee:ce:e0:e7:b4:d8:dc:ea:44:9f:6f:0d:89:a5:9d:
67:6d:d4:e9:3b:48:b3:84:20:8c:79:c3:49:4a:c2:b3:67:5c:
f3:b3:b0:23:55:fa:ea:8f:c4:41:32:09:0d:e8:11:0a:1b:ca:
37:c7:c8:04:45:dc:98:b7:82:42:7a:59:e0:f6:68:6c:e6:1c:
92:8c:c0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:05 2026 by rpki-client