Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130372e302f32342d3234203d3e2039333034.roa
File: 33312e32322e3130372e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: 8hKTOek6Qthhyjni25okZb8/VhofK89RBgImZyqawwQ=
Subject key identifier: 3C:3A:92:A8:D3:E1:29:00:5E:7A:FC:4D:DB:73:32:8F:3F:FF:61:C1
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 1BFC8BC6E4B06EF820DE67F03E6F7412F17BFB65
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130372e302f32342d3234203d3e2039333034.roa
Signing time: Sun 13 Sep 2026 10:19:26 +0000
ROA not before: Sun 13 Sep 2026 10:14:26 +0000
ROA not after: Sun 12 Sep 2027 10:19:26 +0000
asID: 9304
IP address blocks: 31.22.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:fc:8b:c6:e4:b0:6e:f8:20:de:67:f0:3e:6f:74:12:f1:7b:fb:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Sep 13 10:14:26 2026 GMT
Not After : Sep 12 10:19:26 2027 GMT
Subject: CN=3C3A92A8D3E129005E7AFC4DDB73328F3FFF61C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:25:b9:24:59:5e:29:b8:13:4a:70:6b:c9:81:
98:48:d1:47:81:18:49:59:61:24:26:71:1c:c1:a0:
4f:66:1d:b6:78:fe:1f:66:de:15:3a:cf:d7:e3:a4:
c5:f6:f7:0f:ab:f7:7e:01:71:a4:c6:55:f7:63:45:
fd:47:47:2e:3d:0d:bd:b1:87:cd:33:cc:b3:aa:cd:
0b:58:39:60:40:da:6c:43:74:fd:e0:fd:28:64:e8:
4a:b4:f1:52:8b:4b:ce:d0:2f:8e:da:8b:83:a5:de:
75:05:ea:c6:3b:06:36:f0:e4:41:51:dc:f9:7a:fa:
7b:f5:81:b5:dd:5d:83:07:90:c3:30:0b:5f:e7:0e:
03:91:21:42:59:2d:06:a4:cb:3f:76:56:e4:98:57:
bb:3a:3a:0e:d5:97:09:da:33:98:89:6e:64:03:fe:
96:0c:42:16:9d:64:63:ad:ce:5e:aa:e6:57:63:16:
1c:2a:fc:c1:50:09:78:73:ff:7b:a4:10:81:3e:50:
57:0a:04:d6:62:d7:60:4e:8f:3f:fb:8c:36:66:ab:
91:68:ae:32:e5:c6:e6:bf:fe:27:af:33:5f:79:ff:
eb:ce:f7:01:59:a6:28:be:69:73:f8:39:bb:95:bc:
38:97:04:a2:a4:0b:73:07:82:07:0a:a5:b4:99:9c:
8f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3A:92:A8:D3:E1:29:00:5E:7A:FC:4D:DB:73:32:8F:3F:FF:61:C1
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130372e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.107.0/24
Signature Algorithm: sha256WithRSAEncryption
52:be:0a:3e:c8:42:c0:76:ab:5a:dd:76:c3:2f:be:1b:a2:b3:
1a:47:9a:fe:77:21:c3:d5:e7:22:fd:53:14:d8:16:a4:bf:9c:
72:d1:0a:60:be:a6:9b:7a:4f:eb:84:7d:05:26:9c:13:c9:d5:
73:a2:e7:05:90:03:81:95:0c:ec:53:14:40:7b:f0:77:21:a6:
dd:bf:d6:d5:eb:04:e2:7e:c1:08:5d:0a:cb:47:57:94:57:cd:
78:9c:ed:ce:0b:22:d5:f3:48:fe:33:f1:51:33:77:45:89:18:
43:d1:8b:66:25:f3:5e:7b:62:4d:54:22:9c:3c:7f:55:af:4f:
10:21:5b:0f:bd:22:0b:38:aa:27:1c:26:2d:eb:54:27:9d:e0:
dd:ae:46:2e:62:60:47:d1:65:90:23:f0:fb:ad:51:17:6e:bd:
5e:f7:80:98:53:b1:aa:dd:cd:35:1d:2a:86:df:ca:dc:cb:f5:
75:02:7d:f4:3d:22:42:11:72:d8:17:bb:8e:99:ee:4a:15:61:
de:50:9c:57:f5:ce:82:c3:76:c1:d3:a6:75:d6:da:5e:fe:ac:
aa:c8:c3:4f:d2:72:15:98:84:40:9f:c0:d6:5e:35:06:39:12:
12:ff:02:dc:69:cf:8c:42:b8:2d:f6:91:4d:f2:ff:58:6d:fe:
0f:06:89:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:50:40 2026 by rpki-client