Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/33312e32322e31302e302f32342d3234203d3e20323033333830.roa
File: 33312e32322e31302e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: bgjRMA6sfKCgyTqiS+/J1RAfTTmFq87OBMVN4GpIFL0=
Subject key identifier: FF:8E:38:1A:1C:9B:40:F4:CB:22:FF:A2:AA:CA:A8:17:60:8A:03:12
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 4887AE78CEDC02348315EE612D8053FF97729F58
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/33312e32322e31302e302f32342d3234203d3e20323033333830.roa
Signing time: Tue 10 Feb 2026 12:23:20 +0000
ROA not before: Tue 10 Feb 2026 12:18:20 +0000
ROA not after: Tue 09 Feb 2027 12:23:20 +0000
asID: 203380
IP address blocks: 31.22.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:87:ae:78:ce:dc:02:34:83:15:ee:61:2d:80:53:ff:97:72:9f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Feb 10 12:18:20 2026 GMT
Not After : Feb 9 12:23:20 2027 GMT
Subject: CN=FF8E381A1C9B40F4CB22FFA2AACAA817608A0312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:80:83:6c:24:f2:c9:22:89:57:6b:2e:5f:c8:
99:80:9e:4d:54:1e:3d:10:13:6c:26:2e:23:8c:74:
5e:f4:cf:08:10:44:50:7d:cb:bf:9a:d1:ef:cd:dc:
a5:b8:79:3f:52:4d:ca:24:37:ce:b9:6c:54:08:c4:
aa:d7:e9:eb:94:0f:d4:d2:d6:57:52:08:e2:03:62:
fb:09:42:64:de:54:34:ec:b4:fa:a8:5a:69:83:74:
81:20:87:f8:1f:eb:13:7f:1a:b7:e8:22:b9:48:99:
a8:bb:56:a7:ed:d2:60:8e:22:1f:97:ab:e2:93:ac:
17:8f:83:01:83:3b:83:0d:be:19:af:08:6e:97:56:
08:01:8b:c1:46:51:3b:4c:81:a9:b1:7b:57:b2:8c:
b0:e8:96:b2:58:8d:5a:37:b6:5c:bd:39:9e:c5:ba:
42:47:b4:81:f1:95:c5:61:2e:0f:ad:a2:11:67:fe:
10:2b:01:19:78:03:be:9c:9d:a1:56:71:1d:eb:53:
f4:e2:cc:69:da:b5:36:3c:45:a1:fc:0d:48:61:f7:
49:43:72:7e:af:90:8b:1b:aa:90:49:0f:9e:a5:84:
1a:24:b4:8e:d6:ad:cf:0b:31:6d:38:dd:2f:60:57:
a2:a4:3d:bf:a4:d7:56:e5:ae:2b:37:81:da:da:bf:
00:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8E:38:1A:1C:9B:40:F4:CB:22:FF:A2:AA:CA:A8:17:60:8A:03:12
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/33312e32322e31302e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.10.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d3:07:5e:53:8f:6d:f5:42:f8:aa:91:96:73:c2:ad:c3:76:
93:b9:62:97:a0:3a:6e:5e:7b:57:01:d0:bb:e0:3c:60:90:a3:
bf:83:97:84:c5:57:6d:0c:76:1b:98:98:d8:50:59:d2:55:91:
75:78:43:77:96:e4:af:a8:8d:72:fa:7c:18:5c:bf:d6:a2:87:
fb:7b:2d:66:c4:49:5b:0e:a6:02:59:f8:91:cf:dd:8e:44:6d:
c7:5c:80:51:fc:14:6f:e1:80:f3:2c:03:2a:8e:20:2c:77:ee:
93:53:3a:9f:ae:f0:98:64:31:0f:ab:c1:5c:8c:2c:67:27:da:
32:a2:26:e6:9f:d2:1e:40:9e:92:19:a6:41:37:e3:28:f5:46:
98:e3:1e:01:9c:05:53:80:e6:68:0f:12:b3:a8:e5:84:5e:06:
d0:a6:93:ef:40:b7:be:5a:68:b8:a4:02:5a:c5:ad:90:18:cd:
00:7c:96:92:2a:75:e7:d3:35:78:0e:62:97:34:30:4a:5b:1b:
d5:38:1d:ae:bc:4e:7d:ae:25:fd:2e:1f:dd:0d:1d:37:47:20:
38:b2:e7:49:53:4f:7b:6e:45:d5:01:98:4f:d3:7d:9c:b2:d2:
ab:15:ca:a6:cc:fa:c8:01:66:55:8f:a5:b8:31:9b:48:86:97:
9a:f6:a1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:20:24 2026 by rpki-client