Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130352e302f32342d3234203d3e20323130363939.roa
File: 33312e3138352e3130352e302f32342d3234203d3e20323130363939.roa (raw, json)
Hash identifier: 5S0IvbVNk6KE/CUqhOCj7rmzwdduYx2Ci6hKBhe3Hsg=
Subject key identifier: 44:DF:14:F1:68:19:B6:F9:87:F9:30:7B:88:80:39:EB:1A:5C:B1:5F
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 0FB8E28592D038213E20C412CF4BC08F01FC7C21
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130352e302f32342d3234203d3e20323130363939.roa
Signing time: Sat 07 Mar 2026 17:40:47 +0000
ROA not before: Sat 07 Mar 2026 17:35:47 +0000
ROA not after: Sat 06 Mar 2027 17:40:47 +0000
asID: 210699
IP address blocks: 31.185.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:08:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:b8:e2:85:92:d0:38:21:3e:20:c4:12:cf:4b:c0:8f:01:fc:7c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Mar 7 17:35:47 2026 GMT
Not After : Mar 6 17:40:47 2027 GMT
Subject: CN=44DF14F16819B6F987F9307B888039EB1A5CB15F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1f:94:6e:be:18:e7:67:dd:7a:44:41:fd:ac:
4a:f0:f1:6e:c4:a8:73:8b:56:35:b4:05:48:19:b7:
f3:c4:a0:b7:5c:8c:9d:ac:78:ea:bd:57:d5:10:0d:
fc:77:a9:73:e4:16:2a:0d:de:e2:1f:0d:b5:8d:16:
94:5d:28:61:0f:e0:fa:38:00:14:4e:98:23:45:8c:
37:ed:0f:d2:22:ad:db:55:c9:56:c8:a9:3a:e8:7d:
4d:e6:c6:00:16:c8:f8:c1:39:37:b9:e9:f6:72:fc:
25:2a:09:35:a8:1a:53:7d:ec:2a:f2:25:0e:71:b4:
8e:4d:fb:44:50:b8:19:90:bc:46:36:e7:4d:f5:2f:
b5:61:e6:eb:68:2e:17:70:a5:cd:21:5a:1d:ec:99:
66:9c:38:db:df:d9:2d:ec:6b:9d:7a:5d:81:22:9c:
91:28:08:52:3a:72:dd:aa:0a:c2:e2:2c:3a:8b:8f:
25:a1:4d:f3:c6:c6:b1:66:04:6e:e8:35:28:84:7d:
66:c6:f1:f5:cd:e0:af:4f:19:86:7b:b8:b9:51:c0:
49:20:8b:80:cf:90:60:d2:cb:9e:57:15:1a:6d:b8:
1a:e0:20:8d:07:77:bd:e4:3b:55:21:59:07:b0:50:
a3:d8:5d:28:86:cb:8a:e6:6e:e5:2c:a4:e5:bb:c1:
e6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DF:14:F1:68:19:B6:F9:87:F9:30:7B:88:80:39:EB:1A:5C:B1:5F
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130352e302f32342d3234203d3e20323130363939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.105.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:48:11:2a:c1:9a:09:2f:9f:70:9b:c8:8f:a0:e3:8c:cf:b1:
f1:bb:bd:06:ce:f5:0b:44:65:7b:82:3e:2f:85:29:d6:c5:c8:
c9:cc:0c:f9:15:68:ac:49:ec:37:a5:72:20:e2:df:1e:e6:11:
1e:07:d0:2e:7b:5d:dc:6a:f4:bc:36:d9:a1:34:bf:ce:15:51:
50:25:5b:bc:a7:44:69:b0:7b:15:a6:3f:a7:0e:4e:a8:7b:11:
62:5b:05:79:eb:f9:a0:79:60:ea:b2:ec:0c:f1:ec:09:3b:3d:
88:47:61:01:aa:3f:f2:e8:61:79:47:58:ca:40:22:e5:5f:cc:
17:6c:c5:41:95:8e:cf:1b:71:a4:87:6d:c4:9e:fe:77:16:11:
c5:18:03:7c:64:69:41:cf:a2:51:ae:78:c7:ec:af:7c:e6:25:
0f:ab:ea:7b:45:0f:3d:6c:40:e8:18:e1:ff:92:dd:d6:3a:d3:
20:7e:b1:4d:50:a1:65:4b:0c:2d:26:b1:c3:95:78:06:ae:ea:
5c:2f:28:8b:33:25:a1:fb:57:04:21:d4:4a:ff:ca:79:4e:c4:
24:4e:58:d8:15:5a:00:fe:86:b4:dd:68:d3:cb:d1:16:35:45:
df:82:25:bf:4c:6d:8a:34:ea:07:e5:e5:b3:f9:b6:99:01:1b:
33:00:2e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:12:14 2026 by rpki-client