Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130342e302f32342d3234203d3e20313938303230.roa
File: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (raw, json)
Hash identifier: pS1G1drRPBWH4FNN6+N6RZE6LuLa2srViTNKuVC8toE=
Subject key identifier: 78:8B:F0:2F:C9:66:C2:1D:F6:BE:77:8D:E4:06:9C:50:AB:B9:EF:8D
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 36B7484D7FBBA5C079B7764D1D7C663A29913031
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130342e302f32342d3234203d3e20313938303230.roa
Signing time: Mon 26 Oct 2026 11:49:38 +0000
ROA not before: Mon 26 Oct 2026 11:44:38 +0000
ROA not after: Mon 25 Oct 2027 11:49:38 +0000
asID: 198020
IP address blocks: 31.22.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:b7:48:4d:7f:bb:a5:c0:79:b7:76:4d:1d:7c:66:3a:29:91:30:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Oct 26 11:44:38 2026 GMT
Not After : Oct 25 11:49:38 2027 GMT
Subject: CN=788BF02FC966C21DF6BE778DE4069C50ABB9EF8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e2:84:c4:9c:4e:81:48:31:6a:59:15:6a:33:
38:98:ab:05:91:3e:a3:72:9b:7c:7c:8b:a5:d2:fb:
d3:03:a2:ba:f4:d9:19:0f:c1:4f:97:35:52:23:08:
01:6d:41:7b:21:4a:f5:3f:f7:8e:e4:df:47:e5:8d:
18:16:00:7b:a3:8c:2d:ee:f1:17:bf:5b:d7:61:61:
84:7f:ee:92:d6:19:58:c9:f0:1e:f2:fa:2f:4f:f6:
10:de:6e:3a:26:7a:03:33:dd:3c:ab:da:ee:99:52:
9f:50:5d:bd:5e:b4:24:cd:98:12:4e:ef:63:c8:cf:
ee:cb:c1:88:1b:f6:b8:e1:01:94:cb:0b:1c:17:fc:
5e:39:ce:e9:32:88:71:93:70:15:57:39:ad:d5:d7:
56:04:77:b4:64:11:ec:2b:6c:4a:a1:28:97:95:f8:
6c:eb:d0:11:1b:36:75:2a:70:1f:32:bf:73:d8:c6:
fc:35:a1:a6:d5:0d:d2:79:80:9d:fc:7e:39:9c:0d:
6a:1d:05:ac:39:07:a3:48:dc:ea:92:9d:1e:6b:f5:
13:56:4e:30:78:14:d9:87:54:7f:09:b9:23:71:8e:
93:c3:b9:b3:20:3a:bc:83:ca:21:da:4e:9b:40:58:
4e:d8:06:b0:4b:08:ce:99:a2:3c:de:5b:7a:b0:16:
79:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8B:F0:2F:C9:66:C2:1D:F6:BE:77:8D:E4:06:9C:50:AB:B9:EF:8D
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130342e302f32342d3234203d3e20313938303230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.104.0/24
Signature Algorithm: sha256WithRSAEncryption
54:df:bf:90:3b:f8:ec:b8:c1:28:58:d4:df:41:10:e5:eb:fa:
92:0d:2e:96:02:74:99:77:5a:79:9f:4c:5b:40:8f:42:f9:5b:
b7:49:63:96:34:85:f1:d1:76:0e:57:e0:f6:3f:cf:c5:16:f0:
6a:b2:9a:ff:0a:c4:f9:53:3b:b5:4c:f5:53:26:75:97:67:9a:
85:4c:32:b4:01:bc:51:bc:ea:66:97:88:6e:1b:1b:90:e0:1e:
70:6d:08:f3:43:85:17:da:6d:a0:8a:15:dc:0d:c5:47:67:b7:
31:03:61:96:e1:42:f2:f9:83:78:ad:f6:76:53:07:7e:d1:6c:
6f:f8:65:47:c7:ed:e3:0d:e4:c5:89:7e:90:37:0b:11:07:46:
7e:cd:48:3f:98:4d:3f:c2:2f:3b:96:fe:54:94:c2:82:5d:b0:
1a:10:08:d4:16:ba:58:07:3f:b2:e4:e9:b7:99:08:d1:fd:e1:
d0:4e:f3:21:6a:0f:dd:5b:2f:be:94:36:58:77:31:a9:5f:d6:
9e:5a:49:48:37:fc:75:52:f0:2c:da:39:95:96:3b:5a:de:7b:
48:e1:5a:0c:e1:16:df:80:0d:0d:77:c1:c1:8c:28:9c:05:8a:
27:cf:38:fa:5f:4a:f6:2f:64:63:b1:e4:99:76:dd:67:4e:3c:
1c:d2:e6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:49:15 2026 by rpki-client