Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e392e302f32342d3234203d3e20313336373837.roa
File: 33312e3232302e392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: YbL7uCrR+fDmXopHV9/7sTeoA5oFIFaUOc3cUfxi8G8=
Subject key identifier: FE:A1:FB:F4:96:9B:82:80:27:B2:6B:F0:70:C1:DB:09:AC:93:AC:FB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 529CAE438F62B7B3853E0C83EEAAD71F484D1FF0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e392e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 28 Sep 2025 20:47:39 +0000
ROA not before: Sun 28 Sep 2025 20:42:39 +0000
ROA not after: Sun 27 Sep 2026 20:47:39 +0000
asID: 136787
IP address blocks: 31.220.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:9c:ae:43:8f:62:b7:b3:85:3e:0c:83:ee:aa:d7:1f:48:4d:1f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 28 20:42:39 2025 GMT
Not After : Sep 27 20:47:39 2026 GMT
Subject: CN=FEA1FBF4969B828027B26BF070C1DB09AC93ACFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e0:6b:0b:44:16:60:69:43:81:80:21:06:0a:
3d:31:62:d0:9a:a3:6b:8c:04:ea:2d:8f:d7:1a:a6:
38:18:a3:0d:33:ad:12:db:04:9c:64:d4:e6:df:00:
99:77:b2:33:96:d7:de:dd:81:53:be:4d:5d:dd:9d:
22:5e:2f:97:3a:56:4b:45:d6:55:31:c2:09:60:d1:
18:90:e9:ce:17:83:cb:d7:42:9f:ab:54:85:41:24:
f4:87:04:4c:42:f4:05:b6:ef:d3:84:42:9f:66:3e:
a2:1e:21:62:b7:a0:ef:0d:3f:37:07:12:2d:5c:41:
bb:c4:2a:2d:67:fd:cb:94:31:ff:a1:68:74:8f:c0:
f7:cb:53:2c:ef:89:58:28:3f:02:d3:1f:74:2f:63:
af:50:11:56:07:c1:7f:ff:6b:7d:e1:41:b5:03:ad:
40:06:f8:8e:9c:d0:79:7e:7b:d2:85:32:1b:59:3a:
ab:cb:ac:97:c5:f9:a4:e0:34:10:f0:c7:5e:0d:7a:
3a:54:e1:20:c8:23:94:07:12:3b:57:21:60:e9:09:
a3:29:9b:c5:c1:9f:31:21:b5:c5:d4:6b:59:ca:f1:
86:ec:fc:8c:e4:00:07:45:16:e8:ea:08:29:7f:c6:
e5:30:ee:60:de:32:3c:f2:45:7b:0a:03:c8:17:28:
b7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A1:FB:F4:96:9B:82:80:27:B2:6B:F0:70:C1:DB:09:AC:93:AC:FB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.9.0/24
Signature Algorithm: sha256WithRSAEncryption
24:ac:24:93:30:52:35:f9:97:4d:33:cc:01:eb:6c:fd:2b:30:
c1:31:eb:2c:c3:e1:f5:f3:e7:c0:1a:6c:af:c4:01:2e:c2:79:
34:7b:da:4b:6b:96:7f:f3:bc:ef:9f:62:d6:41:31:ee:5e:52:
b9:68:6e:a0:1c:77:0e:b6:2a:91:aa:3f:81:ef:91:70:de:e0:
47:75:eb:26:e7:13:5a:4e:e1:ec:28:09:31:7a:9e:3e:ed:9c:
41:10:f2:20:5f:3d:d8:49:6f:95:fa:ec:62:76:0e:3d:6b:08:
40:12:1b:4d:12:d6:55:09:d4:d0:98:ac:01:cf:73:be:f1:90:
7e:40:4f:cd:c8:39:2f:b9:09:24:8c:00:1a:0c:56:af:dd:b4:
bc:26:19:4c:e1:97:35:70:d9:8b:9a:ff:60:29:7d:5e:06:c0:
ff:6e:e3:45:cf:be:07:66:b9:df:30:22:18:2c:17:3f:62:fa:
9f:7c:59:4c:b6:8d:25:75:fc:4a:cb:eb:58:9d:2f:89:a7:a4:
7c:b4:44:bd:8c:07:c7:12:e4:c4:6a:aa:c7:cd:aa:04:3f:13:
40:4e:84:f6:da:53:94:30:23:fe:36:e1:39:b3:51:c6:32:f7:
1b:f2:86:44:bb:a1:ea:2e:bb:93:d2:3a:16:5d:91:41:85:52:
6c:e7:89:3b
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUUpyuQ49it7OFPgyD7qrXH0hNH/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA5MjgyMDQyMzlaFw0yNjA5MjcyMDQ3MzlaMDMxMTAvBgNV
BAMTKEZFQTFGQkY0OTY5QjgyODAyN0IyNkJGMDcwQzFEQjA5QUM5M0FDRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs4GsLRBZgaUOBgCEGCj0xYtCa
o2uMBOotj9capjgYow0zrRLbBJxk1ObfAJl3sjOW197dgVO+TV3dnSJeL5c6VktF
1lUxwglg0RiQ6c4Xg8vXQp+rVIVBJPSHBExC9AW279OEQp9mPqIeIWK3oO8NPzcH
Ei1cQbvEKi1n/cuUMf+haHSPwPfLUyzviVgoPwLTH3QvY69QEVYHwX//a33hQbUD
rUAG+I6c0Hl+e9KFMhtZOqvLrJfF+aTgNBDwx14NejpU4SDII5QHEjtXIWDpCaMp
m8XBnzEhtcXUa1nK8Ybs/IzkAAdFFujqCCl/xuUw7mDeMjzyRXsKA8gXKLcvAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU/qH79JabgoAnsmvwcMHbCayTrPswHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzMzMTJlMzIzMjMwMmUzOTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB/c
CTANBgkqhkiG9w0BAQsFAAOCAQEAJKwkkzBSNfmXTTPMAets/SswwTHrLMPh9fPn
wBpsr8QBLsJ5NHvaS2uWf/O8759i1kEx7l5SuWhuoBx3DrYqkao/ge+RcN7gR3Xr
JucTWk7h7CgJMXqePu2cQRDyIF892ElvlfrsYnYOPWsIQBIbTRLWVQnU0JisAc9z
vvGQfkBPzcg5L7kJJIwAGgxWr920vCYZTOGXNXDZi5r/YCl9XgbA/27jRc++B2a5
3zAiGCwXP2L6n3xZTLaNJXX8SsvrWJ0viaekfLREvYwHxxLkxGqqx82qBD8TQE6E
9tpTlDAj/jbhObNRxjL3G/KGRLuh6i67k9I6Fl2RQYVSbOeJOw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:33:32 2025 by rpki-client