Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/33312e32342e3235332e302f32342d3234203d3e20313938303837.roa
File: 33312e32342e3235332e302f32342d3234203d3e20313938303837.roa (raw, json)
Hash identifier: l4/e4ddZUaIiv7YDCCOjzWUX0GLxqbwg2mSAV+HDapE=
Subject key identifier: BC:B4:D1:6B:3C:28:9D:E9:0E:4C:88:13:F4:F8:B9:50:57:7B:D1:BF
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 7C85625103BF91279FBC4FB122059A4660875B08
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/33312e32342e3235332e302f32342d3234203d3e20313938303837.roa
Signing time: Mon 16 Mar 2026 08:42:39 +0000
ROA not before: Mon 16 Mar 2026 08:37:39 +0000
ROA not after: Mon 15 Mar 2027 08:42:39 +0000
asID: 198087
IP address blocks: 31.24.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 05:34:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:85:62:51:03:bf:91:27:9f:bc:4f:b1:22:05:9a:46:60:87:5b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Mar 16 08:37:39 2026 GMT
Not After : Mar 15 08:42:39 2027 GMT
Subject: CN=BCB4D16B3C289DE90E4C8813F4F8B950577BD1BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:84:66:cd:9a:42:03:66:cf:ff:f3:f9:86:cd:
e2:72:31:8c:db:12:f7:ea:f3:10:7b:f7:09:b9:a8:
c5:8e:53:0c:69:f7:27:43:a4:ab:22:da:9d:36:c7:
63:e6:3e:05:60:e5:db:e7:be:be:59:70:cc:cc:fa:
d4:c3:59:6f:f6:39:58:0f:92:bc:a4:2d:59:36:73:
c8:f8:3a:2f:f3:8f:bd:8e:f9:30:8e:ff:b5:7d:33:
1c:0d:92:4a:b8:c0:70:a7:d1:d6:f0:51:2c:69:35:
f2:78:be:b8:24:72:72:06:6a:72:2a:b0:65:84:87:
13:4a:e8:18:17:55:d4:88:ae:46:8a:e3:40:40:28:
63:79:bc:fc:88:bf:f1:56:32:d6:32:5e:75:1c:b9:
66:d4:24:49:1d:0d:73:a8:f1:8c:c9:71:bc:cf:60:
d9:85:d2:3a:c0:43:d2:0f:03:4e:cf:30:88:72:c3:
3d:64:69:2b:7c:59:b3:45:0f:22:3d:33:84:49:65:
0b:19:e7:97:a7:23:83:8d:ff:5d:b1:28:78:2f:fd:
d6:67:81:bf:0e:85:bc:b7:a2:40:2e:24:77:8a:2d:
d1:a8:5b:c5:50:59:52:2c:3a:f3:7c:70:f9:08:ee:
cc:92:48:ac:97:85:55:fa:0b:66:9a:ee:1b:d5:d6:
b9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B4:D1:6B:3C:28:9D:E9:0E:4C:88:13:F4:F8:B9:50:57:7B:D1:BF
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/33312e32342e3235332e302f32342d3234203d3e20313938303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.253.0/24
Signature Algorithm: sha256WithRSAEncryption
77:1a:15:90:7f:45:91:94:85:aa:ab:3d:b5:70:68:ac:7d:ab:
9d:61:83:20:59:a3:91:2d:d2:18:ac:97:dc:da:bd:1d:d4:10:
a4:22:3a:bb:64:84:10:79:61:90:5c:f4:61:e0:79:63:52:08:
b9:0a:0e:4b:d4:17:c4:c0:d7:aa:b3:ef:24:4b:3c:a8:f4:39:
c7:b8:e1:0f:06:01:a5:fa:47:81:4f:0e:99:76:29:ed:59:65:
14:04:ab:3a:2f:28:7d:16:53:96:cb:09:91:aa:fa:c6:42:1b:
29:1e:54:32:4f:aa:43:30:42:79:0f:f6:7f:33:af:1e:e5:e5:
43:07:7e:07:d6:4d:53:c6:74:5a:69:0f:69:e5:ae:31:d7:e6:
1d:48:70:03:e9:90:5f:ed:81:84:f6:c6:2c:f9:7a:02:08:95:
72:25:43:77:00:cf:90:bf:54:28:76:f8:7a:9c:2a:0f:24:fb:
52:76:aa:ca:45:5b:dc:d5:a9:78:61:25:77:4e:34:df:9c:04:
13:dd:e4:94:eb:4e:df:fb:87:c9:3c:3a:5a:d5:ca:1c:51:4f:
46:b3:db:76:ba:11:00:56:06:6a:f8:19:ed:43:40:d5:3e:a6:
ec:e4:d9:2b:d8:1b:e6:c9:89:bb:7d:8b:95:da:4e:94:f7:ca:
6f:0f:9d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 23:04:48 2026 by rpki-client