Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/33312e32342e3235332e302f32342d3234203d3e203633313939.roa
File: 33312e32342e3235332e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier: zn3S1gWcREfvu0G6nRVdl6bC4AEct0FPiv4dNpaOQso=
Subject key identifier: 15:68:16:CF:23:B5:22:7B:AB:7C:0E:AB:F6:4A:C3:DC:94:0F:75:40
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 3D9D92F7ED5ABD16DEE824DF7C55F976B42C1D57
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/33312e32342e3235332e302f32342d3234203d3e203633313939.roa
Signing time: Mon 02 Mar 2026 02:46:36 +0000
ROA not before: Mon 02 Mar 2026 02:41:36 +0000
ROA not after: Mon 01 Mar 2027 02:46:36 +0000
asID: 63199
IP address blocks: 31.24.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 12:39:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:9d:92:f7:ed:5a:bd:16:de:e8:24:df:7c:55:f9:76:b4:2c:1d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Mar 2 02:41:36 2026 GMT
Not After : Mar 1 02:46:36 2027 GMT
Subject: CN=156816CF23B5227BAB7C0EABF64AC3DC940F7540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:14:1b:f9:15:d6:0d:db:16:eb:4d:d8:47:
ea:38:4c:58:8b:6f:e5:f3:c6:c8:78:19:8f:9c:07:
52:a2:00:89:eb:e2:e4:92:8c:b3:c8:78:5d:34:22:
b9:9d:3f:e7:81:b9:27:53:4c:b1:35:23:04:de:71:
31:6e:ad:d1:87:51:7d:3e:6c:ad:75:47:cd:27:6a:
14:e0:66:7a:0f:dd:59:95:5b:42:50:68:00:64:e9:
35:d9:62:0b:de:a5:cf:82:ca:e7:cd:e1:2f:a8:ab:
be:ff:38:98:8c:c2:d9:25:77:07:f9:e3:88:aa:8e:
b4:75:85:c7:31:b4:35:6e:ee:2b:06:ab:96:d3:6a:
52:26:ec:5b:32:eb:e9:53:b0:9d:57:19:dc:fc:d7:
f0:d8:ac:73:80:5c:0e:91:2b:73:46:d4:98:0d:14:
32:c9:30:6f:5a:e4:80:6e:98:47:0e:d3:71:23:38:
43:d9:96:d9:d6:d0:6a:8c:e4:17:1c:45:0c:b2:f4:
18:56:0f:3a:2e:a5:ab:62:07:20:2d:cc:ad:01:c5:
71:ed:e5:4d:22:89:3f:b6:1a:8d:05:5a:79:d2:bf:
45:9b:7a:ec:17:b7:76:de:0c:a7:b9:0d:ef:17:90:
5f:3b:15:a3:ef:35:8c:30:1d:e6:9f:da:1f:ee:a3:
94:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:68:16:CF:23:B5:22:7B:AB:7C:0E:AB:F6:4A:C3:DC:94:0F:75:40
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/33312e32342e3235332e302f32342d3234203d3e203633313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.253.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:4e:d2:b2:27:c2:e4:0f:22:18:66:31:d6:55:87:a6:14:b8:
35:25:ef:de:61:11:bd:fb:3f:43:88:3d:81:1a:73:dd:ed:fc:
d5:78:6d:a6:47:25:d8:89:f6:ec:3a:35:d2:d4:a1:80:93:d5:
4f:e1:c6:c0:41:3b:e3:dd:5f:f9:07:2a:5d:0b:67:9f:58:49:
7a:bf:18:5b:21:80:47:63:82:d7:96:78:6e:92:d7:94:ba:d0:
ff:1b:e1:5f:44:f3:6d:06:26:f1:7a:23:57:fe:19:50:4b:f6:
8d:1d:f5:c2:0d:f6:d0:dd:13:f8:d9:d5:af:46:5b:ce:a7:a4:
1e:57:9a:ba:7c:2c:f0:c1:80:d6:3b:27:80:f8:c1:13:4c:00:
37:56:b4:db:76:c4:39:94:c1:ae:dd:75:e9:23:47:0f:71:cd:
59:47:b2:e1:7f:86:ef:42:4a:e3:06:c0:52:ec:75:f5:d3:a7:
59:1f:0e:8b:da:c3:1b:9f:d7:87:bd:81:cd:45:82:46:86:64:
e0:29:1b:a8:63:9f:79:2f:ae:52:1c:8e:35:b8:fa:17:6f:54:
b6:58:b4:da:d5:66:15:5e:6d:1e:25:0e:e9:02:5a:f4:df:7d:
2c:51:27:05:51:ed:c1:d3:7a:33:ce:d3:8b:bb:81:0f:b0:a0:
8c:a8:4a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 18:26:50 2026 by rpki-client