Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/33312e39392e3230342e302f32342d3234203d3e20313532313739.roa
File: 33312e39392e3230342e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: wqlmLTPP7i6ritglqPnIWJH8ELD0ZcwRbxrXDjoKHWI=
Subject key identifier: F3:D1:2B:FD:D7:8C:B2:FD:9C:37:D2:A1:05:F4:C9:BF:A4:73:09:77
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 7BF09B2A28E411D394AD8717ECA3DDC934C115E5
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/33312e39392e3230342e302f32342d3234203d3e20313532313739.roa
Signing time: Tue 01 Sep 2026 03:18:21 +0000
ROA not before: Tue 01 Sep 2026 03:13:21 +0000
ROA not after: Tue 31 Aug 2027 03:18:21 +0000
asID: 152179
IP address blocks: 31.99.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:f0:9b:2a:28:e4:11:d3:94:ad:87:17:ec:a3:dd:c9:34:c1:15:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Sep 1 03:13:21 2026 GMT
Not After : Aug 31 03:18:21 2027 GMT
Subject: CN=F3D12BFDD78CB2FD9C37D2A105F4C9BFA4730977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e1:ec:3b:84:6e:58:e9:54:bd:38:63:aa:c2:
79:32:ce:fa:c1:1c:82:d0:ef:51:f1:58:36:ee:18:
f4:15:23:63:48:2c:67:9c:be:64:02:58:d5:76:d0:
ae:b8:8e:6c:0b:5b:ff:31:45:b1:26:f8:db:58:63:
9f:f6:71:4b:61:ab:d7:17:3e:a1:e4:f9:6c:51:bc:
5c:4d:7f:0a:37:22:07:7e:75:a1:ff:d6:8e:97:e3:
ad:79:76:0f:43:cd:c6:43:3b:59:c0:a8:5a:6d:ad:
98:c1:ff:1a:9d:f6:fd:55:22:55:48:5d:b7:8e:d0:
03:d6:0c:7c:a0:bc:cb:eb:32:a2:97:f5:07:cb:e0:
60:40:65:7a:d2:4a:36:fc:0d:36:8d:9f:0e:5f:fa:
18:d0:f8:01:ca:be:e5:e1:e7:50:4c:55:e2:37:72:
04:19:06:f0:8b:be:85:4f:8f:45:6b:81:64:d8:91:
1e:ff:27:c8:d6:fc:0c:96:3d:54:a3:ed:a9:92:4e:
57:20:21:1f:05:a1:34:ec:1d:a0:5f:b4:d2:56:26:
b0:0d:8b:10:d0:81:6a:af:3b:2d:8d:7c:3c:ca:d3:
f1:a6:d8:5a:98:19:34:1a:14:df:ae:01:67:88:07:
0d:51:47:f0:bc:d5:3c:0c:a2:7f:57:89:9b:63:a1:
2e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D1:2B:FD:D7:8C:B2:FD:9C:37:D2:A1:05:F4:C9:BF:A4:73:09:77
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/33312e39392e3230342e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.99.204.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:fa:08:83:67:17:ed:78:f1:ea:73:2a:cf:cf:aa:cc:e3:83:
28:bb:f5:2d:9c:9a:49:7d:30:38:87:b8:09:49:89:c2:a3:05:
98:6e:2d:88:15:6b:a3:78:6b:5f:c0:8a:82:d1:a5:7e:fa:6a:
fb:3e:4e:08:d9:3c:22:52:3b:24:28:09:04:c2:a2:74:23:4b:
0e:ac:f0:74:80:91:6a:1f:c2:f8:b5:30:82:c6:12:d5:bc:0c:
61:bb:90:5c:88:60:4c:65:7e:c9:0e:51:f3:ce:b8:ae:72:43:
5a:16:d1:f3:0c:00:aa:36:e7:9e:0d:62:2b:f0:06:d0:cf:e7:
6f:84:93:51:20:c9:2c:5d:51:c7:06:85:3a:f7:59:7b:77:be:
cc:92:a0:15:66:0d:ce:bf:28:8d:18:ef:8c:bd:74:93:cb:bc:
b7:0e:07:d5:c8:0d:2f:47:75:d6:5d:ad:76:fe:f8:b1:ab:b6:
94:44:93:52:d9:10:a3:24:9a:2c:59:a0:2f:bb:98:5e:34:54:
c2:0a:ed:90:2a:8b:1c:74:8f:b2:b5:2d:a2:08:3e:0e:4c:c7:
28:d1:52:33:11:61:2e:aa:a2:6f:c1:3a:06:26:f6:7f:46:48:
cd:eb:20:b9:4d:e1:86:cc:a4:8a:43:7b:49:d2:15:62:70:dd:
2c:79:5b:aa
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUe/CbKijkEdOUrYcX7KPdyTTBFeUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl
ODQxYTRkMzAeFw0yNjA5MDEwMzEzMjFaFw0yNzA4MzEwMzE4MjFaMDMxMTAvBgNV
BAMTKEYzRDEyQkZERDc4Q0IyRkQ5QzM3RDJBMTA1RjRDOUJGQTQ3MzA5NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH4ew7hG5Y6VS9OGOqwnkyzvrB
HILQ71HxWDbuGPQVI2NILGecvmQCWNV20K64jmwLW/8xRbEm+NtYY5/2cUthq9cX
PqHk+WxRvFxNfwo3Igd+daH/1o6X4615dg9DzcZDO1nAqFptrZjB/xqd9v1VIlVI
XbeO0APWDHygvMvrMqKX9QfL4GBAZXrSSjb8DTaNnw5f+hjQ+AHKvuXh51BMVeI3
cgQZBvCLvoVPj0VrgWTYkR7/J8jW/AyWPVSj7amSTlcgIR8FoTTsHaBftNJWJrAN
ixDQgWqvOy2NfDzK0/Gm2FqYGTQaFN+uAWeIBw1RR/C81TwMon9XiZtjoS5NAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU89Er/deMsv2cN9KhBfTJv6RzCXcwHwYDVR0j
BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4
Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o
QnBOTS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt
N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzMzMTJlMzkzOTJlMzIzMDM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNTMyMzEzNzM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
H2PMMA0GCSqGSIb3DQEBCwUAA4IBAQCl+giDZxftePHqcyrPz6rM44Mou/UtnJpJ
fTA4h7gJSYnCowWYbi2IFWujeGtfwIqC0aV++mr7Pk4I2TwiUjskKAkEwqJ0I0sO
rPB0gJFqH8L4tTCCxhLVvAxhu5BciGBMZX7JDlHzzriuckNaFtHzDACqNueeDWIr
8AbQz+dvhJNRIMksXVHHBoU691l7d77MkqAVZg3OvyiNGO+MvXSTy7y3DgfVyA0v
R3XWXa12/vixq7aURJNS2RCjJJosWaAvu5heNFTCCu2QKoscdI+ytS2iCD4OTMco
0VIzEWEuqqJvwToGJvZ/RkjN6yC5TeGGzKSKQ3tJ0hVicN0seVuq
-----END CERTIFICATE-----
Generated at Thu Sep 3 21:38:21 2026 by rpki-client