Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/33312e39392e3230342e302f32342d3234203d3e20313532373236.roa
File: 33312e39392e3230342e302f32342d3234203d3e20313532373236.roa (raw, json)
Hash identifier: cF2QRs0n/v6cnQP3pm342GiE6CQ1AUN+yu+IMyEFBNo=
Subject key identifier: B9:6A:F4:24:CE:C2:7B:E0:28:07:3A:71:25:32:8F:F4:06:E0:D4:9C
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 285E7F5DA749C3457ABACB779FB2752BABF76F89
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/33312e39392e3230342e302f32342d3234203d3e20313532373236.roa
Signing time: Sat 10 Oct 2026 11:32:53 +0000
ROA not before: Sat 10 Oct 2026 11:27:53 +0000
ROA not after: Sat 09 Oct 2027 11:32:53 +0000
asID: 152726
IP address blocks: 31.99.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:5e:7f:5d:a7:49:c3:45:7a:ba:cb:77:9f:b2:75:2b:ab:f7:6f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Oct 10 11:27:53 2026 GMT
Not After : Oct 9 11:32:53 2027 GMT
Subject: CN=B96AF424CEC27BE028073A7125328FF406E0D49C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:87:6b:98:8f:21:be:bd:06:c8:ad:70:13:73:
35:45:8d:a4:61:af:c6:06:f2:f3:c2:4a:2b:a4:48:
47:01:75:d4:46:b1:b7:53:60:8c:0f:7a:ed:0e:d9:
10:4b:84:72:63:83:9a:91:22:96:65:94:64:79:17:
f2:14:4d:65:f1:63:d2:be:49:8f:23:1d:0c:35:78:
ef:07:b1:2e:55:bd:15:61:b3:87:ee:6e:63:dd:8a:
7d:c8:e3:f2:43:15:a9:1e:e1:5d:dc:f8:da:7f:aa:
64:84:c8:3b:d0:a9:a7:93:20:5e:26:45:a2:85:7e:
5e:3b:48:fa:77:b3:ae:25:30:b7:47:e8:f5:bb:ee:
9c:78:2e:e1:6b:fd:51:81:89:fd:db:14:54:48:6a:
e4:36:25:b9:21:cc:eb:7a:4d:2e:41:c8:09:9e:20:
8e:fd:f2:53:99:f7:f4:79:0a:18:39:70:4e:88:18:
79:02:b8:7c:56:43:c5:e2:96:ca:e8:7a:25:40:41:
79:19:30:25:ec:ad:c5:c3:d0:44:dc:46:c3:67:d1:
d6:02:5b:4c:f5:b5:00:c1:8f:ff:78:5b:15:aa:c2:
30:5f:1a:2b:75:bc:bf:68:e0:3a:75:ea:86:d6:f0:
4f:85:49:96:11:01:8c:07:1c:45:e4:8c:57:cb:10:
94:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6A:F4:24:CE:C2:7B:E0:28:07:3A:71:25:32:8F:F4:06:E0:D4:9C
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/33312e39392e3230342e302f32342d3234203d3e20313532373236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.99.204.0/24
Signature Algorithm: sha256WithRSAEncryption
99:95:16:5d:fe:27:6f:ab:2f:4e:17:9a:50:0d:be:10:eb:44:
9b:cb:aa:2a:1c:c6:c0:c9:4f:41:eb:22:85:b2:37:8b:97:b2:
79:93:b6:36:7c:e9:06:3a:9b:08:c0:62:3c:69:13:3a:af:8d:
af:84:4c:97:17:c2:da:b9:96:18:9a:97:87:92:44:ff:ce:7e:
3a:f5:f8:7f:e1:c9:75:24:23:fb:d8:31:0f:ff:ce:c6:6e:7f:
d4:0a:b4:a8:2f:bc:30:eb:d5:f5:74:62:45:20:db:6c:ce:55:
a9:22:34:de:d4:6d:af:ab:cd:79:3d:f1:bd:90:5e:ed:59:91:
f9:41:11:35:5f:c7:07:8f:29:09:9c:82:6e:e4:25:e1:b3:b3:
68:27:e5:cc:f3:cc:7c:65:61:6e:86:87:a9:e0:05:ff:01:d9:
90:c1:57:a1:10:e3:85:49:a2:8a:15:9a:44:3b:71:63:ce:71:
e4:a8:ee:21:19:02:a9:32:09:04:f7:a8:36:cf:df:c4:0e:d7:
9e:68:c5:25:31:d8:8e:48:91:36:6b:85:32:4a:62:03:d8:c8:
b2:bb:83:21:f2:55:39:99:36:d6:58:72:14:5d:bf:b7:ae:f8:
5b:f9:ac:e8:f9:ae:e6:85:bf:da:04:fc:ab:f1:34:64:96:e9:
af:2c:f0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:55:41 2026 by rpki-client