Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/33312e39392e3230342e302f32342d3234203d3e20383334.roa
File: 33312e39392e3230342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 2aTHjKgh3cnXCO48WoTgOb7NUSHfhZJB1RCsftLdsz4=
Subject key identifier: 31:16:3A:0E:56:E7:5A:A5:17:AA:15:FA:35:38:E7:15:2A:05:AD:78
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 37A0D2ABED86280659C8139A167D8D7D6EC35CE0
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/33312e39392e3230342e302f32342d3234203d3e20383334.roa
Signing time: Sun 02 Aug 2026 07:17:20 +0000
ROA not before: Sun 02 Aug 2026 07:12:20 +0000
ROA not after: Sun 01 Aug 2027 07:17:20 +0000
asID: 834
IP address blocks: 31.99.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:a0:d2:ab:ed:86:28:06:59:c8:13:9a:16:7d:8d:7d:6e:c3:5c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Aug 2 07:12:20 2026 GMT
Not After : Aug 1 07:17:20 2027 GMT
Subject: CN=31163A0E56E75AA517AA15FA3538E7152A05AD78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b4:ec:27:2f:61:11:c7:5b:d0:6d:18:a1:3b:
0e:e4:c7:e1:f0:99:75:3b:41:e3:07:d7:91:9a:a8:
ca:08:58:c8:22:cf:36:d0:7a:ad:49:46:aa:90:64:
49:0b:99:32:da:6e:c8:a4:27:dd:f2:11:52:2e:7b:
e6:74:33:14:c0:84:b4:f5:37:19:1a:5d:42:a4:ee:
b8:4e:61:e9:33:05:2d:89:95:75:5a:83:fb:97:38:
41:09:eb:cf:05:fa:6f:eb:5c:96:ed:3b:10:4e:ab:
54:e9:39:01:07:97:aa:76:d2:22:bb:ae:31:4a:0c:
6f:b6:27:05:b6:84:a8:95:b6:99:28:7b:0f:d6:be:
8c:75:a4:9b:f3:21:3d:b2:25:a0:40:1f:b5:52:60:
da:c2:ce:5e:9d:e7:56:3b:4b:ed:cc:71:7f:8d:44:
12:98:3c:a6:37:e0:6e:21:ed:a7:4d:c8:f7:61:0a:
65:a8:35:df:43:b5:54:58:90:8e:28:c4:57:cb:bd:
60:36:77:ca:82:32:75:b3:b9:35:bb:c3:51:98:9d:
bd:bd:65:a1:78:de:aa:14:a0:ff:6f:93:1a:ef:6b:
86:9f:37:06:44:ca:07:19:82:da:11:31:5d:86:e8:
46:fc:e5:f7:85:fc:2d:32:ed:5a:d7:74:6e:18:69:
04:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:16:3A:0E:56:E7:5A:A5:17:AA:15:FA:35:38:E7:15:2A:05:AD:78
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/33312e39392e3230342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.99.204.0/24
Signature Algorithm: sha256WithRSAEncryption
03:6e:f9:fe:94:56:01:bc:3c:26:43:c3:df:83:ba:00:d2:c4:
f6:46:e4:85:31:43:9a:99:f0:d1:2a:a8:90:70:32:2a:2d:2b:
ba:9b:69:f1:d7:ef:1d:9a:c0:18:3f:56:5d:96:88:ad:34:e4:
03:b5:bb:3e:fd:bb:5c:ec:d3:bf:de:f4:59:69:88:9c:c7:42:
75:c2:8e:93:0b:61:ed:77:b2:72:9c:6c:86:78:03:60:9f:bc:
41:89:b3:e9:14:0f:81:07:e3:16:67:18:bd:8b:b1:19:d0:d9:
e4:11:fd:0a:2e:7a:3f:b0:53:49:96:67:63:e5:bb:06:38:9e:
8a:68:06:e8:4a:d1:2a:0d:30:1b:f2:03:65:e2:30:b5:6c:42:
a4:3c:ba:c1:fc:b6:b7:05:2c:96:a6:64:ff:9c:39:25:5c:3f:
13:70:dc:6d:e5:a9:c4:ea:29:1c:3e:08:ad:3c:4e:c0:65:45:
e8:f9:da:a8:da:18:ff:a0:e8:73:be:25:9a:b3:c6:55:db:15:
80:d2:83:ec:c9:d3:4e:3e:7e:29:ff:df:90:bc:1c:00:4e:51:
9a:d3:72:fe:76:1c:fe:9f:25:b2:82:bd:a6:37:23:1d:e3:f6:
ec:92:57:3f:ca:a9:ad:9e:04:e1:48:89:1e:52:55:29:0e:5e:
99:e1:cf:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:51:35 2026 by rpki-client