Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/33312e39392e3230372e302f32342d3234203d3e203535323031.roa
File: 33312e39392e3230372e302f32342d3234203d3e203535323031.roa (raw, json)
Hash identifier: LWKdaHsgGPyn+M9xKVi0OmJ5F3Y2EclXH2IefhHFlAI=
Subject key identifier: 83:39:B3:95:E2:44:BA:3D:25:01:D2:84:19:AB:8D:BF:8C:93:CE:4C
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 3C21FE20EBD19F3F799371C8E67D19EA0E96F5CB
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/33312e39392e3230372e302f32342d3234203d3e203535323031.roa
Signing time: Tue 19 May 2026 10:02:04 +0000
ROA not before: Tue 19 May 2026 09:57:04 +0000
ROA not after: Tue 18 May 2027 10:02:04 +0000
asID: 55201
IP address blocks: 31.99.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:21:fe:20:eb:d1:9f:3f:79:93:71:c8:e6:7d:19:ea:0e:96:f5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: May 19 09:57:04 2026 GMT
Not After : May 18 10:02:04 2027 GMT
Subject: CN=8339B395E244BA3D2501D28419AB8DBF8C93CE4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4f:93:c7:8c:f4:eb:80:a7:a0:bc:10:1a:a4:
4e:fb:57:41:61:7c:0c:74:3d:80:fe:0c:0b:20:2c:
50:c1:7b:b5:b1:17:0c:ae:f9:c1:3d:85:40:89:6a:
6e:8d:be:7d:d1:44:f5:65:a9:66:45:d8:33:33:37:
63:97:e5:ad:d9:ea:f4:c5:d2:d4:fb:8f:c3:12:1f:
76:fa:42:1c:31:47:ef:90:c4:08:91:56:0b:b9:1e:
82:db:d3:91:ee:2f:5f:0f:7c:22:20:af:d6:6c:51:
3d:4c:c0:c5:06:c5:6d:41:7a:e0:28:06:34:f1:f7:
c3:33:bb:e0:34:2b:e1:30:c0:cb:f1:f3:42:e4:8e:
5c:9e:44:9c:67:3d:08:c1:31:0b:f6:a0:c2:5d:89:
8b:f8:ba:4a:27:e5:dd:7e:6c:12:2c:5c:ab:ea:04:
b3:cc:dd:0a:de:88:89:97:f5:09:cb:97:07:6b:58:
e6:18:a6:76:bb:c3:be:19:72:be:ab:a3:c1:18:2d:
ab:4a:e9:a8:24:e1:61:d8:d2:1d:e5:95:4a:d7:95:
ec:fe:7d:1e:d0:4d:91:d6:e8:3d:00:03:f8:03:8f:
76:8e:e8:50:b9:9a:8f:8d:b7:b5:eb:e7:b1:4f:50:
06:81:8c:78:ec:db:24:80:17:ed:a3:af:c5:f1:82:
a0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:39:B3:95:E2:44:BA:3D:25:01:D2:84:19:AB:8D:BF:8C:93:CE:4C
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/33312e39392e3230372e302f32342d3234203d3e203535323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.99.207.0/24
Signature Algorithm: sha256WithRSAEncryption
50:5c:b1:b9:ac:f6:a8:e4:05:43:64:c4:66:12:01:95:de:69:
e0:9a:6d:0f:9d:3d:c8:42:72:95:ab:4a:32:19:e6:8d:a8:6c:
12:94:9c:4c:f4:12:05:40:c5:b6:d9:b9:a4:62:0b:89:af:db:
2e:c9:53:0d:87:49:29:3c:4b:a3:16:e0:e5:4b:03:7e:74:1c:
bf:5f:cc:d7:65:07:a7:8b:4b:f0:31:57:bd:ae:5f:e1:de:ba:
d9:ea:72:f2:0b:c4:d5:52:48:b7:d9:02:01:fa:a3:39:1c:28:
f2:62:84:b1:b6:22:cd:2a:c1:9b:11:69:81:55:58:87:f1:c8:
c5:46:a4:fc:53:e7:59:ca:ca:19:d9:7a:50:32:18:60:55:f7:
64:5c:d7:25:8b:0c:41:ec:32:36:7b:90:d4:2a:53:f3:7e:c8:
97:12:7e:64:ac:a4:57:c2:50:21:49:58:03:79:a9:ef:93:e4:
80:6c:5e:72:d8:28:0e:89:94:2d:d7:44:29:d9:ff:cd:6d:b8:
36:e5:e3:24:37:d3:01:5b:5d:67:f1:4d:38:91:00:f2:88:c6:
b4:75:3f:4c:f6:01:47:28:fd:0f:89:6f:67:2d:d3:5d:6a:40:
17:e7:3a:80:5e:08:2c:36:18:1b:cf:4e:e9:44:a3:f1:e4:58:
a8:49:95:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:22:02 2026 by rpki-client