Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130342e302f32342d3234203d3e203433383437.roa
File: 33312e3138352e3130342e302f32342d3234203d3e203433383437.roa (raw, json)
Hash identifier: cRqYQiRVVInanzag9EpWaHhBmtu84FJoIPt+81tU2Nw=
Subject key identifier: DD:7E:9E:83:44:40:1B:1D:5B:C2:53:D7:E0:37:DD:AD:C3:FA:BD:F7
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 3C1EA8AD26EADED396D2CEAC4F3B162254C13007
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130342e302f32342d3234203d3e203433383437.roa
Signing time: Tue 07 Jul 2026 15:48:59 +0000
ROA not before: Tue 07 Jul 2026 15:43:59 +0000
ROA not after: Tue 06 Jul 2027 15:48:59 +0000
asID: 43847
IP address blocks: 31.185.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 12:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:1e:a8:ad:26:ea:de:d3:96:d2:ce:ac:4f:3b:16:22:54:c1:30:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Jul 7 15:43:59 2026 GMT
Not After : Jul 6 15:48:59 2027 GMT
Subject: CN=DD7E9E8344401B1D5BC253D7E037DDADC3FABDF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:94:6f:11:4a:04:f8:a4:33:89:06:a4:68:89:
b1:d0:56:67:22:f0:2e:13:99:70:d2:78:8e:70:6c:
38:fc:d7:dd:5c:a9:2a:a9:26:84:6b:9f:79:60:fa:
b1:6c:9c:44:40:fb:7f:1f:48:66:a2:da:25:2e:73:
ba:13:19:17:e2:0e:cd:47:90:59:56:b1:84:e5:fb:
00:43:e3:0b:ea:8a:d3:63:2c:ce:3e:f5:91:55:df:
2b:4a:a3:16:56:31:7c:df:50:bf:b0:be:5d:f1:3c:
35:16:76:4b:22:44:b4:2c:81:dd:62:6a:5e:40:56:
4c:35:ec:9d:fe:46:26:1f:ff:45:b4:be:c7:e5:b3:
2b:c0:59:00:55:20:0a:f0:97:87:f3:b0:60:8a:4b:
fd:cd:1d:e2:43:7d:5f:dc:e4:16:ab:ac:15:41:35:
d2:82:10:6c:d2:53:ad:3f:d4:3c:61:b3:9c:45:54:
ff:c4:de:0a:6e:00:04:a1:d3:ae:7e:08:03:d5:1e:
21:f6:52:54:f3:c7:91:40:bc:fa:7d:3d:4c:34:49:
a0:9a:16:1f:05:eb:a4:71:66:30:72:f5:78:6f:b1:
64:1b:ba:f4:70:dc:4a:4d:c6:59:43:ed:7a:81:4d:
32:28:b6:b0:51:4d:38:5f:72:3b:27:9f:3e:e7:a8:
2c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7E:9E:83:44:40:1B:1D:5B:C2:53:D7:E0:37:DD:AD:C3:FA:BD:F7
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130342e302f32342d3234203d3e203433383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.104.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:6b:6e:7b:6d:97:ed:21:13:82:81:1e:7f:34:00:21:a1:45:
3b:f1:a5:77:51:6a:46:21:d8:f7:2e:35:9c:cb:f1:8e:b6:f4:
ca:c4:f0:6e:a7:9e:de:e0:1e:b9:e9:4c:31:f6:6e:c5:bf:9a:
1d:72:8b:d1:d9:1f:f1:33:c4:64:d1:09:b1:f5:b5:64:ac:e7:
ae:f9:ac:08:51:39:9b:89:92:77:7f:5f:b8:64:fc:b4:1d:fc:
46:e5:3c:f8:4f:93:21:c9:6b:cb:e7:59:73:95:d1:66:6b:ec:
f3:fa:2b:7d:bd:0d:1e:f5:54:16:ae:28:d2:f7:39:90:7a:a0:
14:39:0b:95:9a:a3:08:b5:cb:70:6c:a9:9e:fd:0a:ae:75:91:
5a:ec:aa:a4:92:73:41:d4:d3:ed:b3:05:9d:7f:a6:90:38:9a:
ab:8d:10:df:17:13:4a:38:d6:94:3d:cd:81:9f:08:a2:e2:86:
a3:d8:45:34:30:b8:49:c0:5b:1e:de:85:d6:72:0a:86:23:8c:
ff:80:89:d0:db:aa:57:4a:2f:db:1c:f1:ed:e8:8e:9d:8d:1a:
89:ee:6b:87:6c:bf:fc:a2:ae:9b:78:06:35:af:a2:5a:e9:5d:
8e:03:ec:97:2b:2f:ed:8c:45:1d:dd:0c:a5:4d:e0:0c:f6:e9:
c3:8c:93:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:24:10 2026 by rpki-client