Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa
File: 33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa (raw, json)
Hash identifier: 8fHWRHCVBN3ZxoELGEiUX2uucky87/OuM6uDPtuM3kI=
Subject key identifier: 7D:EE:81:BC:F5:87:A7:0F:08:2B:5D:C6:64:99:E9:A7:BB:3B:15:69
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 6D91FE369A0A3EA76D60C970E9A3AE5EF8B025D0
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa
Signing time: Mon 15 Jun 2026 14:47:34 +0000
ROA not before: Mon 15 Jun 2026 14:42:34 +0000
ROA not after: Mon 14 Jun 2027 14:47:34 +0000
asID: 214208
IP address blocks: 31.185.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 12:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:91:fe:36:9a:0a:3e:a7:6d:60:c9:70:e9:a3:ae:5e:f8:b0:25:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Jun 15 14:42:34 2026 GMT
Not After : Jun 14 14:47:34 2027 GMT
Subject: CN=7DEE81BCF587A70F082B5DC66499E9A7BB3B1569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:68:c7:78:3b:b6:cf:ee:7f:f1:96:37:70:f8:
cd:82:9b:96:5c:49:ae:ac:84:9a:79:b5:d1:b6:1d:
23:da:05:94:dc:7c:53:d0:bb:dd:56:47:a7:82:dd:
13:9b:2f:bc:2b:d6:6d:d5:6d:97:88:2f:24:60:da:
14:3b:02:56:6d:69:30:65:b5:c1:97:72:10:50:41:
ab:1b:c2:72:79:96:b1:4d:72:4f:2b:7b:dc:ce:dc:
eb:64:b8:25:0d:ed:0e:49:97:81:85:6c:cd:73:35:
64:f8:2d:0c:06:58:4f:41:1d:5b:fe:20:1c:f4:72:
92:1d:e0:c1:e8:4a:81:d6:40:3d:cc:b6:3d:72:e8:
f9:dd:64:21:2c:d9:b4:cd:84:33:ff:f3:f9:80:03:
61:5d:f2:5c:a9:00:da:9a:ed:b1:7c:98:07:12:c0:
62:b6:e9:77:8c:9d:6d:6b:04:21:fb:f0:17:66:99:
3a:c5:f5:6a:3d:51:27:2d:a3:ba:c5:07:f2:38:d7:
82:9c:63:f3:1b:3a:e0:74:e1:8b:8b:57:7f:c9:ec:
00:af:14:cc:6f:eb:dd:28:87:96:dc:92:b1:25:99:
3f:d0:14:e1:74:54:b4:fb:86:cc:9e:ed:bd:f8:35:
88:0b:35:76:d4:02:67:6a:a7:a5:86:8d:27:0e:03:
53:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EE:81:BC:F5:87:A7:0F:08:2B:5D:C6:64:99:E9:A7:BB:3B:15:69
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.107.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:c2:a2:76:08:7c:20:86:c7:cb:a7:44:94:45:70:9d:e7:95:
36:e8:c1:db:d9:bc:f6:d8:9c:7f:c9:09:e0:54:26:92:d2:86:
e8:1e:54:f4:2d:5c:3e:d8:f8:dd:70:64:cd:cd:83:f4:6f:6c:
65:be:bc:7b:2b:a6:14:e1:93:cb:a3:c1:e9:1f:ee:49:38:b6:
37:63:7d:ad:de:5a:3c:a6:38:9e:99:38:c9:fa:b6:ea:1e:8b:
64:6c:1a:50:33:3b:4c:88:9d:f9:9e:23:0f:d0:df:e7:e7:57:
bd:49:4c:4b:c4:e9:9e:22:23:09:a6:ae:0f:50:13:c1:62:61:
62:0e:8a:48:ef:c2:cf:b9:8b:c3:60:27:46:2f:93:ee:9e:cf:
83:88:fb:b5:40:68:bc:22:c0:30:56:d9:c3:b3:18:01:c2:00:
2f:67:a3:ac:51:2d:e4:fb:97:76:85:d6:96:06:a0:a2:ed:f2:
2e:e7:ba:11:4d:dd:09:e9:ae:36:92:76:46:9a:91:d2:8c:4b:
8b:9f:ff:54:f0:84:66:f7:37:fd:90:5d:43:66:3d:18:9d:f7:
ba:85:d5:0f:df:52:68:a3:67:30:8a:c8:31:3b:3a:1d:76:e2:
a5:83:75:d2:a5:50:e1:80:4f:06:a7:c6:41:c8:6c:ef:e8:7f:
82:e8:2e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:24:38 2026 by rpki-client