Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130372e302f32342d3234203d3e203231383539.roa
File: 33312e32322e3130372e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: H9RX18ry704+3Lwdrl6eHWWzt2tUSs0nSGFnEmOomuw=
Subject key identifier: 7B:D8:3E:52:7D:11:24:DA:1B:55:9E:E1:91:18:19:95:DA:E0:23:8D
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 4DBBA452E34DA10A9ADCEBD6238125BEFB766E8B
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130372e302f32342d3234203d3e203231383539.roa
Signing time: Mon 13 Jul 2026 02:28:36 +0000
ROA not before: Mon 13 Jul 2026 02:23:36 +0000
ROA not after: Mon 12 Jul 2027 02:28:36 +0000
asID: 21859
IP address blocks: 31.22.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:40:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:bb:a4:52:e3:4d:a1:0a:9a:dc:eb:d6:23:81:25:be:fb:76:6e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Jul 13 02:23:36 2026 GMT
Not After : Jul 12 02:28:36 2027 GMT
Subject: CN=7BD83E527D1124DA1B559EE191181995DAE0238D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a4:51:26:ef:87:f8:07:e7:1d:e1:0b:8f:07:
20:af:20:12:c8:3a:74:e9:98:42:15:3c:ee:11:29:
2d:5a:36:f3:3a:55:a7:ec:c8:00:f1:c3:a2:f7:22:
95:20:59:e5:6d:1d:ae:9f:d8:5e:ea:53:e8:e5:dd:
71:2a:9c:94:df:ac:83:65:06:1d:90:8d:5a:32:b2:
04:e8:5e:c4:d1:80:c1:a1:b4:c0:e6:ff:36:3b:fa:
dd:91:b8:30:7f:64:79:ef:6e:fa:cf:44:79:ec:26:
e9:9c:71:c1:5f:ae:c8:09:ed:8c:81:b9:f6:47:a3:
ad:43:7e:c3:8b:dc:2f:38:e2:95:b2:71:43:bc:f1:
2e:3a:5d:cc:3c:c6:d9:34:82:1e:07:d6:47:67:c0:
08:11:64:91:17:b3:39:32:99:cf:b6:f3:21:47:04:
41:75:a9:6d:b2:8c:73:02:2d:23:21:2b:fd:70:7d:
3c:62:e4:b2:c0:67:59:cf:93:66:32:0e:c2:d4:ac:
2a:11:42:f6:2b:76:4c:c4:d8:26:f5:c9:bc:4a:8b:
9a:f7:19:09:c5:2f:05:b2:b9:95:75:94:c8:9c:cd:
1a:62:b5:b3:6d:c3:7a:bf:ba:f2:4e:10:6a:aa:7f:
e0:4a:9e:d0:6b:97:8a:df:14:8c:5e:25:66:2f:24:
3a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D8:3E:52:7D:11:24:DA:1B:55:9E:E1:91:18:19:95:DA:E0:23:8D
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130372e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.107.0/24
Signature Algorithm: sha256WithRSAEncryption
24:65:40:c9:89:39:38:76:89:04:10:32:c0:58:2f:be:70:da:
71:ce:75:8b:21:5d:7d:b6:35:a9:2b:91:af:ce:c4:8e:85:f5:
6c:0d:16:b1:46:5e:60:50:57:79:ec:92:19:0d:71:21:72:78:
57:fc:13:3a:6a:85:96:28:53:d2:61:bb:cc:04:7a:27:5f:c4:
cb:7d:8b:6a:19:3e:36:4e:0d:0c:34:9b:ff:73:29:3c:57:b3:
d4:fb:80:ea:5d:0c:a8:f4:aa:ba:d0:82:f2:7c:b8:07:ee:e2:
ea:26:c8:eb:27:33:9c:6f:b5:2c:82:88:c7:37:66:9d:eb:21:
ff:4b:62:5c:a5:73:e7:9a:cb:ba:3b:1e:2e:97:a2:88:79:2c:
44:5a:b1:a3:fe:90:13:bd:d2:f2:bd:23:af:3c:bb:90:a5:86:
e3:a9:fa:55:29:3f:77:66:a0:ba:73:46:97:b0:c9:75:d4:f5:
69:b1:38:a9:2a:e4:4e:3d:e6:76:95:0e:ba:c8:5c:2a:52:6a:
0e:34:e2:00:42:ea:84:f6:3d:b7:83:8d:af:c4:d9:fc:16:0e:
5f:57:c3:92:ee:17:c5:a1:ee:f3:6f:df:61:62:61:cf:5a:a3:
45:fc:61:2e:2e:c4:8a:92:ad:60:bf:2c:db:0d:05:99:0b:c0:
5d:a4:2d:e6
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUTbukUuNNoQqa3OvWI4Elvvt2boswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw
YWVhYjI5ZDAeFw0yNjA3MTMwMjIzMzZaFw0yNzA3MTIwMjI4MzZaMDMxMTAvBgNV
BAMTKDdCRDgzRTUyN0QxMTI0REExQjU1OUVFMTkxMTgxOTk1REFFMDIzOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0pFEm74f4B+cd4QuPByCvIBLI
OnTpmEIVPO4RKS1aNvM6VafsyADxw6L3IpUgWeVtHa6f2F7qU+jl3XEqnJTfrINl
Bh2QjVoysgToXsTRgMGhtMDm/zY7+t2RuDB/ZHnvbvrPRHnsJumcccFfrsgJ7YyB
ufZHo61DfsOL3C844pWycUO88S46Xcw8xtk0gh4H1kdnwAgRZJEXszkymc+28yFH
BEF1qW2yjHMCLSMhK/1wfTxi5LLAZ1nPk2YyDsLUrCoRQvYrdkzE2Cb1ybxKi5r3
GQnFLwWyuZV1lMiczRpitbNtw3q/uvJOEGqqf+BKntBrl4rfFIxeJWYvJDppAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUe9g+Un0RJNobVZ7hkRgZldrgI40wHwYDVR0j
BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2
NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy
cXNwMC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQt
NmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2NjIwLzAvMzMzMTJlMzIzMjJlMzEzMDM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM4MzUzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB8W
azANBgkqhkiG9w0BAQsFAAOCAQEAJGVAyYk5OHaJBBAywFgvvnDacc51iyFdfbY1
qSuRr87EjoX1bA0WsUZeYFBXeeySGQ1xIXJ4V/wTOmqFlihT0mG7zAR6J1/Ey32L
ahk+Nk4NDDSb/3MpPFez1PuA6l0MqPSqutCC8ny4B+7i6ibI6ycznG+1LIKIxzdm
nesh/0tiXKVz55rLujseLpeiiHksRFqxo/6QE73S8r0jrzy7kKWG46n6VSk/d2ag
unNGl7DJddT1abE4qSrkTj3mdpUOushcKlJqDjTiAELqhPY9t4ONr8TZ/BYOX1fD
ku4XxaHu82/fYWJhz1qjRfxhLi7EipKtYL8s2w0FmQvAXaQt5g==
-----END CERTIFICATE-----
Generated at Tue Jul 21 15:00:37 2026 by rpki-client