Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130382e302f32342d3234203d3e203432383331.roa
File: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier: Qks8J0X938H6HVLJgBIAZbcnO+aF1xL4OBNn/fR/W5Q=
Subject key identifier: 6E:35:60:AC:E3:B1:D8:FD:1A:48:7C:1C:7D:9F:38:4A:4B:5F:6C:C9
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 2006C48E2ADAA75DA5711FBECAD2A029356679A4
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130382e302f32342d3234203d3e203432383331.roa
Signing time: Mon 19 Oct 2026 16:49:37 +0000
ROA not before: Mon 19 Oct 2026 16:44:37 +0000
ROA not after: Mon 18 Oct 2027 16:49:37 +0000
asID: 42831
IP address blocks: 31.22.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:06:c4:8e:2a:da:a7:5d:a5:71:1f:be:ca:d2:a0:29:35:66:79:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Oct 19 16:44:37 2026 GMT
Not After : Oct 18 16:49:37 2027 GMT
Subject: CN=6E3560ACE3B1D8FD1A487C1C7D9F384A4B5F6CC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:2f:3c:c4:6d:3a:30:3d:99:21:27:59:b1:
c3:a5:77:c4:2d:58:f1:aa:7d:20:de:dd:e2:1c:ec:
11:ec:5a:da:9f:f6:ee:ee:72:6d:5f:9d:70:ad:e9:
bd:23:d1:e3:2d:66:84:e2:18:35:81:29:10:67:9c:
8d:94:71:1a:6f:3d:a2:82:36:f2:2f:62:6b:1d:67:
e6:21:6a:af:4d:ce:8a:22:cd:34:a1:31:2d:89:5e:
b4:4a:53:d0:0f:fa:d6:e7:fc:a7:9f:24:3d:f1:66:
29:96:e7:26:99:da:1f:67:38:da:da:52:1b:02:1c:
3c:11:6d:b8:81:4f:04:66:30:2f:ea:5d:00:7e:5a:
05:0b:05:ad:fe:b3:53:4f:2e:95:38:29:72:2a:71:
d1:df:1e:d1:6e:71:ae:03:d7:ff:7e:c8:89:f8:41:
e1:ff:24:e3:9c:74:f1:77:8e:c5:ee:28:35:64:48:
15:54:4e:a2:87:dd:24:ec:7c:6f:83:cc:fa:9b:02:
a1:56:5e:ef:c2:d0:0e:be:33:49:f7:31:a0:9e:c7:
b4:d3:f9:a2:7b:46:43:0e:8e:a4:d0:3a:80:34:8c:
e7:91:c0:26:8e:1b:1c:f6:c3:1c:87:11:dc:87:1c:
3e:6b:3f:b0:04:f8:95:c7:9e:05:49:6b:61:ca:67:
aa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:35:60:AC:E3:B1:D8:FD:1A:48:7C:1C:7D:9F:38:4A:4B:5F:6C:C9
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130382e302f32342d3234203d3e203432383331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.108.0/24
Signature Algorithm: sha256WithRSAEncryption
53:a2:5f:77:ae:15:17:56:0c:00:49:d4:09:54:52:fa:c5:a9:
da:65:ae:6e:04:d1:63:96:93:72:da:ec:ef:00:17:5f:01:cb:
c3:16:0e:2a:6d:9a:44:53:04:fd:c5:9d:50:ae:be:8b:e0:fe:
ff:51:72:bf:b3:ee:05:be:54:ee:a4:4c:53:58:27:99:33:2d:
5a:68:7f:11:57:b4:3a:26:21:70:fc:cd:63:9a:c2:2a:e2:0e:
56:e1:d4:7d:5f:1d:ca:71:86:f0:0b:09:4a:73:cf:fb:ba:63:
f0:93:d4:b3:c4:bd:9b:db:ed:6c:a8:0b:53:82:86:cf:9e:e4:
07:30:af:37:8d:99:0f:cc:7f:f2:d8:2d:d3:7d:25:69:a3:38:
6c:6d:ea:a1:05:4b:44:df:5d:1b:bb:dd:73:ef:2d:4d:3a:05:
2a:00:c4:af:b6:ee:df:14:54:7a:43:50:6d:b2:f3:a3:31:58:
17:31:97:82:47:b6:39:20:8a:10:bb:85:d7:36:08:7b:6b:21:
bf:21:82:71:4a:c1:04:a5:0a:27:a4:dd:34:d4:f9:0b:eb:4c:
f5:d0:fa:af:58:74:8c:09:d5:e5:22:9d:ef:43:7f:cc:9c:f6:
fa:bd:4c:1a:78:e0:30:ba:6c:ec:5c:92:85:56:8b:30:2b:44:
e4:3d:02:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:39:11 2026 by rpki-client