Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130392e302f32342d3234203d3e20313532363938.roa
File: 33312e32322e3130392e302f32342d3234203d3e20313532363938.roa (raw, json)
Hash identifier: I8lu7O6fcVuBfnhIGKMGd3xQ3ykAWErkChbE7VXmRhE=
Subject key identifier: FB:C6:0B:CC:7D:E2:90:8D:41:72:EB:74:07:E9:E6:7D:2B:6B:0B:B8
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 7BFC0E1FD89B3710FF14C76E7025CD82F155A7D9
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130392e302f32342d3234203d3e20313532363938.roa
Signing time: Mon 31 Aug 2026 15:04:08 +0000
ROA not before: Mon 31 Aug 2026 14:59:08 +0000
ROA not after: Mon 30 Aug 2027 15:04:08 +0000
asID: 152698
IP address blocks: 31.22.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 08:27:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:fc:0e:1f:d8:9b:37:10:ff:14:c7:6e:70:25:cd:82:f1:55:a7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Aug 31 14:59:08 2026 GMT
Not After : Aug 30 15:04:08 2027 GMT
Subject: CN=FBC60BCC7DE2908D4172EB7407E9E67D2B6B0BB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:90:cc:1a:05:4b:0c:96:e5:5a:ad:e0:ee:28:
ce:f7:ea:00:97:14:8f:48:04:83:01:b0:30:21:fd:
54:e6:96:84:7e:05:99:35:a1:c2:a0:b5:61:af:8e:
d7:06:94:ca:b1:04:7f:99:13:9a:37:40:b6:fa:a9:
8f:db:ef:f5:25:eb:02:8c:21:29:10:0a:b5:80:ec:
79:02:81:39:c6:c5:bd:4f:a6:08:57:89:c0:d7:86:
8b:a3:a4:42:ad:b9:09:f4:21:04:e1:34:e5:64:73:
a8:bb:ba:bc:14:15:d9:92:96:ac:ca:ba:cf:ce:db:
c0:9f:e9:1d:37:a6:37:e5:56:a5:0f:df:c5:9b:82:
80:a4:68:6b:0e:6f:b3:7b:51:ea:48:b9:00:35:ee:
e4:03:3f:bf:da:4a:a2:34:52:bf:19:af:5f:15:68:
92:4f:94:97:1b:53:35:2d:51:5a:c1:db:cb:11:1e:
c6:bb:37:fc:c0:d7:45:84:1f:84:86:07:5a:ac:a8:
99:ab:c6:32:9f:42:89:0b:a7:24:7c:16:f0:cb:da:
b6:9e:45:de:f1:25:3d:60:25:60:e2:40:b4:87:e8:
64:33:b6:f5:6a:e0:f4:9b:f8:49:a9:38:ff:49:b1:
2f:72:71:f2:82:68:fc:31:05:c6:35:83:63:09:07:
3b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C6:0B:CC:7D:E2:90:8D:41:72:EB:74:07:E9:E6:7D:2B:6B:0B:B8
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130392e302f32342d3234203d3e20313532363938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.109.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:da:73:c4:86:0c:3c:8d:51:0b:91:ff:01:fc:13:a6:ee:f0:
49:4a:29:b6:96:df:7f:c1:c8:5d:98:13:d2:32:9a:ea:2f:cb:
9d:5c:cc:bd:91:1c:08:74:82:3a:e2:b5:0a:78:00:55:c9:78:
71:d3:4c:2d:be:46:28:57:85:49:f9:ec:72:39:5d:34:d1:55:
1a:74:08:12:c6:f0:2e:ba:23:d7:ea:bc:fd:55:7a:43:44:7a:
32:5e:7b:be:16:b0:b2:2c:bd:2b:8b:53:83:c3:97:d6:66:5e:
ea:29:b5:cf:3a:da:30:53:7b:2a:fb:2d:c4:8d:d0:19:69:d7:
5d:30:41:14:c3:a0:dd:f0:61:fb:7f:9d:5e:68:af:b5:f0:d3:
1e:b9:b2:99:c9:38:2c:30:8f:c8:b0:e1:0b:ac:b2:dc:f0:f5:
f6:28:42:80:03:80:a4:99:6e:42:27:40:c5:22:a3:61:df:af:
b3:3f:fe:c5:de:a9:cc:81:dc:5a:c8:ae:71:9a:a8:8a:52:17:
ed:03:b7:cb:f1:54:9b:cd:08:2b:f6:0c:32:41:e5:52:41:ea:
8f:0f:5f:ad:c4:e2:a3:9e:cf:ad:a4:0a:14:a1:e9:af:77:7e:
b7:9e:af:c7:5a:6b:52:cc:7e:ef:4a:cf:d4:59:90:8b:b2:7b:
85:f8:50:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:32 2026 by rpki-client