Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3131312e302f32342d3234203d3e20323135333535.roa
File: 33312e32322e3131312e302f32342d3234203d3e20323135333535.roa (raw, json)
Hash identifier: sGZRYXq3pgxXgMpA6qb4Lt81cMmDp969oaWBo8d9e1M=
Subject key identifier: 3A:76:24:7F:92:F2:8B:5C:02:67:2C:BE:37:A1:1C:AB:B7:AA:23:2B
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 7385FEFADEA82D9DD3B8E075E325E7D7271A5DA5
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3131312e302f32342d3234203d3e20323135333535.roa
Signing time: Mon 03 Aug 2026 11:49:18 +0000
ROA not before: Mon 03 Aug 2026 11:44:18 +0000
ROA not after: Mon 02 Aug 2027 11:49:18 +0000
asID: 215355
IP address blocks: 31.22.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 01:52:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:85:fe:fa:de:a8:2d:9d:d3:b8:e0:75:e3:25:e7:d7:27:1a:5d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Aug 3 11:44:18 2026 GMT
Not After : Aug 2 11:49:18 2027 GMT
Subject: CN=3A76247F92F28B5C02672CBE37A11CABB7AA232B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:ca:42:87:46:5f:7c:26:8e:41:d6:c5:49:
21:d7:e0:5d:f0:5a:9d:7d:78:77:24:a4:7b:58:0a:
12:66:c7:f9:d8:f8:9f:a3:59:fc:2c:ca:ca:41:8c:
a3:e8:03:20:5c:d7:7c:01:5e:17:31:f3:78:e3:18:
90:62:df:4d:20:18:72:d1:05:0f:e1:6c:0d:36:65:
9b:d0:3b:75:22:bc:c6:1e:2b:68:f1:cf:d3:3f:39:
29:3d:a2:72:94:50:18:33:17:49:88:3e:4a:33:ad:
13:fd:c8:fb:06:d1:a6:b3:1a:36:e0:1e:09:fe:9d:
e6:70:4c:b1:f4:d0:db:96:d5:66:d1:19:45:d7:91:
fa:d5:66:24:73:4b:48:6f:89:f6:bd:e8:e8:04:0a:
aa:f1:e6:da:4f:5f:3e:f4:83:40:b7:9e:3e:60:1b:
58:61:f8:21:5a:90:a6:9f:b3:21:25:41:45:fa:d9:
c7:42:fb:a7:5d:dc:ca:18:c3:5f:21:f7:3e:66:a3:
2d:c2:12:89:8b:89:90:e9:df:23:3d:42:6a:d5:53:
4b:55:a8:f2:54:66:f8:c0:20:64:e4:4d:77:83:21:
be:3c:9d:99:62:d5:10:08:48:bc:ef:81:86:e4:30:
49:f2:bf:89:77:5b:c2:e4:52:83:c0:a1:7f:e1:ab:
ca:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:76:24:7F:92:F2:8B:5C:02:67:2C:BE:37:A1:1C:AB:B7:AA:23:2B
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3131312e302f32342d3234203d3e20323135333535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.111.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:1c:ad:5f:f4:f6:eb:d9:ce:52:69:5a:49:ec:e3:89:46:fd:
17:c1:e2:72:5f:5a:a2:8f:cf:0c:86:e6:77:39:98:b9:68:b8:
05:f5:2f:22:ec:e1:66:4c:37:94:27:ca:c4:92:0e:7c:df:19:
67:40:bc:00:26:39:ec:bc:48:95:b8:99:a4:c6:a5:4b:3a:cf:
50:52:6d:82:d7:f4:7e:71:d9:96:99:df:53:c1:58:9b:0e:34:
c1:79:a4:65:bb:e1:58:e4:7c:45:2e:ce:85:ae:ad:90:ba:4e:
c2:00:19:e8:4f:94:cc:25:68:9f:68:1c:c4:68:5f:22:81:e9:
42:b4:8c:cf:45:69:87:ab:ab:ed:22:72:dc:dc:95:c2:8a:76:
0f:69:29:b8:34:8d:ac:6f:7f:73:48:a8:24:39:e4:95:c3:25:
e3:3a:68:e6:05:3f:c9:2a:ea:45:dd:0a:32:60:e2:94:d9:78:
15:81:3b:d4:8e:21:18:33:91:a0:d3:6e:df:f0:54:a1:9d:ac:
b5:a8:b2:07:da:a0:66:33:c1:8d:f1:44:e0:ef:24:f9:eb:ba:
77:90:e1:c2:5e:78:02:62:34:e9:58:fe:6a:93:19:a3:4a:18:
21:49:20:1d:d7:28:d5:65:da:72:b5:6e:c7:21:73:a8:d5:38:
44:7e:11:45
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUc4X++t6oLZ3TuOB14yXn1ycaXaUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw
YWVhYjI5ZDAeFw0yNjA4MDMxMTQ0MThaFw0yNzA4MDIxMTQ5MThaMDMxMTAvBgNV
BAMTKDNBNzYyNDdGOTJGMjhCNUMwMjY3MkNCRTM3QTExQ0FCQjdBQTIzMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzY8pCh0ZffCaOQdbFSSHX4F3w
Wp19eHckpHtYChJmx/nY+J+jWfwsyspBjKPoAyBc13wBXhcx83jjGJBi300gGHLR
BQ/hbA02ZZvQO3UivMYeK2jxz9M/OSk9onKUUBgzF0mIPkozrRP9yPsG0aazGjbg
Hgn+neZwTLH00NuW1WbRGUXXkfrVZiRzS0hvifa96OgECqrx5tpPXz70g0C3nj5g
G1hh+CFakKafsyElQUX62cdC+6dd3MoYw18h9z5moy3CEomLiZDp3yM9QmrVU0tV
qPJUZvjAIGTkTXeDIb48nZli1RAISLzvgYbkMEnyv4l3W8LkUoPAoX/hq8pzAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUOnYkf5Lyi1wCZyy+N6Ecq7eqIyswHwYDVR0j
BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2
NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy
cXNwMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQt
NmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2NjIwLzAvMzMzMTJlMzIzMjJlMzEzMTMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM1MzMzNTM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
HxZvMA0GCSqGSIb3DQEBCwUAA4IBAQCMHK1f9Pbr2c5SaVpJ7OOJRv0XweJyX1qi
j88MhuZ3OZi5aLgF9S8i7OFmTDeUJ8rEkg583xlnQLwAJjnsvEiVuJmkxqVLOs9Q
Um2C1/R+cdmWmd9TwVibDjTBeaRlu+FY5HxFLs6Frq2Quk7CABnoT5TMJWifaBzE
aF8igelCtIzPRWmHq6vtInLc3JXCinYPaSm4NI2sb39zSKgkOeSVwyXjOmjmBT/J
KupF3QoyYOKU2XgVgTvUjiEYM5Gg027f8FShnay1qLIH2qBmM8GN8UTg7yT567p3
kOHCXngCYjTpWP5qkxmjShghSSAd1yjVZdpytW7HIXOo1ThEfhFF
-----END CERTIFICATE-----
Generated at Wed Aug 19 17:53:30 2026 by rpki-client