Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3131312e302f32342d3234203d3e20323135333535.roa
File: 33312e32322e3131312e302f32342d3234203d3e20323135333535.roa (raw, json)
Hash identifier: brok2XUOzC0OAQs7efh1lP/TIOrHW70pJohRfs3tgEM=
Subject key identifier: 63:D8:E3:A1:39:7A:EE:BA:FE:E7:0E:B2:07:A8:F1:FE:C8:87:01:B5
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 66897B1B5626777CEC85935257AE852EE336FE15
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3131312e302f32342d3234203d3e20323135333535.roa
Signing time: Mon 01 Sep 2025 11:08:16 +0000
ROA not before: Mon 01 Sep 2025 11:03:16 +0000
ROA not after: Mon 31 Aug 2026 11:08:16 +0000
asID: 215355
IP address blocks: 31.22.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 15:44:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:89:7b:1b:56:26:77:7c:ec:85:93:52:57:ae:85:2e:e3:36:fe:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Sep 1 11:03:16 2025 GMT
Not After : Aug 31 11:08:16 2026 GMT
Subject: CN=63D8E3A1397AEEBAFEE70EB207A8F1FEC88701B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ad:f8:23:3c:e3:90:96:44:b9:da:d0:dc:29:
8f:92:76:31:91:37:c4:6c:1e:77:40:51:71:da:1c:
11:09:83:11:3f:a2:a0:83:75:7e:34:2d:4e:1a:ad:
8c:01:c1:3d:df:85:37:f3:4f:9d:04:55:18:8f:30:
e7:42:3f:97:fb:41:a8:d9:1b:cc:2b:52:80:bd:5c:
3e:ad:83:9a:46:b3:4a:c2:a3:aa:2d:4a:a7:02:31:
36:63:51:64:36:9b:93:00:5c:62:6c:2b:03:d5:07:
21:40:a0:fb:5f:d8:c0:e3:e4:e0:c2:a7:76:ca:89:
3b:fa:25:2e:30:0f:31:60:12:d4:73:ef:d3:32:6b:
50:da:f4:31:bb:75:a9:4f:74:6f:49:63:96:6e:1d:
03:f2:fb:1b:bf:50:da:7d:19:9c:79:11:32:61:72:
67:be:70:40:9d:8d:77:d3:61:2f:c9:71:8c:36:ae:
2f:dd:2c:bc:72:03:4b:1a:03:82:dd:fb:82:60:a2:
ab:20:fc:21:95:1a:14:a1:55:88:2a:6f:56:3b:7d:
0d:28:65:db:bc:04:21:ca:e0:3d:32:d6:25:0a:89:
b7:f9:cf:22:db:c9:3b:f8:5f:c9:1c:f4:74:cf:e2:
5e:ae:75:14:3a:11:f5:97:3f:27:6e:81:5a:e7:8d:
51:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D8:E3:A1:39:7A:EE:BA:FE:E7:0E:B2:07:A8:F1:FE:C8:87:01:B5
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3131312e302f32342d3234203d3e20323135333535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.111.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:5a:08:af:df:4c:cb:86:b5:73:09:e5:ec:2a:67:5e:f1:d6:
a9:60:a0:4d:5b:7e:88:ba:f4:b7:ad:b6:f3:9e:29:4e:10:1d:
dc:e8:16:4b:d0:3e:14:c9:44:76:7e:a8:db:69:93:12:1a:8b:
92:98:bd:9f:53:c8:65:73:c2:6b:1e:2c:0f:12:eb:cd:bf:50:
1d:58:97:e9:d1:90:94:a6:25:5d:bf:f2:d4:0f:82:b3:d6:fe:
c3:1d:ee:40:0b:fc:e6:28:7d:d7:7e:b5:91:42:f4:90:2b:f4:
00:c4:35:9b:6d:8a:1d:54:30:5f:a3:ab:79:4c:80:c1:e1:dc:
76:bc:40:46:d6:8e:99:83:fd:90:85:f1:83:cc:07:5d:f6:c1:
70:46:b1:87:c4:0f:b2:f7:f6:99:17:b5:5f:0e:53:f4:15:16:
46:b6:4c:53:2e:7a:e6:bf:71:87:eb:81:79:95:48:97:b9:46:
e9:d5:95:f9:04:b0:2f:65:ba:ee:df:aa:ce:6a:22:08:1d:94:
fa:76:1b:cb:ef:33:7b:ca:80:5a:84:5b:da:dc:b3:f7:92:cb:
cc:e9:99:75:05:ce:80:1b:e0:79:48:68:23:f4:67:af:5f:5b:
f4:99:b5:86:9c:b6:12:3c:dc:fb:4c:e6:68:9f:d5:3e:a6:af:
73:0e:f2:db
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUZol7G1Ymd3zshZNSV66FLuM2/hUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw
YWVhYjI5ZDAeFw0yNTA5MDExMTAzMTZaFw0yNjA4MzExMTA4MTZaMDMxMTAvBgNV
BAMTKDYzRDhFM0ExMzk3QUVFQkFGRUU3MEVCMjA3QThGMUZFQzg4NzAxQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqrfgjPOOQlkS52tDcKY+SdjGR
N8RsHndAUXHaHBEJgxE/oqCDdX40LU4arYwBwT3fhTfzT50EVRiPMOdCP5f7QajZ
G8wrUoC9XD6tg5pGs0rCo6otSqcCMTZjUWQ2m5MAXGJsKwPVByFAoPtf2MDj5ODC
p3bKiTv6JS4wDzFgEtRz79Mya1Da9DG7dalPdG9JY5ZuHQPy+xu/UNp9GZx5ETJh
cme+cECdjXfTYS/JcYw2ri/dLLxyA0saA4Ld+4Jgoqsg/CGVGhShVYgqb1Y7fQ0o
Zdu8BCHK4D0y1iUKibf5zyLbyTv4X8kc9HTP4l6udRQ6EfWXPydugVrnjVFfAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUY9jjoTl67rr+5w6yB6jx/siHAbUwHwYDVR0j
BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2
NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy
cXNwMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQt
NmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2NjIwLzAvMzMzMTJlMzIzMjJlMzEzMTMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM1MzMzNTM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
HxZvMA0GCSqGSIb3DQEBCwUAA4IBAQCfWgiv30zLhrVzCeXsKmde8dapYKBNW36I
uvS3rbbznilOEB3c6BZL0D4UyUR2fqjbaZMSGouSmL2fU8hlc8JrHiwPEuvNv1Ad
WJfp0ZCUpiVdv/LUD4Kz1v7DHe5AC/zmKH3XfrWRQvSQK/QAxDWbbYodVDBfo6t5
TIDB4dx2vEBG1o6Zg/2QhfGDzAdd9sFwRrGHxA+y9/aZF7VfDlP0FRZGtkxTLnrm
v3GH64F5lUiXuUbp1ZX5BLAvZbru36rOaiIIHZT6dhvL7zN7yoBahFva3LP3ksvM
6Zl1Bc6AG+B5SGgj9GevX1v0mbWGnLYSPNz7TOZon9U+pq9zDvLb
-----END CERTIFICATE-----
Generated at Fri Sep 5 22:17:07 2025 by rpki-client