Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3232322e3235342e302f32342d3234203d3e20313437303439.roa
File: 33312e3232322e3235342e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: ga+WgHHzw+vLxnIgllFNkhIARnm8kbj1iLIwcMfocm8=
Subject key identifier: D1:F2:0A:50:66:FA:D4:90:A7:55:85:58:CA:11:DC:53:D2:B9:5C:96
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 615C42B3567275DC991F5E301A2DE3929F5C3683
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3232322e3235342e302f32342d3234203d3e20313437303439.roa
Signing time: Fri 23 Oct 2026 16:30:40 +0000
ROA not before: Fri 23 Oct 2026 16:25:40 +0000
ROA not after: Fri 22 Oct 2027 16:30:40 +0000
asID: 147049
IP address blocks: 31.222.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:5c:42:b3:56:72:75:dc:99:1f:5e:30:1a:2d:e3:92:9f:5c:36:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:40 2026 GMT
Not After : Oct 22 16:30:40 2027 GMT
Subject: CN=D1F20A5066FAD490A7558558CA11DC53D2B95C96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:79:c2:78:1a:26:c5:fa:33:47:d9:d2:59:af:
b4:cd:d2:1d:f8:63:ad:30:36:ff:0b:20:1b:ac:98:
41:d9:6f:cb:c3:a4:b7:84:02:e7:43:da:13:e3:16:
a6:be:5a:18:ba:8a:60:62:6a:72:23:9e:37:12:cc:
60:aa:db:3a:c8:90:99:c3:41:0a:44:87:26:26:83:
d9:4a:31:44:93:e3:06:14:5b:db:2d:85:62:5d:ab:
f2:49:95:71:0e:76:d4:b8:95:24:3a:08:8b:b2:6e:
e6:ed:51:27:57:7c:cc:be:7a:e7:c7:7c:c7:42:3e:
cc:7a:ba:43:5e:41:f7:38:85:81:cb:f5:82:99:1a:
61:0a:ac:c7:8a:0c:75:7b:12:03:e3:17:cc:dc:3c:
84:c3:c9:fd:bb:f1:9b:71:ec:19:c3:15:a3:6e:06:
89:e4:9f:1f:b2:c6:3a:1e:b9:00:8d:43:da:d4:8f:
d5:22:0d:95:5d:b3:a6:51:a6:7a:25:76:72:8e:1b:
f7:a8:cf:5c:ce:e8:54:b5:a8:a4:a7:d0:c3:2c:73:
0a:b0:5f:63:26:34:d4:ba:c1:0f:71:0a:7d:3c:a9:
fe:73:6e:5e:49:84:7f:e7:f8:04:11:e1:97:53:1e:
2a:56:17:91:60:e3:be:a8:56:4f:67:b1:1a:2a:2a:
06:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F2:0A:50:66:FA:D4:90:A7:55:85:58:CA:11:DC:53:D2:B9:5C:96
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3232322e3235342e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.254.0/24
Signature Algorithm: sha256WithRSAEncryption
14:97:91:91:51:5a:af:fc:ef:0c:8c:22:20:cc:fa:4d:0f:1c:
25:ec:d1:1d:16:1c:51:ce:a5:5a:97:40:eb:45:b0:59:4b:3a:
d7:76:58:24:f3:43:05:9b:c1:f3:aa:7f:5e:ae:45:7e:d1:e6:
5c:fd:25:f4:63:2a:57:ba:9b:00:56:a8:3b:1e:f2:02:33:06:
63:50:84:50:0e:e6:a5:f4:45:e5:35:90:81:bb:92:e9:43:70:
8f:26:84:20:be:34:60:72:f0:3b:8b:c6:c8:3a:0f:42:c7:61:
15:d5:d1:90:53:88:00:b5:fa:50:26:ac:fd:ae:2a:e3:90:26:
47:73:8d:db:f1:68:06:3e:29:f9:5c:f0:4f:39:ba:9e:f4:d2:
85:a4:4e:d9:14:1c:45:66:eb:90:f6:a4:73:c3:72:17:6f:c8:
8a:e4:81:e7:9f:97:49:30:00:04:ac:1f:fe:bf:54:18:2a:ad:
d0:4c:a7:f3:17:0c:0f:33:ba:c9:0c:67:95:dc:06:7f:46:6c:
47:20:94:6c:89:54:5d:c2:f1:f5:ef:80:7e:5a:db:69:62:85:
7d:65:e9:05:72:8e:4e:36:fa:cf:32:3a:23:73:dc:5f:93:17:
1e:72:46:f4:79:99:d3:4f:e4:4d:b4:17:49:1e:b6:fe:1c:a3:
c7:0a:14:8c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Oct 24 04:04:30 2026 by rpki-client