Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e32342e38342e302f32342d3234203d3e20313336373837.roa
File: 33312e32342e38342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: zB4vBCJTukrdTkpWpb3EHfuaRZiIn11JaCx0uZpFKn4=
Subject key identifier: 08:01:9F:33:89:C0:32:20:B6:ED:5B:1E:23:1D:30:A3:F0:DF:AE:95
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3CA7009CF30D29BE5C39795A09F2ED1644AFF671
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e32342e38342e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 22 Oct 2026 16:30:05 +0000
ROA not before: Thu 22 Oct 2026 16:25:05 +0000
ROA not after: Thu 21 Oct 2027 16:30:05 +0000
asID: 136787
IP address blocks: 31.24.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:a7:00:9c:f3:0d:29:be:5c:39:79:5a:09:f2:ed:16:44:af:f6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 22 16:25:05 2026 GMT
Not After : Oct 21 16:30:05 2027 GMT
Subject: CN=08019F3389C03220B6ED5B1E231D30A3F0DFAE95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:91:e2:cc:4e:d2:c3:4b:7f:06:43:b3:5e:61:
03:9f:f8:f8:34:94:02:d1:00:0f:3c:df:56:68:fe:
ea:17:e2:63:10:f8:a7:47:b5:ac:ae:b5:9a:ed:d5:
75:bf:73:7d:d9:76:f2:d4:e5:c6:48:ca:dc:fc:0a:
9f:f3:c8:6f:94:c5:26:50:dd:f6:0b:f8:df:68:bd:
d5:08:0f:1c:5c:3e:22:ba:7e:f1:4d:d9:14:37:eb:
1a:f5:e4:ca:de:db:02:b8:5b:e1:06:39:8e:e2:ca:
38:43:2f:45:67:ef:31:17:1a:08:07:43:4b:df:30:
37:67:0a:ab:13:19:66:4e:3e:2b:e8:6b:3f:a3:59:
00:b2:12:fc:64:05:11:91:ea:de:c4:c6:d3:54:c8:
d7:4e:35:78:ee:a5:e8:e0:70:a6:d4:b4:71:71:40:
6d:43:05:1b:2b:c8:d6:ce:16:a1:ef:39:a7:74:7b:
41:34:3f:b0:07:f5:0a:d0:d4:85:fd:1e:12:a5:54:
3c:0a:fe:30:ee:9e:f3:72:86:f6:a8:bc:fe:1d:19:
38:20:38:ab:c8:bc:12:be:7b:b3:73:d6:0d:d3:1f:
88:c1:64:42:c0:6a:59:c6:27:73:c5:41:58:9f:7f:
aa:59:7c:9d:2b:ca:77:49:90:d2:bc:96:c4:fd:33:
3c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:01:9F:33:89:C0:32:20:B6:ED:5B:1E:23:1D:30:A3:F0:DF:AE:95
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e32342e38342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.84.0/24
Signature Algorithm: sha256WithRSAEncryption
80:6e:ec:af:22:34:42:6e:47:d9:62:e0:d7:dd:2c:f9:57:d5:
52:38:48:6f:91:06:e1:39:db:ea:5f:40:11:b7:03:74:8e:81:
0e:73:46:91:92:b1:5f:ab:13:35:6b:3f:33:c0:8b:76:40:c5:
b6:c7:88:9a:15:ff:fa:78:6d:57:9d:dd:44:e1:c8:3f:5d:69:
05:e3:80:c9:c6:cf:2c:ee:58:56:bb:72:47:95:1b:24:03:c7:
e9:b6:38:31:2d:dd:4c:f7:7e:a1:03:77:5b:13:6e:da:01:50:
de:0e:83:69:88:80:2e:ea:94:5b:52:b2:ce:64:2e:fb:d3:86:
80:2e:6c:d9:1e:63:fb:ab:84:79:b1:a3:98:66:0b:f2:85:58:
31:7f:73:67:59:52:04:9c:2e:a8:95:6a:7c:60:5b:f6:94:12:
38:9f:40:6b:cc:2a:61:90:b8:82:81:6e:4f:aa:55:2b:e3:6e:
ac:91:0b:62:74:ab:10:cf:32:99:08:ac:5c:b5:ae:ce:47:74:
b9:df:35:bf:72:ae:5e:3b:d3:65:09:f4:be:fa:5d:c9:01:ee:
8a:da:88:ea:e7:ad:2c:3f:ce:e4:23:0c:bd:b3:7d:05:45:84:
32:2a:98:55:63:a3:7a:bf:f4:b3:15:9d:b6:e3:ed:c5:86:25:
39:cd:d7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:52:43 2026 by rpki-client