Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e32342e38352e302f32342d3234203d3e20323035363539.roa
File: 33312e32342e38352e302f32342d3234203d3e20323035363539.roa (raw, json)
Hash identifier: q+hdk6dE7tdSFGRcBMGaBtLl5aXtW9v9YoIQ+MjnGi4=
Subject key identifier: A1:31:9A:10:84:93:55:76:AE:C5:F9:15:21:0C:21:87:D5:FA:C8:8A
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 281026885C0921A45709C9B800374558348C3B1B
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e32342e38352e302f32342d3234203d3e20323035363539.roa
Signing time: Fri 23 Oct 2026 14:30:07 +0000
ROA not before: Fri 23 Oct 2026 14:25:07 +0000
ROA not after: Fri 22 Oct 2027 14:30:07 +0000
asID: 205659
IP address blocks: 31.24.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:10:26:88:5c:09:21:a4:57:09:c9:b8:00:37:45:58:34:8c:3b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 14:25:07 2026 GMT
Not After : Oct 22 14:30:07 2027 GMT
Subject: CN=A1319A1084935576AEC5F915210C2187D5FAC88A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2f:cb:3d:05:66:ba:1b:86:3b:9c:54:cf:69:
ce:1a:2e:df:da:c2:58:6e:c9:72:ce:d4:63:00:2b:
4c:eb:fe:c1:b3:aa:c4:47:01:15:0f:1a:0c:86:b1:
4b:0b:e2:92:31:9b:a8:8a:79:66:01:78:5f:44:42:
a7:2c:db:25:07:92:95:2d:a9:90:41:fe:15:42:fa:
9d:6a:77:16:6e:59:08:33:7d:7d:67:c2:64:ab:68:
44:61:1f:6e:ee:b9:b5:42:2b:85:29:99:8b:0d:d4:
fd:fe:be:b7:dd:3c:10:e4:75:99:b2:f0:ae:ad:63:
8f:05:ce:43:b2:71:4e:3a:54:9c:4f:3e:97:ae:9a:
fc:6f:f0:48:79:ec:41:23:d0:03:bb:42:d7:b8:38:
9b:25:54:6b:37:3f:2a:b9:67:12:b9:67:ce:fd:03:
07:67:aa:11:59:dd:32:66:30:a5:26:33:6c:b2:2c:
5b:7d:43:09:9c:54:fe:ff:04:a1:58:ba:35:a8:eb:
21:02:4e:cb:eb:3a:4f:c4:b8:2d:23:6f:f2:52:cc:
b7:5d:68:24:72:31:3f:df:79:4c:69:ed:aa:3d:2b:
2e:7f:12:d0:e2:6f:3a:91:73:f9:4c:ac:2a:ec:04:
70:c8:7b:5a:e6:bf:df:f3:e1:ce:75:e5:a8:30:86:
09:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:31:9A:10:84:93:55:76:AE:C5:F9:15:21:0C:21:87:D5:FA:C8:8A
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e32342e38352e302f32342d3234203d3e20323035363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.85.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:dd:87:e7:4b:d9:50:a9:8c:3c:5f:70:26:17:bf:3d:50:84:
44:1c:b7:12:33:69:14:3c:e4:eb:67:a1:60:32:f4:b2:b8:5c:
51:c2:9b:b6:35:5a:5b:60:d6:4c:26:3b:5b:e4:32:26:70:9b:
11:24:c8:4d:b2:47:33:b0:de:1e:dc:29:00:df:99:34:29:c9:
4a:36:5a:70:0b:8e:c5:b4:d2:bf:ac:0e:83:84:ca:29:dd:02:
33:f9:5a:fb:8c:88:77:83:34:d3:1e:0f:8e:4e:91:e1:4d:31:
ab:e7:ff:a2:f4:4d:9a:31:1d:96:86:6d:d7:c9:61:b1:cc:f2:
24:a3:3b:a8:dc:24:59:08:de:1d:e2:34:92:2e:c2:24:30:1d:
c0:75:e8:6b:70:c4:07:dd:5d:97:f4:2c:a9:08:f5:b8:cb:59:
46:6c:92:46:56:b2:d2:41:47:87:6c:34:1e:c8:0e:d8:bb:a4:
f4:30:7e:9f:97:5d:a1:cd:14:ca:c7:04:05:8b:ae:d6:62:bb:
bb:d1:1c:f8:c8:41:ba:0f:ab:af:88:28:7a:27:f1:97:be:a8:
23:6f:a0:11:eb:a6:c3:0b:71:b5:5c:05:cd:4f:c1:2b:4d:b0:
8b:7a:db:93:4d:31:20:b1:6f:ee:22:aa:21:0d:f8:55:84:66:
2c:99:5a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:21:26 2026 by rpki-client