Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37302e302f32332d3233203d3e203230383630.roa
File: 33312e3138372e37302e302f32332d3233203d3e203230383630.roa (raw, json)
Hash identifier: 9p0bok/ggvwOArQNUN5z4Y5wjQfzMBRzSTei6FJT7XI=
Subject key identifier: D6:ED:11:20:75:08:43:F2:C0:92:B1:D1:4E:70:1E:BB:53:34:8B:89
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2494C966ADC1FB8BCAD30C67CB3FCA914EF3B0DA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37302e302f32332d3233203d3e203230383630.roa
Signing time: Mon 10 Aug 2026 16:27:48 +0000
ROA not before: Mon 10 Aug 2026 16:22:48 +0000
ROA not after: Mon 09 Aug 2027 16:27:48 +0000
asID: 20860
IP address blocks: 31.187.70.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:94:c9:66:ad:c1:fb:8b:ca:d3:0c:67:cb:3f:ca:91:4e:f3:b0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 10 16:22:48 2026 GMT
Not After : Aug 9 16:27:48 2027 GMT
Subject: CN=D6ED1120750843F2C092B1D14E701EBB53348B89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:4d:5d:e9:12:72:0f:a5:77:b5:cb:42:ac:
05:4c:92:b9:21:69:c9:91:0c:ce:ca:fb:c0:b6:93:
7f:e0:3f:9c:0c:c0:c7:56:ee:f6:24:fd:6f:79:30:
5b:f7:2f:64:64:67:c1:a7:28:dd:c3:88:5c:1b:18:
9e:77:40:25:76:4f:45:04:5c:79:40:a5:22:09:ae:
08:c9:13:f0:61:6c:09:b8:e3:21:bf:66:a7:33:3c:
e9:78:ad:ff:36:51:2a:7e:63:0b:4e:9c:d5:e7:6e:
b9:00:1a:6b:74:5e:fe:00:fc:68:05:3b:0c:c3:c3:
3e:c5:25:9c:10:60:4b:67:eb:c4:db:70:d8:21:2b:
28:f7:0e:00:e0:9f:4d:09:d7:01:35:ca:70:2e:1c:
a1:e6:88:70:e5:31:74:db:8d:02:b0:07:b7:2b:7f:
22:2b:4f:c5:72:1e:e7:3a:10:c5:08:1c:b3:3e:c3:
0c:01:82:59:a1:f8:0c:d5:d8:ae:be:c0:94:22:64:
2b:28:ef:4a:6d:b9:4f:9d:28:45:1f:7a:ae:13:25:
3f:9b:79:9a:44:5a:28:ec:85:58:03:e2:e6:1e:d7:
74:ac:25:7f:d0:c1:96:73:dc:05:a4:28:e8:71:0b:
1a:ee:f8:84:08:39:96:67:53:61:30:3f:6a:23:2c:
2d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:ED:11:20:75:08:43:F2:C0:92:B1:D1:4E:70:1E:BB:53:34:8B:89
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37302e302f32332d3233203d3e203230383630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.70.0/23
Signature Algorithm: sha256WithRSAEncryption
39:a1:79:b4:91:ec:73:ee:56:77:74:b2:d8:f6:f5:d9:8b:af:
0e:2d:1c:d1:d4:03:28:eb:73:73:18:f3:ef:af:c7:be:1b:6b:
0e:34:80:a2:ea:5c:e4:df:4c:c5:01:8f:f0:56:2b:fa:a7:73:
54:b3:1f:c9:04:22:90:0c:6f:61:52:ce:9d:7e:de:16:3e:0e:
ef:6c:ed:5b:4a:73:79:72:e6:30:0f:d0:e2:9c:7e:08:d4:88:
3c:da:64:25:9c:e5:5a:cd:ec:49:ce:c6:40:d5:d7:db:f6:3e:
ff:65:34:31:19:f7:35:8b:2b:da:32:15:6d:a4:d6:3b:76:fc:
c2:bc:cd:c4:c8:cf:d7:47:71:57:b2:00:6b:de:4a:75:b4:c8:
ad:7f:2c:68:40:49:af:72:c4:32:e4:cd:0d:82:d5:e3:01:30:
bc:65:82:b4:e6:d4:32:c5:de:13:c7:0e:2d:f2:d2:36:07:24:
ce:ab:f1:e5:67:8c:b2:58:09:d8:6c:6e:1d:48:fe:ba:e0:1e:
97:1b:0e:62:36:53:1c:68:91:4a:27:ef:33:3c:ca:74:04:8f:
10:c9:99:f6:6c:89:e9:c3:cc:2f:a2:d2:75:27:76:7a:dd:38:
27:2f:3f:7c:80:58:d0:b8:c5:b8:7f:8b:25:37:35:5e:3c:ab:
25:6a:a6:55
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUJJTJZq3B+4vK0wxnyz/KkU7zsNowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MTAxNjIyNDhaFw0yNzA4MDkxNjI3NDhaMDMxMTAvBgNV
BAMTKEQ2RUQxMTIwNzUwODQzRjJDMDkyQjFEMTRFNzAxRUJCNTMzNDhCODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm3k1d6RJyD6V3tctCrAVMkrkh
acmRDM7K+8C2k3/gP5wMwMdW7vYk/W95MFv3L2RkZ8GnKN3DiFwbGJ53QCV2T0UE
XHlApSIJrgjJE/BhbAm44yG/ZqczPOl4rf82USp+YwtOnNXnbrkAGmt0Xv4A/GgF
OwzDwz7FJZwQYEtn68TbcNghKyj3DgDgn00J1wE1ynAuHKHmiHDlMXTbjQKwB7cr
fyIrT8VyHuc6EMUIHLM+wwwBglmh+AzV2K6+wJQiZCso70ptuU+dKEUfeq4TJT+b
eZpEWijshVgD4uYe13SsJX/QwZZz3AWkKOhxCxru+IQIOZZnU2EwP2ojLC3dAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU1u0RIHUIQ/LAkrHRTnAeu1M0i4kwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzMzMTJlMzEzODM3MmUzNzMw
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzMDM4MzYzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAR+7
RjANBgkqhkiG9w0BAQsFAAOCAQEAOaF5tJHsc+5Wd3Sy2Pb12YuvDi0c0dQDKOtz
cxjz76/HvhtrDjSAoupc5N9MxQGP8FYr+qdzVLMfyQQikAxvYVLOnX7eFj4O72zt
W0pzeXLmMA/Q4px+CNSIPNpkJZzlWs3sSc7GQNXX2/Y+/2U0MRn3NYsr2jIVbaTW
O3b8wrzNxMjP10dxV7IAa95KdbTIrX8saEBJr3LEMuTNDYLV4wEwvGWCtObUMsXe
E8cOLfLSNgckzqvx5WeMslgJ2GxuHUj+uuAelxsOYjZTHGiRSifvMzzKdASPEMmZ
9myJ6cPML6LSdSd2et04Jy8/fIBY0LjFuH+LJTc1XjyrJWqmVQ==
-----END CERTIFICATE-----
Generated at Fri Sep 4 16:21:38 2026 by rpki-client