Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e392e302f32342d3234203d3e20313336373837.roa
File: 33312e3232302e392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: j4UwO99yJl3kB0Ljhpdw6YRJzClLQwTPWsko1SVeYOE=
Subject key identifier: 5F:C8:E8:39:FC:19:5D:D7:42:2F:68:C3:FB:D5:DD:58:9B:D1:B7:22
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6BB7EF9CD574AEC962E41293D1741102018F22EB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e392e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 30 Aug 2026 21:28:23 +0000
ROA not before: Sun 30 Aug 2026 21:23:23 +0000
ROA not after: Sun 29 Aug 2027 21:28:23 +0000
asID: 136787
IP address blocks: 31.220.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:b7:ef:9c:d5:74:ae:c9:62:e4:12:93:d1:74:11:02:01:8f:22:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 30 21:23:23 2026 GMT
Not After : Aug 29 21:28:23 2027 GMT
Subject: CN=5FC8E839FC195DD7422F68C3FBD5DD589BD1B722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f5:a1:aa:16:f5:2d:0f:38:81:72:b5:31:6a:
e2:42:57:fe:8d:d3:5d:29:d1:01:ec:64:14:4a:89:
70:40:2d:b7:49:96:0e:22:21:05:84:bc:42:f6:4a:
ee:8c:04:1e:2e:1b:06:95:c7:fc:e4:e8:17:b9:47:
06:31:0c:a9:55:67:f7:6a:76:ac:00:9d:b9:a2:21:
7c:34:88:0d:42:7f:0a:a9:9c:f6:4c:f1:c0:c0:89:
9a:14:9d:2f:a3:f4:72:cb:c3:b2:de:82:30:3f:05:
28:f4:ae:df:66:45:91:82:6d:76:fc:5e:db:f3:e6:
46:09:f0:e3:a3:7e:d4:f5:66:62:09:0f:d7:bf:38:
d4:f3:cd:d3:a0:4d:ae:13:1f:3c:6b:61:12:57:2f:
6b:e2:36:d0:c6:c9:76:65:14:1b:84:6b:d9:5f:88:
79:5f:19:66:59:f2:32:fe:3a:d1:7c:2a:92:f1:a2:
88:1d:0c:7c:18:5b:5a:6f:da:7a:ec:96:a3:2a:c1:
1c:87:d0:72:25:bd:fc:7d:53:1b:e8:ae:1a:85:8a:
13:61:d4:95:00:7c:09:f1:1c:19:67:23:95:12:6c:
c1:fa:f7:6e:be:0c:c2:b0:fe:d1:a7:ab:f8:f8:40:
7a:14:28:79:51:7a:a3:75:ec:09:35:31:cb:5d:f9:
e6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C8:E8:39:FC:19:5D:D7:42:2F:68:C3:FB:D5:DD:58:9B:D1:B7:22
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.9.0/24
Signature Algorithm: sha256WithRSAEncryption
97:0c:41:67:08:19:66:e4:1e:e5:b1:5d:ca:9a:3a:15:16:76:
2c:4a:92:ae:25:4a:b0:ee:cd:b9:c6:94:1a:63:c0:fa:ef:59:
56:06:b0:6c:a7:21:02:c3:c1:fe:1f:4f:c9:68:b8:14:bc:e7:
df:04:f3:76:97:f3:bc:14:2c:f5:48:f0:4d:f1:1d:bf:28:45:
23:01:6d:99:56:3f:4e:41:f2:f3:cb:2d:57:95:c0:39:80:88:
28:a5:0d:e9:79:ed:b5:a4:8f:4f:4c:04:e0:98:b8:e3:b9:68:
16:f4:f0:27:7f:83:75:bf:8f:31:a6:50:58:49:2a:1a:8a:a8:
56:14:5a:d4:80:b4:69:c1:b5:fb:75:8f:d4:49:ce:74:86:80:
5e:33:a8:95:d5:52:ce:c7:37:fd:4d:48:c2:7d:51:68:13:9d:
f5:01:36:cb:ce:98:3e:c2:03:18:07:e4:a6:6c:9d:d8:3f:e2:
49:fb:a0:b2:6c:bc:4f:19:c5:c2:e8:cd:58:32:05:08:31:03:
52:df:c1:1b:31:87:d9:97:e5:ea:3c:f8:b1:db:5d:3c:79:2e:
ef:ff:91:1b:29:81:8f:22:11:5f:53:d4:54:c0:9f:48:24:24:
1f:ae:d6:73:1c:e3:29:ac:c6:1b:30:f9:70:57:dc:8c:46:b3:
68:65:c1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:52:36 2026 by rpki-client