Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e312e302f32342d3234203d3e203339333833.roa
File: 33312e362e312e302f32342d3234203d3e203339333833.roa (raw, json)
Hash identifier: MgbaeSjxjlb9dCH405c10qCVU6v8LIGyGgRsC63IEek=
Subject key identifier: 29:E8:9A:BA:BB:9B:3A:D3:72:68:B6:93:3D:D3:8D:4D:01:A1:7C:1B
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 2F6D07D4485EE313F8F53433134A69FEC331AED4
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e312e302f32342d3234203d3e203339333833.roa
Signing time: Thu 16 Oct 2025 06:55:08 +0000
ROA not before: Thu 16 Oct 2025 06:50:08 +0000
ROA not after: Thu 15 Oct 2026 06:55:08 +0000
asID: 39383
IP address blocks: 31.6.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:6d:07:d4:48:5e:e3:13:f8:f5:34:33:13:4a:69:fe:c3:31:ae:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 16 06:50:08 2025 GMT
Not After : Oct 15 06:55:08 2026 GMT
Subject: CN=29E89ABABB9B3AD37268B6933DD38D4D01A17C1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:c8:e5:82:fa:53:64:cf:8f:ca:c8:2d:09:
4a:62:e9:f1:f3:85:e7:70:de:e5:68:ce:59:54:5a:
3d:e8:1f:9b:39:06:bd:5f:bb:80:75:6d:5a:63:a1:
63:e3:34:ea:e3:07:57:b9:2d:9c:d6:e6:ed:28:0f:
8c:4c:50:29:2f:9e:1c:77:d2:20:47:c8:d8:57:c0:
57:6b:ff:a0:a7:50:96:b2:5a:e7:8c:2f:b4:8a:2c:
cc:67:d7:cb:ff:13:4e:14:76:10:4d:13:51:b0:34:
1b:0a:d5:6e:73:af:16:e9:cf:62:50:ed:21:0f:85:
43:2b:b1:bf:20:33:7b:8f:f8:a7:c3:85:60:5b:5d:
71:cb:e9:10:61:64:03:dc:cb:4f:ee:6f:22:cb:68:
5e:c3:76:d6:4b:0c:16:1e:18:86:85:9a:40:5a:96:
ca:cc:04:d4:c5:97:93:1f:15:f3:7f:9e:e3:8c:6d:
32:bd:7e:ae:de:64:59:df:97:74:df:22:55:66:ec:
d9:93:89:02:94:af:42:1d:5a:0e:1d:b7:6f:3f:c8:
3f:cf:59:41:a2:e8:d9:4f:09:cf:25:ea:57:84:02:
46:db:0f:d9:09:54:a8:b1:a4:39:10:dd:d5:3b:d3:
fa:8f:17:44:fb:83:70:51:c7:1f:d6:ce:4b:03:15:
9e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E8:9A:BA:BB:9B:3A:D3:72:68:B6:93:3D:D3:8D:4D:01:A1:7C:1B
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e312e302f32342d3234203d3e203339333833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.1.0/24
Signature Algorithm: sha256WithRSAEncryption
69:eb:c4:ef:9a:df:be:b3:45:40:91:37:60:f8:85:62:fd:6e:
4a:18:e9:d5:39:e9:ba:87:42:7b:52:19:76:3b:e3:a5:ef:8a:
7c:d1:cd:2a:67:2b:e6:ca:67:b0:cf:07:a7:8f:f2:39:d9:a8:
8b:df:ff:c6:57:a6:b0:dc:ed:0c:4d:df:39:2e:33:12:92:46:
20:9a:bb:21:12:0f:07:af:84:74:70:4d:f3:f7:b3:60:87:e4:
3a:c1:e7:e9:fe:99:9a:0b:76:bd:ee:ff:b1:66:93:71:3f:2a:
6d:9a:7b:77:7e:19:b9:89:13:5e:29:99:08:11:84:c0:33:92:
73:fc:d4:9b:1d:f5:8e:4c:83:67:b1:29:13:14:d7:bb:60:1b:
51:64:e0:e5:32:d9:8f:b2:cc:73:59:24:3a:bc:62:91:08:6a:
34:9b:3a:a6:e4:1f:ef:62:32:f0:c4:db:10:bf:3f:b8:4b:f2:
52:fb:34:05:ab:2e:03:d6:b5:4a:6d:8d:b5:77:49:d2:46:09:
69:70:bb:f1:d4:f7:dd:11:31:f2:50:be:0f:90:50:a4:45:5d:
10:19:73:aa:8a:ac:63:f0:a7:71:6b:1a:14:69:f2:fc:aa:3e:
c9:88:cd:60:7e:74:45:fd:2e:4e:3b:e4:7c:f2:a3:73:f7:34:
90:5d:8c:79
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUL20H1Ehe4xP49TQzE0pp/sMxrtQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNTEwMTYwNjUwMDhaFw0yNjEwMTUwNjU1MDhaMDMxMTAvBgNV
BAMTKDI5RTg5QUJBQkI5QjNBRDM3MjY4QjY5MzNERDM4RDREMDFBMTdDMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/DcjlgvpTZM+PysgtCUpi6fHz
hedw3uVozllUWj3oH5s5Br1fu4B1bVpjoWPjNOrjB1e5LZzW5u0oD4xMUCkvnhx3
0iBHyNhXwFdr/6CnUJayWueML7SKLMxn18v/E04UdhBNE1GwNBsK1W5zrxbpz2JQ
7SEPhUMrsb8gM3uP+KfDhWBbXXHL6RBhZAPcy0/ubyLLaF7DdtZLDBYeGIaFmkBa
lsrMBNTFl5MfFfN/nuOMbTK9fq7eZFnfl3TfIlVm7NmTiQKUr0IdWg4dt28/yD/P
WUGi6NlPCc8l6leEAkbbD9kJVKixpDkQ3dU70/qPF0T7g3BRxx/WzksDFZ4vAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUKeiaurubOtNyaLaTPdONTQGhfBswHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTMxMmUzMDJm
MzIzNDJkMzIzNDIwM2QzZTIwMzMzOTMzMzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB8GATANBgkq
hkiG9w0BAQsFAAOCAQEAaevE75rfvrNFQJE3YPiFYv1uShjp1TnpuodCe1IZdjvj
pe+KfNHNKmcr5spnsM8Hp4/yOdmoi9//xlemsNztDE3fOS4zEpJGIJq7IRIPB6+E
dHBN8/ezYIfkOsHn6f6Zmgt2ve7/sWaTcT8qbZp7d34ZuYkTXimZCBGEwDOSc/zU
mx31jkyDZ7EpExTXu2AbUWTg5TLZj7LMc1kkOrxikQhqNJs6puQf72Iy8MTbEL8/
uEvyUvs0BasuA9a1Sm2NtXdJ0kYJaXC78dT33REx8lC+D5BQpEVdEBlzqoqsY/Cn
cWsaFGny/Ko+yYjNYH50Rf0uTjvkfPKjc/c0kF2MeQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:18 2025 by rpki-client