Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32302e302f32342d3234203d3e20313439393438.roa
File: 33312e362e32302e302f32342d3234203d3e20313439393438.roa (raw, json)
Hash identifier: zA970E45vhogR3jKsEnmsCOTvzrtfzJJ9xw+nrveKcQ=
Subject key identifier: 77:44:31:1B:9A:76:87:4D:18:99:AC:50:13:0F:10:66:8A:AB:C1:F6
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 25D54184C72882CE68BD12069847714F46309585
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32302e302f32342d3234203d3e20313439393438.roa
Signing time: Sun 13 Sep 2026 18:49:35 +0000
ROA not before: Sun 13 Sep 2026 18:44:35 +0000
ROA not after: Sun 12 Sep 2027 18:49:35 +0000
asID: 149948
IP address blocks: 31.6.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:d5:41:84:c7:28:82:ce:68:bd:12:06:98:47:71:4f:46:30:95:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 13 18:44:35 2026 GMT
Not After : Sep 12 18:49:35 2027 GMT
Subject: CN=7744311B9A76874D1899AC50130F10668AABC1F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ef:6d:3a:bc:a6:c7:cc:82:de:31:b6:ba:11:
30:11:41:80:5b:28:b5:2d:a9:a6:c2:59:3d:3a:ab:
91:bc:17:9b:37:c2:0e:65:85:41:cc:a5:ac:5b:0f:
62:5c:79:c1:0b:ef:0c:3e:26:cb:cc:34:8e:61:fe:
e2:94:80:9b:1d:07:1b:f8:4a:93:64:53:db:da:f5:
18:56:7f:2d:22:53:b0:fd:9a:a6:b5:83:70:40:31:
e8:32:98:02:c7:03:0d:a2:f5:d9:cb:61:05:32:ef:
7e:96:f2:c8:61:05:c4:ab:ff:0b:24:74:54:6a:dd:
5f:3b:7f:2e:71:ca:a8:0c:29:d4:85:7a:8f:82:47:
d5:52:4f:ae:08:0e:11:80:cc:50:0c:62:5c:07:6f:
80:5e:c8:c5:7d:26:72:6b:46:b8:65:52:25:c7:ea:
24:b2:65:29:50:65:99:2f:f6:6e:91:ff:ba:9f:f0:
ca:b8:cb:6f:7b:0c:36:81:aa:b7:a2:45:77:0b:74:
f8:10:7b:78:97:a0:ca:48:d5:17:fe:ad:8f:43:d2:
02:58:05:27:51:b3:32:5c:62:3b:fd:a0:4b:fd:76:
8b:bd:31:27:e1:0c:0f:5a:c6:e6:6e:eb:69:5e:56:
5b:90:de:a5:f7:2d:9c:c0:79:7c:ce:c1:5d:d8:aa:
ab:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:44:31:1B:9A:76:87:4D:18:99:AC:50:13:0F:10:66:8A:AB:C1:F6
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32302e302f32342d3234203d3e20313439393438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.20.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:5b:f2:fe:d6:4d:ef:6b:69:c6:11:6b:a6:bc:77:5a:b3:c1:
bf:f1:c2:08:a0:89:25:61:9c:a1:5c:4a:60:27:f5:21:0a:e8:
e6:4c:ae:94:05:e6:45:57:3b:f8:f5:df:14:87:11:2c:ce:92:
f8:35:fd:54:cb:01:b9:1e:01:a3:56:99:c5:9b:30:e4:93:d0:
b9:f6:cd:e5:5b:0a:5c:49:38:85:4a:ec:49:df:f1:ed:32:31:
40:5c:fc:18:25:70:04:3d:c6:fa:0a:26:d9:ee:3e:01:78:c5:
af:f7:29:4e:7a:f2:13:b7:4d:34:06:d2:30:31:d1:16:34:75:
0c:32:ab:b7:65:39:ee:52:2e:9b:d7:c9:55:15:14:8d:6f:6e:
26:04:db:c6:b8:a0:1b:7c:e4:ae:d2:a5:b0:17:4b:07:62:02:
d6:7f:c4:ca:c8:c0:b1:d7:1a:96:a6:86:80:29:d7:aa:d4:fe:
d4:7b:b6:a7:f8:12:65:4e:6f:f0:9d:ea:08:84:00:9d:1f:70:
ac:f1:18:a2:ff:b0:71:56:52:09:6c:53:a4:80:24:04:bd:c1:
4c:7a:29:d7:c2:34:43:b3:c6:15:4e:0e:a1:4e:f7:41:e7:26:
73:60:47:8d:9b:86:04:e7:64:c4:86:6a:fe:bc:1e:85:97:17:
23:e1:66:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:55:59 2026 by rpki-client