Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32342e302f32342d3234203d3e203534323532.roa
File: 33312e362e32342e302f32342d3234203d3e203534323532.roa (raw, json)
Hash identifier: vmV1mzm5coiziaz0VZNKgWe1ksoOAqtyNse1Jl3Xin8=
Subject key identifier: BA:D9:D9:4B:3D:26:EC:BF:19:AA:DC:CD:E8:DD:62:86:CE:E1:C4:EB
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 10FCFF1A6FFF108EDA012BE73BC55C31354ABBBC
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32342e302f32342d3234203d3e203534323532.roa
Signing time: Tue 30 Sep 2025 18:55:08 +0000
ROA not before: Tue 30 Sep 2025 18:50:08 +0000
ROA not after: Tue 29 Sep 2026 18:55:08 +0000
asID: 54252
IP address blocks: 31.6.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:fc:ff:1a:6f:ff:10:8e:da:01:2b:e7:3b:c5:5c:31:35:4a:bb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 30 18:50:08 2025 GMT
Not After : Sep 29 18:55:08 2026 GMT
Subject: CN=BAD9D94B3D26ECBF19AADCCDE8DD6286CEE1C4EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:45:05:c5:cc:99:67:60:9c:9d:ff:81:d0:9a:
0c:cb:38:05:20:9b:a1:c2:82:d3:fe:28:4a:46:02:
da:99:86:a9:db:e6:9a:55:50:b3:f7:75:d0:60:2f:
2f:6d:5b:b5:a9:e5:8e:e4:c7:1a:c0:40:81:e4:a5:
0d:d3:d5:c1:cb:80:4e:6c:86:9d:85:f0:61:1b:fc:
73:ad:6c:1b:71:e3:08:8b:79:d5:98:d4:13:c9:bb:
de:f6:ca:b7:80:03:76:f2:75:08:76:65:4d:c6:64:
a1:4c:88:c0:30:88:e7:1b:85:af:c7:79:db:ae:f0:
bc:ce:fe:eb:56:b5:f1:44:1b:88:56:17:63:35:08:
eb:1a:8f:ed:3e:43:d4:33:35:f7:dd:06:53:1a:b9:
eb:87:4b:e2:80:29:60:af:66:52:de:ce:2a:bb:2f:
de:64:77:d1:66:32:64:e0:5c:30:18:a0:88:0a:cb:
af:ed:5c:98:5e:26:a9:e9:bc:c3:26:6b:59:63:6f:
8a:e4:30:2e:f3:fd:06:3c:26:1b:e0:ac:e4:2b:18:
ad:18:bb:70:78:75:ba:c3:5e:5b:e8:ed:ed:06:4a:
ac:b5:30:fe:05:65:71:21:79:b3:fe:6d:41:a4:00:
61:1a:76:bb:ec:0c:f6:14:48:52:9e:e9:46:f6:d6:
6f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D9:D9:4B:3D:26:EC:BF:19:AA:DC:CD:E8:DD:62:86:CE:E1:C4:EB
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32342e302f32342d3234203d3e203534323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.24.0/24
Signature Algorithm: sha256WithRSAEncryption
84:f6:ef:40:f5:24:a1:35:c2:01:4b:14:34:24:a7:66:92:f1:
45:4b:63:dc:87:4c:71:30:a8:dc:60:11:97:ee:7c:28:61:14:
52:d1:e1:7e:d0:27:f7:76:61:fb:e5:da:b6:c9:8c:19:e7:c4:
98:2f:39:23:80:e3:92:7a:38:33:ff:6f:72:9c:99:8d:fb:b9:
20:94:7b:68:f8:e8:23:73:fd:a7:c0:c0:42:b9:e3:5e:c4:e6:
e7:f3:b8:8d:38:1b:f4:6d:ae:40:55:87:f8:6b:6c:f3:23:03:
15:db:cc:27:c2:2f:dd:50:57:92:37:70:a8:6d:0b:6d:67:ff:
e5:e9:9e:8e:e0:6b:04:ea:d1:ea:02:a2:21:1b:2c:7c:d1:47:
34:75:73:c5:0f:e4:88:ea:c4:19:cd:4e:ca:17:48:6d:d5:44:
f5:c2:29:7a:5c:63:3d:5b:11:1e:59:02:6e:b6:62:a1:8a:46:
e5:42:79:0f:03:10:c9:e1:39:bf:d7:bd:40:c6:4f:29:70:f5:
99:1c:a3:aa:11:f9:65:af:2e:9c:d9:1b:ed:cb:56:47:b9:75:
32:cf:2b:a6:64:d0:e7:b7:0d:a3:4d:d5:d6:a6:51:7d:11:d9:
fd:2b:13:1a:53:4f:c2:f3:f6:85:8b:02:f1:f7:18:5b:4c:12:
9d:a3:16:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:22 2025 by rpki-client