Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32352e302f32342d3234203d3e20313431333233.roa
File: 33312e362e32352e302f32342d3234203d3e20313431333233.roa (raw, json)
Hash identifier: yPOnRmS+RZU8dUbXEVNpExCXtte0EotC6pn9cQOi1KI=
Subject key identifier: 8B:05:E1:E6:86:9D:62:E5:FD:BF:45:8F:9E:A2:49:F5:70:E2:0B:CC
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 2D80F262A92874F8D4CFE75EDBD8CF032DFB2027
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32352e302f32342d3234203d3e20313431333233.roa
Signing time: Wed 23 Sep 2026 07:39:01 +0000
ROA not before: Wed 23 Sep 2026 07:34:01 +0000
ROA not after: Wed 22 Sep 2027 07:39:01 +0000
asID: 141323
IP address blocks: 31.6.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:80:f2:62:a9:28:74:f8:d4:cf:e7:5e:db:d8:cf:03:2d:fb:20:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 23 07:34:01 2026 GMT
Not After : Sep 22 07:39:01 2027 GMT
Subject: CN=8B05E1E6869D62E5FDBF458F9EA249F570E20BCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:5d:e5:0b:5c:6e:15:ec:f3:5e:8f:be:06:
a9:80:c5:0b:72:f2:d2:c8:a1:bd:e6:60:e9:f1:11:
00:bf:ce:37:9b:a0:d5:ab:ba:a9:cc:0a:6c:29:1e:
79:dc:bf:f3:d6:e2:b5:55:2e:7e:a1:8c:c0:f9:62:
78:67:84:c7:c4:80:ed:96:07:6e:6c:7b:6a:59:52:
fd:be:8f:67:6c:2a:f5:bd:43:7b:14:47:26:ab:2b:
f0:ad:8d:93:1d:e3:c6:fe:73:ee:5e:d7:50:a0:72:
b0:25:aa:33:0a:99:af:23:f1:86:74:78:f2:51:3c:
b9:70:04:9e:ee:1c:d4:1d:78:b0:d2:fb:0d:05:0f:
3c:63:bb:24:57:53:f9:be:ef:04:32:dc:14:56:33:
18:38:39:d4:9d:4b:f3:08:3b:e3:61:09:b5:7e:d8:
2f:3d:ec:f4:45:8a:0b:04:5e:50:00:d3:fb:e6:2f:
bd:57:9a:38:5c:b9:16:29:15:22:0a:7a:d7:d1:af:
fc:6a:1c:28:92:03:b6:b8:9e:2c:ca:84:f7:c0:02:
43:3d:89:56:6b:d0:39:a8:11:e5:85:65:62:0f:24:
7e:25:51:e4:91:b7:33:5b:b4:09:8e:94:39:dd:d7:
33:7b:ae:bf:89:1c:0e:ff:25:fc:dc:e2:9c:9f:b9:
3a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:05:E1:E6:86:9D:62:E5:FD:BF:45:8F:9E:A2:49:F5:70:E2:0B:CC
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32352e302f32342d3234203d3e20313431333233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.25.0/24
Signature Algorithm: sha256WithRSAEncryption
95:4f:34:76:5f:01:06:36:96:19:86:d6:43:4d:d1:1f:d6:af:
cd:07:7b:1f:23:df:65:f3:33:cf:d6:d3:89:1b:ea:21:73:28:
84:b0:7c:a7:42:c6:de:7c:1f:e9:ee:fa:13:88:e1:78:b6:0f:
79:66:3f:6a:0d:33:c5:1e:8d:fb:f3:0c:ab:a5:13:99:c7:5c:
12:11:bd:e6:c9:0c:e2:4c:31:4f:ba:f6:89:d1:a3:69:c9:fc:
f4:1e:96:3d:9c:e9:eb:96:d1:94:b4:00:c1:40:2f:0c:59:2d:
6a:f2:11:f1:e4:87:d3:09:d7:64:80:ca:6c:09:75:7b:64:83:
27:b7:42:83:cd:95:92:85:a3:ce:f1:a0:8e:5a:79:70:63:fb:
4b:a2:bd:18:61:f4:9a:b5:e3:bf:5d:1a:b5:79:5a:c5:36:6b:
3f:25:1f:0d:e6:47:f7:8d:88:f9:d3:21:a0:d2:2e:4e:94:c1:
92:76:51:32:dc:83:a5:6b:30:ec:01:09:4a:b2:ee:94:90:5f:
95:df:b0:06:50:66:cc:ca:6a:7f:44:80:84:91:6f:91:96:22:
94:05:4b:c8:d4:32:a3:fe:a3:a9:8c:a9:b4:4a:17:58:64:a7:
1e:11:ab:6d:65:0c:95:0a:e9:e8:42:12:63:08:68:e7:49:f8:
8d:b8:33:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:05:37 2026 by rpki-client