Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32362e302f32342d3234203d3e203230343733.roa
File: 33312e362e32362e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: OqIcgkpVHnYtC83lY3Mdy6vPs1bL99ugKe00er/5O2E=
Subject key identifier: 98:DF:50:D2:0C:C2:13:11:25:BB:65:CD:78:96:79:EE:30:0E:27:56
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 32920CDC07A4DE18AB8B7F7545A422123395E785
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32362e302f32342d3234203d3e203230343733.roa
Signing time: Thu 16 Oct 2025 16:55:08 +0000
ROA not before: Thu 16 Oct 2025 16:50:08 +0000
ROA not after: Thu 15 Oct 2026 16:55:08 +0000
asID: 20473
IP address blocks: 31.6.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:92:0c:dc:07:a4:de:18:ab:8b:7f:75:45:a4:22:12:33:95:e7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 16 16:50:08 2025 GMT
Not After : Oct 15 16:55:08 2026 GMT
Subject: CN=98DF50D20CC2131125BB65CD789679EE300E2756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:19:44:5b:9e:b2:37:33:cc:e5:83:68:33:d8:
f8:ef:b8:25:ec:3d:9f:ff:f3:45:6e:36:93:bd:5b:
66:3c:27:28:8c:b9:07:84:8b:7e:b1:61:60:5d:d0:
1a:17:7a:d4:d9:08:16:65:f1:18:3d:5b:69:2d:ed:
9f:c3:b2:bf:69:3a:e8:54:3d:7a:00:74:43:99:72:
98:98:fd:c7:bf:b3:4b:23:8e:b7:04:b3:be:2c:a2:
6b:d1:87:62:b5:bc:be:9b:15:a5:7a:9c:0b:09:99:
0d:e2:16:60:b4:36:e7:2e:9c:b9:cd:e4:80:2d:77:
37:19:6b:75:5f:30:30:9f:27:a2:d6:2d:b5:33:a3:
17:82:5a:66:86:8c:ff:2e:e8:c8:38:42:83:18:43:
1c:ed:f3:c2:72:ad:d0:0b:55:6f:5b:ae:a3:48:4d:
dc:02:64:b4:9c:de:9b:ff:0f:a6:cc:8a:f3:86:c0:
e5:15:a9:8b:91:73:ae:ba:d1:1b:46:3a:f5:b0:ab:
91:e3:91:3f:37:dd:1d:f4:fb:5e:b5:8a:40:11:06:
2d:10:3d:b8:55:40:54:65:c9:0c:96:62:c9:a9:34:
36:63:3d:ae:80:59:9d:6f:c3:88:56:90:64:05:b9:
89:02:ff:97:b1:5a:29:9c:4b:0f:38:d1:1f:84:17:
bf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DF:50:D2:0C:C2:13:11:25:BB:65:CD:78:96:79:EE:30:0E:27:56
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32362e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.26.0/24
Signature Algorithm: sha256WithRSAEncryption
01:75:53:c4:dc:03:a1:e1:ca:c1:d6:7e:30:3d:5f:2a:49:52:
a2:0c:5e:d8:a0:55:6b:a1:d0:d0:83:3e:27:67:61:b3:eb:cd:
16:c3:32:23:04:3c:83:85:3f:28:36:bc:e1:e9:63:52:58:7f:
0c:99:c4:86:93:81:65:e0:08:f7:ab:1d:b9:e4:fb:73:ab:e1:
c8:65:a9:6e:d6:d8:be:bf:3b:22:91:6e:86:01:68:45:cc:e5:
18:7e:79:34:82:b2:48:b3:65:ce:9a:6a:1e:37:bd:93:0f:91:
8d:52:b7:02:88:36:ab:47:96:10:24:e5:76:25:c4:85:2e:b1:
4a:a8:06:47:f5:c7:cc:8c:4b:98:77:a9:24:e6:9b:2b:c9:26:
da:9c:68:3b:49:94:9b:76:88:07:92:f1:6e:3b:08:c3:f0:79:
0d:4c:6a:53:79:09:5b:df:8d:f8:e8:31:32:37:4e:2e:5d:74:
e4:e8:c8:d3:82:a6:75:6e:42:76:7c:f6:37:43:99:32:5c:a8:
d0:95:54:2d:2b:4f:47:44:d5:50:20:5c:58:05:57:bf:f9:40:
2e:2b:3b:55:fb:c8:54:8a:a2:74:be:de:dc:f7:99:a9:5a:30:
b5:e8:34:a7:9b:13:41:22:d4:28:4c:3d:46:f1:7b:e3:80:c8:
66:06:ef:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:21 2025 by rpki-client