Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34332e302f32342d3234203d3e203231383539.roa
File: 33312e362e34332e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: Fn2f07kEL0Qxx4EZjrI0BQ/mBadhBRXXxjO9eU8pkaA=
Subject key identifier: 7A:08:91:DD:60:02:22:8A:37:32:92:15:D3:E2:53:A8:AB:D2:A9:3B
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 0C3F6538C2114ED6441C5DAB8823ED460ADADF9C
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34332e302f32342d3234203d3e203231383539.roa
Signing time: Mon 13 Oct 2025 02:43:57 +0000
ROA not before: Mon 13 Oct 2025 02:38:57 +0000
ROA not after: Mon 12 Oct 2026 02:43:57 +0000
asID: 21859
IP address blocks: 31.6.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:15:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:3f:65:38:c2:11:4e:d6:44:1c:5d:ab:88:23:ed:46:0a:da:df:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 13 02:38:57 2025 GMT
Not After : Oct 12 02:43:57 2026 GMT
Subject: CN=7A0891DD6002228A37329215D3E253A8ABD2A93B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:fa:2a:e1:f3:25:4e:e9:a4:15:73:bc:76:c4:
b4:b7:a9:5e:78:2c:02:b6:ce:81:98:9b:16:18:37:
8c:08:19:2e:02:55:ab:cc:ed:10:29:62:cd:50:5c:
d7:dc:22:2e:13:3d:10:02:04:f8:b6:af:2d:71:6b:
5c:ea:ac:01:7e:4c:f1:3f:bd:f6:33:b5:66:09:ad:
d6:a0:3b:48:76:f4:82:57:21:69:ac:33:31:63:5b:
8f:dd:41:52:bb:6d:b2:63:23:6c:92:5b:ba:39:07:
83:25:c0:f2:03:92:98:83:b1:87:07:07:79:f4:51:
2d:20:a2:e1:7e:15:67:8f:9e:d9:f4:03:1f:91:51:
b8:b5:0f:5c:81:ac:f0:7a:dc:a8:66:e0:13:eb:73:
0c:4b:97:99:33:37:ef:a1:62:ee:bc:31:4e:44:fb:
22:99:00:05:55:eb:ef:6a:ca:62:d3:38:05:cf:94:
f2:7c:dc:48:ad:4e:cf:56:35:5e:2e:e1:ac:b6:06:
1c:35:82:8e:59:2d:f0:ce:ad:54:1e:89:48:55:43:
79:ec:5b:f6:71:42:4a:43:b4:c0:0e:4c:c3:ba:8e:
14:80:7f:0d:96:ec:13:dd:a8:e5:c8:b5:c1:0c:9f:
fc:17:4a:18:4d:60:fb:3e:cf:bc:37:99:75:ff:26:
c9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:08:91:DD:60:02:22:8A:37:32:92:15:D3:E2:53:A8:AB:D2:A9:3B
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34332e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.43.0/24
Signature Algorithm: sha256WithRSAEncryption
85:c9:3f:3f:af:d0:fe:16:9a:e5:07:a2:d7:43:ed:ac:88:62:
61:8d:6c:92:37:de:f0:16:f9:0d:99:7d:36:32:5c:39:0d:1c:
fb:ff:0f:21:fe:07:a2:41:94:d7:c8:78:7c:4e:81:f6:dc:1f:
c7:00:33:53:bf:ba:4b:e3:e3:d4:e0:1e:f2:df:3c:c7:99:e2:
79:7a:48:9c:58:7c:14:03:65:ab:41:db:5b:8b:aa:ab:75:1e:
3f:54:a0:55:60:d0:cb:d4:73:4f:7c:19:8a:41:a6:e0:13:d2:
5f:42:44:e6:59:df:9d:c0:cb:e3:d0:41:55:07:20:5f:58:18:
2b:8f:82:fe:ad:b0:7f:b6:d6:28:1e:43:e0:8c:81:90:ea:a2:
9a:32:a9:ed:d9:12:5b:ff:ee:59:fe:86:dc:d2:cb:65:3d:80:
7a:6c:7a:19:45:89:00:a6:c5:d9:38:1f:3c:e3:81:19:32:a4:
77:2c:c7:13:91:3d:c3:f7:5f:3d:37:97:04:c4:31:dd:cd:8c:
75:9b:73:3b:01:2c:13:91:79:7a:e3:ef:bb:06:0b:af:09:8a:
f4:8c:19:b8:a9:19:e3:ad:07:f9:94:00:9c:fd:6a:52:cb:ad:
28:3a:3a:a1:98:61:b2:f6:1d:20:5a:84:a0:00:ad:82:df:d6:
11:0f:b9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:38 2025 by rpki-client