Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34372e302f32342d3234203d3e203633313939.roa
File: 33312e362e34372e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier: z1/pLnP7c2HISuQqKDOs7OAzfiG5ZknGBnfsc3pOWTo=
Subject key identifier: B7:86:71:26:E1:FB:BF:32:92:F8:83:A6:F7:66:73:47:AD:EE:28:59
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 273921A5A8CD8E504053642DB1F00B12A01D646D
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34372e302f32342d3234203d3e203633313939.roa
Signing time: Wed 18 Mar 2026 09:23:34 +0000
ROA not before: Wed 18 Mar 2026 09:18:34 +0000
ROA not after: Wed 17 Mar 2027 09:23:34 +0000
asID: 63199
IP address blocks: 31.6.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:39:21:a5:a8:cd:8e:50:40:53:64:2d:b1:f0:0b:12:a0:1d:64:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Mar 18 09:18:34 2026 GMT
Not After : Mar 17 09:23:34 2027 GMT
Subject: CN=B7867126E1FBBF3292F883A6F7667347ADEE2859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cd:69:6a:ed:fa:2d:d6:9b:e0:bd:3a:61:ea:
b4:ff:71:97:ab:53:cb:b1:16:a1:33:a1:b3:cf:41:
7d:cc:97:20:62:b4:7a:7d:0b:03:70:26:db:8f:af:
bc:90:e3:44:27:e1:e3:e8:0e:ed:ce:74:f7:8b:ae:
81:68:b0:51:d2:d7:1f:22:a2:a0:39:0f:33:2c:5f:
7b:c0:cd:03:60:62:1c:72:fb:28:40:b2:ad:37:a1:
15:99:91:f9:0b:82:95:28:b6:68:bb:70:96:70:cb:
0c:3b:e0:e2:5b:66:55:41:f9:68:63:be:e5:a2:3c:
bb:07:39:25:0c:20:6c:df:c7:c9:ce:a9:83:b4:c9:
b0:4e:b9:73:e4:1d:f9:a2:a8:ae:d0:7e:6b:ba:0d:
72:3a:0f:63:d4:1d:e8:0f:8d:40:44:73:eb:65:83:
1f:19:92:07:ad:fa:97:73:46:d1:90:d9:ab:26:06:
20:b1:f9:19:84:71:22:64:80:83:eb:03:5f:69:32:
33:7d:02:55:1f:ed:61:2f:09:00:73:5c:e4:42:ee:
22:ca:2b:02:25:99:9c:9c:27:70:58:4e:94:8d:f1:
ea:95:1a:38:69:5b:32:71:19:95:e7:8a:ba:17:a5:
f1:e5:08:7d:2c:81:84:e9:49:1c:b9:ad:65:da:ec:
ba:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:86:71:26:E1:FB:BF:32:92:F8:83:A6:F7:66:73:47:AD:EE:28:59
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34372e302f32342d3234203d3e203633313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.47.0/24
Signature Algorithm: sha256WithRSAEncryption
45:2d:90:a5:4a:62:13:a4:b8:16:67:54:04:71:e4:7a:20:48:
85:0c:93:b1:00:80:15:5f:75:39:46:bf:e7:5b:af:f9:5b:a9:
0c:eb:be:ca:a2:4c:5c:17:18:88:4f:4e:bc:42:3c:ca:15:c4:
13:44:e6:eb:9c:a9:68:de:ce:0f:38:fa:fd:45:81:aa:4f:73:
d4:4f:ea:68:8c:28:2a:6a:de:53:b2:16:9d:e5:39:b1:39:aa:
5d:d9:4f:18:eb:59:dc:db:f0:dc:3b:95:f4:84:00:0c:cc:94:
a2:55:44:ff:58:26:e0:4d:6f:cb:29:27:7c:c9:12:e6:b8:90:
03:00:bd:de:43:86:b2:f8:e3:8a:fa:fc:f9:fd:f0:7e:63:91:
97:4a:93:25:58:4d:34:af:b8:a4:4a:09:d7:2b:f2:2b:46:cd:
30:40:c5:2d:9d:c2:7b:99:d8:a2:03:fa:ce:11:5d:90:24:fc:
0b:26:bb:25:55:a0:95:52:a9:a8:4a:d0:5c:46:79:c3:12:bc:
73:15:11:ac:24:72:7e:08:95:bc:49:82:40:76:30:b2:0c:4c:
9e:87:e4:78:8e:a2:e6:7c:6e:b2:d3:54:b7:3a:63:b8:02:67:
af:1b:2e:9f:9d:f0:86:7c:27:3f:22:3e:62:11:e4:15:28:38:
8c:ef:fe:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:22:45 2026 by rpki-client