Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35302e302f32342d3234203d3e20323133323030.roa
File: 33312e362e35302e302f32342d3234203d3e20323133323030.roa (raw, json)
Hash identifier: 9FWwIfuTh9F6gvJgc3G3t+PP7aw+pv3L9v0BSdwfd8Q=
Subject key identifier: 6A:4C:81:5F:7B:1B:1B:E1:89:FF:30:0B:8C:20:04:CA:8C:9D:86:8F
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 45C65EA6A852B81ECC08C41EBA79099BE1A91DEB
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35302e302f32342d3234203d3e20323133323030.roa
Signing time: Fri 29 Aug 2025 12:54:58 +0000
ROA not before: Fri 29 Aug 2025 12:49:58 +0000
ROA not after: Fri 28 Aug 2026 12:54:58 +0000
asID: 213200
IP address blocks: 31.6.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:c6:5e:a6:a8:52:b8:1e:cc:08:c4:1e:ba:79:09:9b:e1:a9:1d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Aug 29 12:49:58 2025 GMT
Not After : Aug 28 12:54:58 2026 GMT
Subject: CN=6A4C815F7B1B1BE189FF300B8C2004CA8C9D868F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e1:c0:7c:82:8b:46:1e:a0:a7:ca:03:2c:36:
71:79:e9:9b:e0:97:3c:83:4c:f1:4d:1a:e6:29:ea:
98:62:61:3a:36:d9:98:a8:9b:41:8c:1b:c9:01:25:
d7:e1:5d:40:e8:37:10:1b:d8:99:71:b1:19:a1:17:
04:96:c1:46:43:d5:d3:1a:73:8f:de:d7:31:3c:94:
8a:3c:85:a1:75:28:a7:a2:a1:c1:b2:b2:b0:43:29:
c8:7b:5f:a7:2c:49:9a:29:16:5a:9d:40:51:00:7e:
07:d8:58:12:68:0d:35:6e:1e:15:19:39:4a:a4:26:
53:9d:21:9b:b6:b7:ca:fe:db:ca:4c:af:17:76:52:
b5:ef:ae:cd:73:08:57:4f:eb:48:de:ea:08:0e:f0:
fe:40:86:b2:96:c0:10:88:cf:9c:e3:48:dc:f6:bf:
9a:70:2a:b9:ba:71:e5:61:4d:4e:f3:b1:85:82:0e:
af:99:69:37:cd:77:59:7c:53:6c:af:8f:13:cd:81:
1a:79:0c:88:e9:2c:f8:62:f4:45:46:e1:dd:81:f1:
78:5a:58:d8:47:9a:03:44:77:45:c5:4c:6a:0e:01:
31:08:02:17:5f:1e:89:6b:02:6e:e4:7b:2e:00:c2:
a2:fe:4c:97:c3:85:9f:51:b5:e3:2a:10:35:55:08:
75:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4C:81:5F:7B:1B:1B:E1:89:FF:30:0B:8C:20:04:CA:8C:9D:86:8F
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35302e302f32342d3234203d3e20323133323030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.50.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:db:2e:1e:d9:48:d2:1f:b7:a5:cb:f6:66:12:54:6f:da:ab:
23:90:5e:38:f8:be:b5:0d:fc:32:f2:8b:68:f4:d9:ea:e3:2d:
a2:dd:0f:e5:18:fa:be:ee:a4:27:d8:64:f8:dc:17:00:8f:8a:
af:c0:20:32:2d:54:13:1e:0d:59:c6:02:42:6d:05:f9:91:d4:
3c:70:a7:96:4e:4b:29:bc:5a:60:16:c2:46:9d:a6:48:06:29:
dc:19:b3:14:fa:0f:7c:69:3c:18:de:5d:aa:e8:f5:f4:95:39:
e9:e1:30:01:ed:8f:d4:33:fe:66:13:ad:85:07:b2:8a:59:ed:
a4:08:fb:1c:9a:29:00:91:07:cc:74:01:2e:2c:7d:0b:e6:fd:
a5:5c:68:0b:e1:a1:32:a3:3f:63:d0:7b:78:3b:b1:97:e5:d1:
4c:08:84:32:84:ce:c9:64:bf:42:f9:b4:6c:35:5a:39:cb:d6:
2c:c7:44:86:6d:24:89:bb:c1:24:8c:e5:2a:20:d1:e6:65:43:
04:52:bd:48:2c:f3:bd:8c:63:45:1c:d1:6d:4e:ad:83:51:61:
5c:98:3c:29:cb:5d:24:46:8e:4c:80:9d:56:a5:87:1b:8c:e9:
35:93:09:8b:bb:7f:14:fa:32:dc:4a:d6:26:5c:81:2f:a6:55:
c2:66:14:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:01 2025 by rpki-client