Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35322e302f32342d3234203d3e20323037323532.roa
File: 33312e362e35322e302f32342d3234203d3e20323037323532.roa (raw, json)
Hash identifier: JSE4VDA1ZVDYWTGircwHMAWVykD5D0Twud08VSQphmU=
Subject key identifier: E3:9E:4A:61:D4:64:64:6B:40:A7:E4:C8:42:0B:F9:89:A1:61:51:DC
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 3EF35C2C0E8D2C2995D95FBDD0C88E70FC79B064
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35322e302f32342d3234203d3e20323037323532.roa
Signing time: Thu 16 Oct 2025 14:55:08 +0000
ROA not before: Thu 16 Oct 2025 14:50:08 +0000
ROA not after: Thu 15 Oct 2026 14:55:08 +0000
asID: 207252
IP address blocks: 31.6.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:15:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:f3:5c:2c:0e:8d:2c:29:95:d9:5f:bd:d0:c8:8e:70:fc:79:b0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 16 14:50:08 2025 GMT
Not After : Oct 15 14:55:08 2026 GMT
Subject: CN=E39E4A61D464646B40A7E4C8420BF989A16151DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:dc:da:70:c6:1e:a2:5d:25:a6:b3:a7:15:
20:6c:91:fe:4c:b0:86:3b:ea:57:5a:5f:58:f0:f3:
64:23:47:13:9b:40:68:e5:d0:b9:df:d5:be:09:0e:
29:b5:73:2a:37:b1:3b:61:4f:c1:68:f1:c2:13:3f:
e3:50:12:0c:7f:93:43:46:b1:14:c4:22:55:0c:6b:
88:6c:ee:c3:de:37:ac:d9:ca:26:bf:9f:34:67:22:
0e:73:ea:30:52:72:62:b6:cc:d5:e9:75:18:79:4c:
dc:c3:48:44:8c:98:6d:cd:96:5b:5a:d2:9b:c4:7d:
13:e9:3a:61:6b:5a:13:98:31:29:15:34:55:f2:3a:
4c:8e:07:68:e9:e6:28:67:7e:de:8e:1a:96:2b:82:
6c:49:b6:7d:e9:68:ad:46:e6:58:d8:d6:cc:18:96:
eb:56:62:74:eb:7c:0e:70:34:c0:f6:90:0b:81:80:
b8:ce:64:e2:fa:14:6c:2f:43:38:7b:10:6e:1e:a6:
05:88:7c:d4:52:06:0f:4c:aa:41:1a:0d:97:0a:19:
bf:cd:eb:16:ff:74:9d:24:96:da:bb:6c:82:55:21:
a2:a0:0f:29:36:ec:c1:8c:ba:b9:25:ea:6b:52:06:
1e:b0:70:09:e6:12:46:46:f8:e8:67:6d:b3:49:0f:
cf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9E:4A:61:D4:64:64:6B:40:A7:E4:C8:42:0B:F9:89:A1:61:51:DC
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35322e302f32342d3234203d3e20323037323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.52.0/24
Signature Algorithm: sha256WithRSAEncryption
76:6d:1c:c6:6e:20:7a:61:55:62:b0:4f:61:d9:7e:da:a8:94:
19:64:37:2f:5b:a9:db:f3:47:1d:db:00:0c:54:f7:69:b3:94:
b5:5e:9c:f7:2d:bc:bc:23:78:cd:a3:6b:28:4d:9c:8d:3d:0d:
7b:b6:b1:df:5b:94:0b:19:3a:f8:0e:a0:61:b3:84:a0:ab:e7:
dd:70:26:20:8c:60:a6:32:56:52:dd:3c:af:41:8f:b8:6d:20:
fd:82:f7:6e:44:de:54:69:3f:51:2c:ea:57:dd:ec:03:1c:f3:
8b:fc:6b:7e:91:21:75:51:54:d5:d1:be:ef:8d:78:36:d2:b1:
6c:cf:a9:13:c1:62:35:54:b5:46:d8:28:ad:e2:c4:47:4c:52:
eb:5f:ee:76:bc:91:2b:2a:6c:b2:6f:c2:4d:17:2a:ab:b9:7f:
69:8d:bf:98:37:df:0c:31:11:ff:f1:db:35:52:ee:43:82:07:
3c:51:0e:5c:0f:d5:99:c2:a3:ba:7b:45:ca:fc:4f:db:3c:a9:
61:82:6f:b9:11:94:18:99:91:30:7d:75:3c:68:84:2a:0c:32:
05:54:7b:17:79:84:3f:8f:60:70:29:40:52:85:cb:73:b1:ae:
96:80:46:5a:81:39:86:ad:48:39:8e:62:16:7f:2b:19:50:88:
80:8c:34:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:06 2025 by rpki-client