Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35332e302f32342d3234203d3e20323032363536.roa
File: 33312e362e35332e302f32342d3234203d3e20323032363536.roa (raw, json)
Hash identifier: f9YzDLLgBDspPDQuGJ7I4LczxMExgOuEmA5LY/Uve1w=
Subject key identifier: 1F:EC:CB:23:E7:31:10:9D:7E:46:DA:69:4B:B4:7B:95:B6:09:71:66
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 494DA28B4DC324DC32B42D5EF106595CE1DF05E4
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35332e302f32342d3234203d3e20323032363536.roa
Signing time: Fri 18 Sep 2026 00:49:35 +0000
ROA not before: Fri 18 Sep 2026 00:44:35 +0000
ROA not after: Fri 17 Sep 2027 00:49:35 +0000
asID: 202656
IP address blocks: 31.6.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:4d:a2:8b:4d:c3:24:dc:32:b4:2d:5e:f1:06:59:5c:e1:df:05:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 18 00:44:35 2026 GMT
Not After : Sep 17 00:49:35 2027 GMT
Subject: CN=1FECCB23E731109D7E46DA694BB47B95B6097166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f0:9a:de:03:43:35:58:8c:58:93:a0:94:a9:
2e:b0:0d:24:0e:4f:b6:f3:5c:64:72:9e:3c:4e:01:
57:51:d9:6f:37:99:64:d8:1c:66:32:20:35:70:98:
b5:61:86:b4:da:bf:21:0a:70:75:fd:d9:dc:1e:b9:
97:78:c3:f2:46:02:46:cd:7f:b1:06:60:e5:9d:e0:
19:c6:1c:d6:94:d1:ea:46:85:32:24:d8:6e:07:ad:
36:54:6a:4d:f6:38:8b:c4:a2:c5:19:72:29:cb:c4:
8d:85:24:f2:80:9a:c4:07:cd:77:ad:bf:ce:fd:69:
fd:b0:81:06:12:7c:85:4d:b7:63:4a:e9:61:ef:12:
d1:c8:01:92:59:ca:27:c7:cf:20:b2:72:ca:6f:b1:
03:0b:30:f1:b4:67:66:2a:65:0c:60:5d:27:33:af:
b4:9b:12:44:e6:67:17:7c:35:6f:b2:32:95:b7:e0:
55:a7:40:00:ac:ed:09:de:ba:a9:3e:3d:fe:30:33:
47:40:0f:94:a9:c7:ee:3b:f5:02:a0:71:35:03:42:
64:98:ca:f6:b6:1b:9c:bc:63:29:8d:d3:c6:0b:05:
8d:60:83:16:ad:5f:81:a9:ea:70:de:4d:e7:85:78:
96:99:9b:0d:c5:b9:d6:0a:cb:e7:18:de:09:8a:31:
66:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EC:CB:23:E7:31:10:9D:7E:46:DA:69:4B:B4:7B:95:B6:09:71:66
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35332e302f32342d3234203d3e20323032363536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.53.0/24
Signature Algorithm: sha256WithRSAEncryption
63:d2:1b:7c:2f:91:60:97:60:5b:bf:ec:0b:b4:4c:88:01:a6:
9b:c9:90:79:d7:59:2a:64:0f:25:f2:16:62:c0:df:cd:83:74:
7e:54:bc:73:b4:d9:90:d4:7b:8a:41:1e:d1:2b:d2:85:4a:aa:
c9:e7:84:da:77:0f:c7:f6:59:4f:ad:1d:dd:44:04:da:df:9e:
85:d6:cc:9b:f2:f8:da:02:cb:85:51:4f:5c:4f:1a:5f:a1:a1:
90:c4:6d:a7:dd:71:6b:fa:1f:b6:9d:cd:4d:1e:ba:3f:ba:b5:
6a:0c:09:23:e7:bc:4c:19:45:7b:98:19:64:a0:34:61:ef:3b:
9b:1d:ad:25:56:62:88:d8:fb:d6:ae:61:03:39:f8:11:05:f4:
61:d9:15:9b:31:3a:a1:c6:8a:ec:a9:0c:a1:62:30:9f:e1:93:
2f:86:4e:bd:88:c6:08:e2:7a:af:60:20:fd:d1:6e:ba:df:da:
4e:37:43:c2:84:04:13:a0:1a:78:e0:80:75:10:dc:7e:f4:fc:
8c:97:8e:2c:0b:21:87:79:c9:08:42:8c:da:bb:13:0d:17:24:
6f:13:4f:30:ec:84:4b:b1:5d:9e:ae:bd:9e:e0:93:cd:b8:31:
01:bb:8e:9a:1c:f7:15:e7:29:db:57:7f:b2:10:aa:c8:96:6d:
f5:0a:25:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:11:42 2026 by rpki-client