Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35342e302f32332d3234203d3e203230343733.roa
File: 33312e362e35342e302f32332d3234203d3e203230343733.roa (raw, json)
Hash identifier: zi+x14R1tr1gQZi+Vle2xKYsWobXh4guJpeisM9bOmg=
Subject key identifier: BA:E0:7D:61:54:AC:F3:62:96:DE:C5:B7:E8:9E:9F:F2:FD:A7:22:D1
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 388A231281C6413B66F67F20E63B1AADAF476A2D
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35342e302f32332d3234203d3e203230343733.roa
Signing time: Thu 16 Oct 2025 18:55:08 +0000
ROA not before: Thu 16 Oct 2025 18:50:08 +0000
ROA not after: Thu 15 Oct 2026 18:55:08 +0000
asID: 20473
IP address blocks: 31.6.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:8a:23:12:81:c6:41:3b:66:f6:7f:20:e6:3b:1a:ad:af:47:6a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 16 18:50:08 2025 GMT
Not After : Oct 15 18:55:08 2026 GMT
Subject: CN=BAE07D6154ACF36296DEC5B7E89E9FF2FDA722D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bd:76:e0:c4:a8:78:d5:c1:76:c7:fb:34:c8:
39:c7:87:79:c6:dd:e9:73:a6:32:f6:ce:af:af:7e:
0d:e9:f8:02:1a:94:c9:f5:24:9d:91:f7:49:76:e6:
32:74:8f:99:c6:9b:62:39:66:98:75:ce:27:52:31:
3c:c2:59:f6:7e:42:3a:a1:1f:e7:6a:56:fd:1f:2a:
68:71:af:8b:15:9e:3b:ae:d4:a2:94:ba:dc:ee:1f:
e3:18:1f:ab:4d:cf:2c:94:e7:0a:ee:8c:94:af:b3:
11:02:2d:a2:65:6f:30:a2:e8:0c:72:05:9b:3a:50:
ab:c3:5d:bf:d8:4c:6c:57:b1:d1:64:a1:f1:a6:89:
26:a2:2d:c8:e5:d8:9f:96:07:4c:4b:a2:91:7e:07:
3c:5a:0e:67:23:0f:4f:61:5d:da:16:68:66:11:ec:
e4:23:c6:20:a6:30:b2:d0:b9:9c:d7:32:fb:a8:9e:
31:3e:8a:2f:80:64:86:e7:61:0a:71:02:82:52:35:
af:7e:73:96:7c:8c:df:1e:47:9f:5c:ff:ff:1a:74:
42:02:d2:ec:d3:be:b1:d5:ee:10:ae:1f:ad:4c:b5:
d3:f8:ff:f8:d5:1a:f6:ab:77:52:6b:62:b7:c5:c8:
ac:64:36:a8:ee:1f:6e:5d:69:66:40:22:65:db:03:
f6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E0:7D:61:54:AC:F3:62:96:DE:C5:B7:E8:9E:9F:F2:FD:A7:22:D1
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35342e302f32332d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.54.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:36:2b:3b:b9:05:6d:e8:7c:9f:d0:23:3f:d7:56:44:57:64:
9d:f0:a6:75:a5:cd:32:c9:f3:36:ea:9c:c9:2a:6a:54:7b:67:
7a:ab:84:d7:7d:3f:98:3f:bc:73:c7:49:95:56:7e:00:66:8b:
58:68:95:d4:7d:1d:8c:8f:82:04:e1:68:bf:db:6d:07:a4:1b:
85:2d:1b:f0:e7:b6:2f:ff:a6:80:33:5d:af:28:17:67:1a:7f:
48:d9:09:4d:60:c7:9e:73:e7:43:00:1f:57:cc:ad:8f:8a:c1:
bb:e1:25:87:ef:be:a3:ce:c1:fd:2c:b0:38:59:b9:57:37:89:
4e:94:a3:04:f6:b8:84:40:b4:df:69:de:e0:a6:d4:a9:e0:2b:
59:56:05:62:6c:57:bf:a8:35:74:29:1e:e5:7b:a1:23:41:b6:
13:7f:76:04:a9:3e:15:1f:ad:42:b0:0e:9a:10:fc:58:e1:07:
75:09:79:a7:6e:c6:42:2d:a1:d7:76:5c:bd:03:9e:7a:1d:06:
8e:4d:6a:02:e8:81:d1:89:53:12:d8:c1:5d:a9:fd:56:eb:d6:
c9:24:86:ab:69:1b:42:e8:aa:62:c4:50:01:1b:46:92:0e:9b:
d7:5d:52:d2:72:78:36:44:fe:e3:13:19:8f:0f:00:9e:56:6c:
f0:d0:a3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:05 2025 by rpki-client