Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35342e302f32332d3234203d3e20383334.roa
File: 33312e362e35342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: OOcWHTToYmfBjsgCWiCCim+VrPOP14MOJ/iKBHfhO5c=
Subject key identifier: 1E:07:5E:CA:2F:39:DA:9F:A8:1D:AB:AE:C7:D0:32:5D:4E:E0:F5:5C
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 625E5B5CC5F3FD0D8D60DAE8D259F0FC57EBEE21
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35342e302f32332d3234203d3e20383334.roa
Signing time: Tue 10 Nov 2026 02:50:40 +0000
ROA not before: Tue 10 Nov 2026 02:45:40 +0000
ROA not after: Tue 09 Nov 2027 02:50:40 +0000
asID: 834
IP address blocks: 31.6.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:5e:5b:5c:c5:f3:fd:0d:8d:60:da:e8:d2:59:f0:fc:57:eb:ee:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Nov 10 02:45:40 2026 GMT
Not After : Nov 9 02:50:40 2027 GMT
Subject: CN=1E075ECA2F39DA9FA81DABAEC7D0325D4EE0F55C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1e:4e:0a:dc:bb:1f:ed:d9:b8:66:61:a3:1f:
0d:8f:79:63:1e:e5:7a:2d:65:97:31:73:7e:24:6d:
75:3e:51:de:ea:88:ba:2e:10:47:4b:e0:cc:c1:8f:
7a:27:5e:4f:13:33:56:6d:a4:70:51:5a:9a:00:a5:
bc:29:ce:65:24:43:d0:dc:29:72:e6:89:3f:1e:cd:
dd:ff:7b:cd:b0:30:6f:c4:c3:7d:5c:68:49:f8:12:
75:c3:ec:27:a2:70:b2:08:c6:e5:1e:2e:e7:a7:58:
09:be:3b:de:9d:08:fb:6c:8a:93:f1:2c:84:11:79:
12:76:ec:96:0d:56:fa:c8:15:c6:01:ee:22:02:f2:
bc:f7:2b:ee:2e:aa:8a:c5:19:3e:52:39:e1:98:51:
8c:cb:c5:07:00:15:29:06:5a:5c:15:de:36:6d:b4:
07:a3:bd:cb:4a:b2:6e:bf:6f:d2:81:3f:c8:58:5c:
61:d7:dc:b7:75:00:70:f5:09:fb:4a:21:af:9a:e2:
33:70:04:24:3d:3c:b0:ef:1b:a1:6c:65:9c:6f:e0:
8c:5d:82:cf:cd:c7:1a:e8:ee:15:99:99:50:33:cb:
2c:b1:58:9e:91:6d:ce:19:5d:30:1a:71:bc:8a:0d:
54:7d:9e:ee:f3:ac:c0:f1:f3:99:dc:0f:ed:e1:46:
0b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:07:5E:CA:2F:39:DA:9F:A8:1D:AB:AE:C7:D0:32:5D:4E:E0:F5:5C
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.54.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:f4:78:e2:c2:04:8f:bf:af:8e:94:37:37:c7:6c:fa:2d:70:
85:07:61:7a:89:8a:03:ae:0b:ee:2e:95:8a:9d:41:7e:57:be:
7c:53:5b:cc:3c:d6:b4:da:f6:14:44:db:70:c0:59:d3:9c:c3:
64:8d:70:e3:af:99:46:c0:ad:da:c8:96:0d:f1:df:ae:bf:d5:
7f:77:5e:2b:ac:e5:8c:d6:38:d1:11:fa:c6:5f:a5:2e:86:d5:
ae:d6:ea:cc:d3:4e:84:8b:37:41:0e:f2:13:6a:19:9b:14:38:
f5:44:c5:a0:ad:00:ab:7c:a2:60:a6:0e:55:6d:f6:2d:b4:f5:
7a:3a:a7:f8:8b:e8:9f:7e:80:cf:23:8f:fa:b0:93:fa:42:7b:
78:86:e2:06:e5:3f:e0:f2:c9:f3:d7:e7:0e:1d:c7:4d:fd:19:
fa:b2:55:e1:b9:d1:e2:3d:b0:94:16:0e:05:7a:79:3f:f4:8e:
90:74:9a:ea:58:32:ec:7a:a2:1a:31:7d:1d:43:62:e1:50:ea:
f3:9c:72:8d:f5:e3:48:3f:8c:81:14:19:cc:c1:35:16:9d:18:
6a:38:87:57:e2:bb:8e:b9:62:ee:1c:43:4e:2c:ed:07:88:fa:
d2:df:9a:28:b2:77:5c:2b:de:c2:96:8d:aa:30:1a:16:65:aa:
c8:fc:f3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:43:15 2026 by rpki-client