Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35382e302f32342d3234203d3e203232333633.roa
File: 33312e362e35382e302f32342d3234203d3e203232333633.roa (raw, json)
Hash identifier: lpFOVz+5aRc67CA4edRqUEiXNastxUR+7XLDlLggtOw=
Subject key identifier: 9C:76:06:B3:46:B0:83:CE:B7:E5:C6:5E:B7:BF:3D:C5:18:81:53:F6
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 6D4DB3EE4E9B49A7706B6233C80BB351BD27BDE5
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35382e302f32342d3234203d3e203232333633.roa
Signing time: Mon 04 Aug 2025 06:54:13 +0000
ROA not before: Mon 04 Aug 2025 06:49:13 +0000
ROA not after: Mon 03 Aug 2026 06:54:13 +0000
asID: 22363
IP address blocks: 31.6.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:17:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:4d:b3:ee:4e:9b:49:a7:70:6b:62:33:c8:0b:b3:51:bd:27:bd:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Aug 4 06:49:13 2025 GMT
Not After : Aug 3 06:54:13 2026 GMT
Subject: CN=9C7606B346B083CEB7E5C65EB7BF3DC5188153F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a0:ee:3f:1c:78:c4:d1:e2:5e:28:c5:a9:32:
03:2f:a8:3f:15:f1:45:59:ab:44:46:b9:15:a4:02:
0a:e6:7c:79:2c:ed:ea:6d:12:66:da:fd:81:e0:47:
b5:92:49:cd:d4:99:bb:d6:94:e2:1c:89:86:eb:d9:
9e:82:5f:ff:5e:64:a1:4a:4a:51:2e:35:05:07:8f:
8f:4c:b3:c1:9c:cf:3d:80:78:d9:f4:bb:9b:16:d7:
97:90:8b:c7:7c:e5:3f:34:c6:3b:1a:c5:71:ac:bd:
04:e2:57:30:48:5e:6d:44:c8:44:75:bc:78:a1:26:
4f:84:06:2b:fe:de:7f:84:8b:c7:b5:83:ce:07:28:
2e:a4:69:52:1f:73:e1:64:61:c7:66:3e:f4:28:82:
d3:2d:09:26:24:3c:8a:97:1e:f6:1b:99:c5:be:2a:
b1:a0:3b:63:ea:5d:dd:f5:75:1d:86:76:ee:e8:d9:
5b:1b:1b:78:9e:c9:70:1c:44:98:2c:fd:56:2d:cf:
1a:11:18:67:c2:5e:93:b6:ad:f1:e3:16:20:44:54:
21:68:67:c7:8b:7f:47:f2:b8:d8:5c:2a:17:88:b7:
e6:ba:e7:50:84:44:76:4b:23:60:00:85:18:93:83:
4a:50:f0:34:1f:7b:d3:07:d0:0d:01:7c:ea:b2:73:
fb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:76:06:B3:46:B0:83:CE:B7:E5:C6:5E:B7:BF:3D:C5:18:81:53:F6
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35382e302f32342d3234203d3e203232333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.58.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b4:e3:0b:a3:00:64:56:27:7f:fe:a6:67:14:87:1d:36:4f:
37:af:ec:18:cc:c1:f8:c6:a6:73:8c:56:e5:fa:e8:18:7e:b2:
2a:9d:2d:fd:99:bc:cd:af:49:7c:f4:93:05:a6:11:e3:13:50:
f9:99:d2:eb:f6:ad:31:be:cb:86:fb:e6:69:69:0d:d0:8b:76:
95:c9:1a:1e:6e:c6:cd:d1:43:4b:03:cc:ce:50:1a:25:92:71:
ff:be:6d:56:e5:47:f0:cc:ad:e9:1b:80:4c:bc:1c:3a:c8:a3:
c8:45:b3:60:b5:a1:8f:45:80:d0:14:f5:d5:2e:47:13:c9:07:
fd:e1:3d:fd:9e:74:10:cc:c8:7d:04:08:b1:55:21:d6:c7:4e:
15:26:ec:3c:a9:84:e2:dc:33:73:c8:ff:de:2e:d1:07:67:69:
8b:b3:a7:12:e7:16:5c:41:ca:21:f8:6c:25:25:fd:33:2a:df:
7d:4f:75:28:fe:65:69:1d:f5:58:f1:54:9e:26:ca:d3:55:98:
81:13:f5:e1:a7:e0:ba:bf:eb:ed:e9:38:b7:38:93:76:6b:3c:
09:f6:c7:e2:33:88:28:75:db:34:28:80:2a:67:c0:21:5a:4d:
0e:8b:cc:7a:1b:8d:36:59:d5:d5:4e:bc:5c:c9:00:09:0a:70:
b4:35:e3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:26:38 2025 by rpki-client