Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36322e302f32342d3234203d3e203136323736.roa
File: 33312e362e36322e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: 5FlKnapj3VP3TkBK2SOepN0GnmFO0doQGvilhW/rBeU=
Subject key identifier: 80:E3:23:24:00:AF:E5:0C:8D:2F:2B:5D:A6:12:33:B0:59:5D:99:AA
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 0372CE3820A396989FDF91ECCF949D3722D4042B
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36322e302f32342d3234203d3e203136323736.roa
Signing time: Tue 22 Sep 2026 16:47:36 +0000
ROA not before: Tue 22 Sep 2026 16:42:36 +0000
ROA not after: Tue 21 Sep 2027 16:47:36 +0000
asID: 16276
IP address blocks: 31.6.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:72:ce:38:20:a3:96:98:9f:df:91:ec:cf:94:9d:37:22:d4:04:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 22 16:42:36 2026 GMT
Not After : Sep 21 16:47:36 2027 GMT
Subject: CN=80E3232400AFE50C8D2F2B5DA61233B0595D99AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:b1:99:83:96:96:9a:2d:10:23:c3:76:39:
d2:3b:2b:aa:62:bf:41:14:4c:6f:c6:20:93:81:46:
ab:16:e8:7d:20:01:c0:f9:e2:f5:41:65:77:03:dc:
ac:aa:fd:f9:e7:91:1a:85:35:55:8b:82:74:19:aa:
eb:c1:da:73:e2:27:f3:83:b8:44:0b:6b:3a:15:fd:
66:d8:54:c0:76:1a:08:db:8d:42:61:88:84:74:f2:
21:cf:eb:b7:d7:fa:61:e2:9b:78:80:42:33:e8:bf:
ab:f9:ab:e4:33:18:e8:90:89:91:66:61:0f:26:e2:
70:18:6b:6f:cb:e3:03:19:8b:b0:ff:b2:e4:49:68:
f6:50:44:61:8a:2f:f9:64:a0:cb:b9:e2:0a:4c:2a:
1e:52:cb:37:33:30:70:c4:32:55:b0:98:e5:40:ab:
9d:b7:51:3d:f4:cf:9d:19:0a:43:5c:76:8d:4e:96:
ff:01:07:18:00:8c:a7:85:56:e1:46:2f:46:86:2f:
b6:ee:05:d6:a7:4f:40:40:c4:d8:fe:ef:80:35:11:
c4:3f:f8:4e:de:b4:3d:d7:4c:e5:69:4b:f2:40:4c:
02:ad:7b:2c:2c:d4:4a:9e:32:5a:33:ed:d4:4d:61:
a5:02:6a:c8:c3:a2:d8:c0:c4:1e:c4:52:02:20:26:
87:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E3:23:24:00:AF:E5:0C:8D:2F:2B:5D:A6:12:33:B0:59:5D:99:AA
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36322e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.62.0/24
Signature Algorithm: sha256WithRSAEncryption
97:0c:d6:87:f1:7c:df:d3:34:36:a3:75:ae:bb:65:e3:04:18:
3b:85:47:77:93:53:9b:7d:4f:8c:31:60:33:e4:ca:3b:a5:fa:
f1:2f:83:5f:b8:17:dd:20:d4:c4:9d:88:83:80:de:43:5c:7f:
43:8c:a8:32:51:5a:c5:97:be:0b:c7:70:59:64:30:19:eb:c5:
53:13:59:6f:d6:b2:5f:87:00:40:b0:e9:bc:86:02:d4:d0:ab:
86:6f:11:2a:3d:92:27:d8:e1:ee:22:08:33:4e:82:55:a9:eb:
6c:04:e6:49:5f:f6:bb:6b:46:d9:0d:c5:09:e1:cc:e9:5d:1f:
23:dc:b2:37:72:4d:26:c3:ca:e8:a4:7e:04:5b:80:ab:ad:5c:
a6:b6:a9:5e:e3:7f:57:96:25:39:7f:7a:d3:ab:8a:7d:6c:67:
48:0f:c6:c4:0c:92:f0:f5:04:54:7e:8c:61:9b:5d:61:8d:5f:
f0:30:12:c1:38:00:66:5d:14:ac:8c:02:75:48:93:c7:f7:8c:
83:5b:96:24:f3:36:ab:e5:aa:3a:22:99:3d:12:21:e0:a5:40:
72:e2:ff:68:46:3d:91:de:cf:26:20:bd:73:61:09:09:dd:d9:
7d:8e:b9:d2:6a:83:85:09:15:b6:10:17:e3:da:59:92:93:f6:
c1:78:77:2c
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUA3LOOCCjlpif35Hsz5SdNyLUBCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNjA5MjIxNjQyMzZaFw0yNzA5MjExNjQ3MzZaMDMxMTAvBgNV
BAMTKDgwRTMyMzI0MDBBRkU1MEM4RDJGMkI1REE2MTIzM0IwNTk1RDk5QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8drGZg5aWmi0QI8N2OdI7K6pi
v0EUTG/GIJOBRqsW6H0gAcD54vVBZXcD3Kyq/fnnkRqFNVWLgnQZquvB2nPiJ/OD
uEQLazoV/WbYVMB2GgjbjUJhiIR08iHP67fX+mHim3iAQjPov6v5q+QzGOiQiZFm
YQ8m4nAYa2/L4wMZi7D/suRJaPZQRGGKL/lkoMu54gpMKh5SyzczMHDEMlWwmOVA
q523UT30z50ZCkNcdo1Olv8BBxgAjKeFVuFGL0aGL7buBdanT0BAxNj+74A1EcQ/
+E7etD3XTOVpS/JATAKteyws1EqeMloz7dRNYaUCasjDotjAxB7EUgIgJofhAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUgOMjJACv5QyNLytdphIzsFldmaowHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM2MzIyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM2MzIzNzM2LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHwY+MA0G
CSqGSIb3DQEBCwUAA4IBAQCXDNaH8Xzf0zQ2o3Wuu2XjBBg7hUd3k1ObfU+MMWAz
5Mo7pfrxL4NfuBfdINTEnYiDgN5DXH9DjKgyUVrFl74Lx3BZZDAZ68VTE1lv1rJf
hwBAsOm8hgLU0KuGbxEqPZIn2OHuIggzToJVqetsBOZJX/a7a0bZDcUJ4czpXR8j
3LI3ck0mw8ropH4EW4CrrVymtqle439XliU5f3rTq4p9bGdID8bEDJLw9QRUfoxh
m11hjV/wMBLBOABmXRSsjAJ1SJPH94yDW5Yk8zar5ao6Ipk9EiHgpUBy4v9oRj2R
3s8mIL1zYQkJ3dl9jrnSaoOFCRW2EBfj2lmSk/bBeHcs
-----END CERTIFICATE-----
Generated at Thu Sep 24 19:09:50 2026 by rpki-client