Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34322e302f32342d3234203d3e203430383631.roa
File: 33312e362e34322e302f32342d3234203d3e203430383631.roa (raw, json)
Hash identifier: KCqWloU/yomM4j2+IbXubsmz1Xf1qTYUnu2IzbW6G0E=
Subject key identifier: D8:7E:C2:DE:51:C2:8C:90:CF:5A:4B:B5:D1:5C:46:AA:22:EF:1C:58
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 33DBAC4F30C67647EBE6EB28D2F72F9C11A7F195
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34322e302f32342d3234203d3e203430383631.roa
Signing time: Fri 29 Aug 2025 15:54:58 +0000
ROA not before: Fri 29 Aug 2025 15:49:58 +0000
ROA not after: Fri 28 Aug 2026 15:54:58 +0000
asID: 40861
IP address blocks: 31.6.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Oct 2025 14:20:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:db:ac:4f:30:c6:76:47:eb:e6:eb:28:d2:f7:2f:9c:11:a7:f1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Aug 29 15:49:58 2025 GMT
Not After : Aug 28 15:54:58 2026 GMT
Subject: CN=D87EC2DE51C28C90CF5A4BB5D15C46AA22EF1C58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:af:a6:f2:0d:76:7c:1a:22:8d:2b:11:fa:a8:
49:77:fe:bd:84:4c:55:03:3b:a2:e1:76:19:46:19:
4b:78:4c:03:6b:30:de:9e:07:eb:a3:54:48:bc:12:
4d:67:cd:85:46:b8:d0:34:21:72:73:bc:e0:78:56:
fd:52:4d:13:14:d5:02:93:a2:ed:c7:80:ea:a3:71:
2b:1f:b1:36:65:b3:c5:36:04:a3:06:7b:1e:89:1e:
5d:bc:84:71:0c:1f:9c:e6:c7:b4:e2:cc:75:dd:04:
6c:20:76:34:14:f6:02:ce:02:cf:80:89:f1:d9:5b:
22:ad:f7:87:93:51:c9:10:08:c4:e0:1a:e1:6f:8d:
e5:98:3d:02:c1:6e:f5:5d:f2:3a:47:a9:85:df:e2:
a0:70:75:70:d0:71:29:75:2e:28:6d:85:0d:c7:74:
8c:91:ed:f4:bb:5d:54:ce:b6:9c:8a:f5:3c:78:16:
ee:84:d0:37:66:73:8a:62:13:c2:dc:c2:f4:5c:24:
62:54:7d:65:dc:b4:55:4a:e5:f2:b9:01:4b:de:55:
b2:30:97:30:62:05:04:ff:36:50:1b:d8:4e:e3:eb:
ac:b3:92:b7:1f:4a:a3:83:26:78:2b:1c:0b:d4:b1:
8f:00:af:c7:5b:98:5a:2d:33:ff:fb:ae:df:29:dc:
1d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7E:C2:DE:51:C2:8C:90:CF:5A:4B:B5:D1:5C:46:AA:22:EF:1C:58
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34322e302f32342d3234203d3e203430383631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.42.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:90:c0:cd:cd:3f:43:c8:95:4b:0b:c6:bc:e8:92:cc:4a:a1:
8a:6b:a6:ec:8e:ef:98:19:79:e6:4c:fd:f4:80:44:23:bb:d0:
30:b3:6c:ea:69:2e:51:7a:a8:05:0a:66:50:81:36:b5:c4:0f:
7d:11:4f:3b:ce:f5:2b:02:4d:4e:d0:d4:0f:a7:2b:55:ec:7e:
bc:8e:3e:59:fb:d8:4c:21:5f:25:44:d4:34:72:5d:cc:3e:20:
7e:58:fa:28:39:29:90:73:3c:ea:4c:79:f5:4e:ca:2a:b2:f6:
56:5d:9b:44:3b:b4:01:80:e9:3f:c9:8c:04:0a:93:ad:ae:1e:
eb:f7:1e:ad:4d:cd:ef:d4:36:00:bf:15:e6:b1:7c:c0:82:f1:
9a:42:84:60:96:45:b4:f4:81:b7:0d:91:48:8a:21:82:53:fb:
16:c7:8e:5c:86:d9:d8:17:b1:4a:c7:0e:32:39:df:4b:e1:68:
9f:f6:0c:00:62:90:7a:e4:9c:03:55:cd:47:6a:cc:62:0f:ac:
99:91:9d:51:ad:50:33:e8:2f:7d:be:e8:3c:9a:91:84:02:27:
02:d5:cb:12:84:89:3e:a8:46:ad:54:0c:1c:62:18:ee:d2:fc:
98:97:cd:54:ef:47:ee:66:90:d4:7a:dc:f5:07:e5:33:1a:0d:
f2:7b:71:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 06:54:00 2025 by rpki-client