Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35392e302f32342d3234203d3e2039333034.roa
File: 33312e362e35392e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: xwm4STRdjuy2EEHWKnjw25I8EQsh+BrLq3IeaXWF5QI=
Subject key identifier: F4:CB:D9:EF:67:B9:56:B8:36:34:46:C7:49:96:CE:81:78:62:C6:8B
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 3558CB83E4FA2D2114994FA1D242D6CD036CB7E0
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35392e302f32342d3234203d3e2039333034.roa
Signing time: Thu 03 Jul 2025 13:57:14 +0000
ROA not before: Thu 03 Jul 2025 13:52:14 +0000
ROA not after: Thu 02 Jul 2026 13:57:14 +0000
asID: 9304
IP address blocks: 31.6.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 00:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:58:cb:83:e4:fa:2d:21:14:99:4f:a1:d2:42:d6:cd:03:6c:b7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jul 3 13:52:14 2025 GMT
Not After : Jul 2 13:57:14 2026 GMT
Subject: CN=F4CBD9EF67B956B8363446C74996CE817862C68B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2a:6f:6e:f1:16:87:34:83:c0:a0:92:bc:8e:
89:94:c9:f8:ab:ae:4c:3b:97:dd:ff:39:bb:28:95:
4c:da:91:d2:6c:c2:c6:22:b9:1f:73:c7:84:1f:32:
4d:84:27:26:16:3d:d1:18:3e:41:8c:21:c3:80:d2:
38:36:26:fc:71:dc:6c:97:49:31:10:c7:fd:9e:c0:
0c:25:c9:b1:3d:51:fc:39:ae:df:ec:2a:1d:45:68:
b1:7a:4c:5c:0d:97:39:d3:cf:51:83:38:0e:06:5f:
11:81:fb:f9:83:0c:56:d0:80:70:36:84:fd:9c:f2:
69:61:96:e2:5f:66:02:14:ba:5a:0a:1f:71:a2:f8:
74:c9:49:e9:87:9d:51:a0:bc:74:ce:d6:18:64:de:
02:61:a7:40:f1:14:47:35:95:a5:ec:6a:5e:78:00:
51:c7:c9:8c:34:30:b6:c6:32:75:82:c0:1b:5b:45:
5f:aa:37:9d:e2:d8:65:27:c1:2b:6e:4b:6c:92:0a:
68:cb:fe:63:07:a1:e0:45:b4:5d:b2:74:18:13:7e:
4a:24:65:43:46:5f:aa:aa:86:70:0c:09:fe:9f:54:
cc:60:7c:b2:0d:bd:ad:8b:7f:ab:54:d3:5a:85:9a:
ba:ff:c9:94:9a:cc:35:d8:9f:e4:ef:7f:c3:99:8c:
7b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CB:D9:EF:67:B9:56:B8:36:34:46:C7:49:96:CE:81:78:62:C6:8B
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35392e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.59.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ae:29:d5:11:3f:a6:1b:2a:78:45:21:fe:c5:1a:a1:16:e1:
83:2d:75:c5:b6:be:03:34:1e:9e:3f:27:ee:99:6a:84:ca:e1:
07:18:42:12:d7:0e:82:b3:0b:bf:f9:09:b4:2d:de:ac:a8:84:
af:bf:c7:00:63:c7:88:e8:35:ab:2b:43:7f:9d:05:de:94:b8:
35:39:49:c4:c0:d2:46:27:31:7a:69:01:1e:fd:04:06:ff:19:
14:7e:8a:b3:8f:07:7e:85:24:36:03:7b:24:e2:03:4f:83:f7:
49:19:3a:cc:37:c7:91:f4:75:3a:6a:a7:07:01:ff:6a:6c:10:
1d:a2:6c:e5:7d:c8:8a:cd:eb:be:ff:fb:2b:c8:3a:fa:2c:27:
35:b4:f6:83:66:2f:7c:32:65:0c:6b:47:ee:e5:09:23:77:d4:
47:d3:09:45:8b:24:6e:0e:bf:34:3d:b4:7c:b8:2e:33:f9:b9:
47:6d:99:61:cf:f4:be:9e:83:f0:6b:3d:0a:27:8b:c5:49:60:
5c:c7:eb:b7:9d:a4:87:b1:eb:fb:7c:72:80:d0:7a:75:82:1b:
91:bd:f0:01:5d:75:4b:24:65:9e:86:13:5e:65:09:95:1f:1a:
98:70:84:92:dd:0a:a8:4b:31:57:5d:68:f7:25:7b:55:35:ad:
0f:69:e5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:41:12 2025 by rpki-client