Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31302e302f32342d3234203d3e203232333633.roa
File: 33312e362e31302e302f32342d3234203d3e203232333633.roa (raw, json)
Hash identifier: PQTy8aIHXdIdQtRNvMWp62Ue4qYbJGE1IjypI58CvAc=
Subject key identifier: 42:96:BB:AA:87:24:0B:F4:9A:11:47:4D:89:E0:51:C8:62:FD:3B:C1
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 13CB5696EAE809175E0F44DBCB7BF2694F4C38EB
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31302e302f32342d3234203d3e203232333633.roa
Signing time: Mon 06 Jul 2026 07:48:56 +0000
ROA not before: Mon 06 Jul 2026 07:43:56 +0000
ROA not after: Mon 05 Jul 2027 07:48:56 +0000
asID: 22363
IP address blocks: 31.6.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:cb:56:96:ea:e8:09:17:5e:0f:44:db:cb:7b:f2:69:4f:4c:38:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jul 6 07:43:56 2026 GMT
Not After : Jul 5 07:48:56 2027 GMT
Subject: CN=4296BBAA87240BF49A11474D89E051C862FD3BC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:29:36:aa:06:18:e8:bf:3b:a0:80:cc:20:60:
30:d5:9e:f0:54:41:e7:e7:e9:b2:61:b1:03:ed:8a:
4e:19:13:2d:6d:6c:7b:78:2c:1c:e7:ad:2e:99:fa:
b9:90:13:9e:f0:7f:0b:58:0c:c3:56:e2:7d:70:e4:
42:71:9c:ce:1c:e6:50:9e:d4:34:21:10:58:2a:dd:
92:19:49:43:65:15:86:2b:22:ca:f1:e8:b5:d7:b3:
8e:02:d1:16:aa:a0:2b:04:53:47:bc:a5:e6:df:a2:
44:ec:cd:f4:7f:ec:74:b9:0a:ef:2e:1d:fa:0a:0d:
64:de:eb:fc:f7:f1:c9:a2:df:03:b2:0e:57:f8:db:
c5:39:da:c2:31:e6:56:38:a3:d7:a8:b9:eb:2d:21:
72:5a:ba:dd:dd:c5:bc:e5:bb:09:9f:aa:c2:15:23:
7c:6a:87:7a:5b:e5:d0:69:62:ed:06:20:9c:6e:13:
04:c6:ee:0d:88:f7:41:dc:80:f6:fe:3a:2d:ec:c9:
69:38:38:7a:40:20:24:95:28:a2:93:f0:a1:4f:09:
04:2c:1c:ae:58:79:c0:92:a5:ac:d3:20:21:5a:fe:
f4:29:6e:fd:45:89:33:ca:15:9f:de:d2:0b:ff:c7:
cb:1a:3c:f5:a8:fa:3a:7a:18:16:fc:3e:31:1c:a4:
0a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:96:BB:AA:87:24:0B:F4:9A:11:47:4D:89:E0:51:C8:62:FD:3B:C1
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31302e302f32342d3234203d3e203232333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.10.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:da:dc:76:c9:56:24:98:61:1c:a4:8e:6d:ab:4d:e7:c4:db:
4d:34:22:a5:a5:da:14:fc:94:6b:51:6c:e6:08:48:a0:40:7b:
33:ab:d8:5c:e1:47:9b:2a:5c:84:16:56:41:a3:3a:bc:80:a9:
e7:84:38:1f:1e:5b:68:20:84:a1:fd:bc:b2:51:c0:d2:81:f8:
89:b9:1f:e6:56:2a:62:29:d2:9a:ce:b9:a3:a6:b2:3c:9e:68:
b8:95:94:cf:d4:90:aa:00:2c:ee:c8:55:c5:40:0e:6e:21:21:
4c:f4:b4:2b:65:8f:84:91:a9:83:67:47:f6:e8:20:a2:5e:1f:
e7:99:a5:63:26:a3:55:08:f7:6a:0e:ab:3a:a1:a0:a2:9e:e2:
1c:5b:77:8d:8b:b8:9d:65:35:be:e1:8f:25:2c:6d:2d:00:10:
61:01:32:fa:af:64:3c:1a:9f:a9:98:44:c5:d1:3f:15:df:f9:
96:ef:d2:a6:06:25:4c:bd:2d:43:44:ab:f5:39:56:06:bd:fe:
90:27:d5:c5:a2:8a:12:29:4b:ae:72:e4:17:0f:6c:9e:50:d5:
61:ad:83:37:9a:22:50:22:f9:87:6a:46:e1:49:64:91:55:a6:
6a:91:0f:0b:bc:48:8e:33:0d:37:ed:37:f5:f8:bd:62:bd:ef:
e7:40:72:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:19:35 2026 by rpki-client