Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31312e302f32342d3234203d3e203232333633.roa
File: 33312e362e31312e302f32342d3234203d3e203232333633.roa (raw, json)
Hash identifier: xNQyYQizxC20/lnhlLkBIUtJRvms3QVT3zR87q+BHKQ=
Subject key identifier: 69:B5:43:12:B1:23:AC:F9:FF:70:8A:D9:3B:C4:DA:3E:9A:F2:67:70
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 60B1235DDEC141AFDD9B3955B35AE00DB48C3265
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31312e302f32342d3234203d3e203232333633.roa
Signing time: Mon 06 Jul 2026 07:48:56 +0000
ROA not before: Mon 06 Jul 2026 07:43:56 +0000
ROA not after: Mon 05 Jul 2027 07:48:56 +0000
asID: 22363
IP address blocks: 31.6.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b1:23:5d:de:c1:41:af:dd:9b:39:55:b3:5a:e0:0d:b4:8c:32:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jul 6 07:43:56 2026 GMT
Not After : Jul 5 07:48:56 2027 GMT
Subject: CN=69B54312B123ACF9FF708AD93BC4DA3E9AF26770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:17:2e:3c:a4:c1:68:22:4e:9c:0b:e8:5d:c1:
af:f5:23:47:fc:30:f2:e6:df:bf:ce:d2:ed:83:91:
a0:2a:07:28:23:4f:f3:e5:af:87:6a:0b:68:c4:af:
4f:11:2e:02:34:0f:4b:17:af:77:bd:e5:f9:7b:60:
b7:4b:44:f7:70:51:3b:16:ee:d4:37:98:82:8b:0d:
68:6d:fd:1b:de:2e:96:65:69:d3:ff:3d:52:f9:fc:
d9:97:f5:af:33:1d:56:ea:9d:3a:6d:ec:1d:9e:db:
49:9a:0e:d3:d4:52:a7:7c:bf:8e:f0:8f:71:88:a7:
da:2a:e1:ca:bc:c5:4e:b6:92:81:50:8b:fc:1c:e8:
60:26:64:5e:30:6f:dc:94:6b:a8:0e:39:64:f3:83:
c0:db:f4:ed:8d:e0:48:35:50:62:0c:01:80:f9:a7:
d5:55:46:0b:81:96:ea:ea:ef:c6:94:21:3d:97:8d:
87:96:fc:22:ed:96:1c:2e:32:e0:be:3c:e2:3d:7c:
c4:ac:61:50:60:26:f9:f2:8f:59:45:88:ff:8d:89:
d5:43:d0:4c:0e:84:cf:41:10:eb:d2:32:43:45:e8:
39:e2:3a:6d:fc:f6:3f:b6:eb:04:e0:85:6e:99:31:
1c:ec:a7:59:4f:87:f2:a6:e6:d5:f6:a2:6c:98:82:
54:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B5:43:12:B1:23:AC:F9:FF:70:8A:D9:3B:C4:DA:3E:9A:F2:67:70
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31312e302f32342d3234203d3e203232333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.11.0/24
Signature Algorithm: sha256WithRSAEncryption
47:9a:79:90:59:08:8f:42:ee:62:93:7d:28:90:6c:2b:95:e9:
77:45:c4:ed:7a:1d:78:3a:43:d0:31:81:34:17:f9:36:fb:69:
84:72:b4:30:16:02:3e:63:5f:5e:9a:87:4e:b2:24:57:64:de:
c2:0f:69:91:2f:48:77:af:43:23:80:db:a8:12:1c:fe:a2:8e:
07:a1:b0:12:e0:65:be:d9:7f:8f:d5:8c:17:f8:23:d2:49:96:
00:ec:59:84:2f:85:2a:20:2e:cb:48:a4:72:ee:8b:f3:66:4c:
2b:b8:38:8d:45:a1:97:6e:17:73:6f:7d:99:37:aa:89:d2:2d:
d2:f6:99:b3:7b:44:cd:e5:f1:11:61:79:bc:7b:53:4f:26:36:
cb:df:ba:5a:be:65:f5:03:e7:96:cb:29:03:c4:b5:32:f0:54:
1e:ab:f5:bb:23:f3:8e:c4:3b:22:7c:33:19:e7:8f:92:fc:29:
64:64:de:3c:df:0c:ac:b7:e6:9e:32:3e:56:06:36:c9:a8:7c:
04:94:e0:70:2c:32:f6:9b:ca:3d:ab:8b:ab:f3:e2:8f:2b:5d:
d8:1c:2e:04:60:03:38:48:52:15:ac:06:33:9c:98:23:83:41:
04:f4:42:be:25:eb:56:25:fd:4d:71:e3:2d:32:cf:eb:10:eb:
29:20:96:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:19:27 2026 by rpki-client