Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e20323135373634.roa
File: 33312e362e31342e302f32342d3234203d3e20323135373634.roa (raw, json)
Hash identifier: CfM/gvWyEJ+uhChMupu7kRe2RbD1CuTJlUEYVZMew2o=
Subject key identifier: AC:2B:6B:7F:73:26:56:08:57:15:FF:8C:6D:37:A2:15:BF:9B:74:7C
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 3B552103052F81603114EF2914924E835DC9D3EB
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e20323135373634.roa
Signing time: Sat 11 Jul 2026 13:49:09 +0000
ROA not before: Sat 11 Jul 2026 13:44:09 +0000
ROA not after: Sat 10 Jul 2027 13:49:09 +0000
asID: 215764
IP address blocks: 31.6.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:55:21:03:05:2f:81:60:31:14:ef:29:14:92:4e:83:5d:c9:d3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jul 11 13:44:09 2026 GMT
Not After : Jul 10 13:49:09 2027 GMT
Subject: CN=AC2B6B7F732656085715FF8C6D37A215BF9B747C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:48:4f:83:63:a7:a6:d1:64:d2:58:35:cc:5c:
dc:46:c4:33:61:10:80:20:84:61:ad:58:c3:3e:3f:
db:5c:6e:fc:07:b5:79:13:83:2d:96:73:83:ed:f3:
f7:51:e3:18:9f:cf:58:ab:0c:75:11:4f:b7:ae:7e:
47:c4:c3:9b:0d:7d:11:b4:81:7f:aa:8a:d0:29:09:
64:00:59:3d:23:73:38:53:1c:ef:11:9d:e7:21:26:
d1:31:6d:33:58:90:d6:d0:f3:fa:1d:19:15:26:be:
03:93:0e:a8:9e:f4:a0:56:10:28:b5:e6:9c:05:67:
e1:66:2d:21:8d:ad:12:57:85:36:a3:b7:33:2e:1b:
5c:45:e8:99:a2:29:49:ba:58:bf:13:e8:9f:d3:14:
b8:04:1f:f5:0e:a2:43:a9:bb:7d:94:bb:01:d3:3b:
86:74:0c:d3:95:94:4a:02:02:bd:02:2e:aa:0a:01:
38:3c:ff:c7:61:c1:f0:47:44:4b:47:e6:0b:e8:57:
3a:17:9a:ba:eb:e7:15:01:f8:a5:b0:1e:ac:cc:ea:
08:9b:f3:89:98:89:da:3e:a8:8e:84:cd:09:e8:89:
dc:d3:36:eb:1a:32:84:4c:0d:ac:ab:19:bb:a5:f6:
09:c1:00:0a:cd:65:47:92:97:4b:9b:21:05:51:42:
74:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2B:6B:7F:73:26:56:08:57:15:FF:8C:6D:37:A2:15:BF:9B:74:7C
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e20323135373634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.14.0/24
Signature Algorithm: sha256WithRSAEncryption
27:24:20:5e:07:85:23:36:bf:53:5e:c0:0d:a2:31:8b:d8:68:
89:d2:9c:cf:d7:7d:05:bb:e9:49:dc:e8:fa:bf:ec:2f:c7:a3:
ce:03:c3:d7:d5:24:b4:b3:dc:43:a1:30:21:ba:6c:cf:94:cd:
86:94:29:a5:78:a1:ce:aa:3d:dd:53:6f:0d:dd:3a:78:93:a9:
92:a8:60:ce:47:20:e9:75:a4:bb:4d:61:e0:65:8d:3f:40:0c:
19:e5:0d:b5:35:37:ca:bf:a1:40:db:0e:20:44:14:90:97:87:
dd:7d:94:dc:51:c3:61:3c:c8:c5:2a:91:7b:62:47:30:24:6a:
2b:77:d4:7c:ac:f1:5a:9f:3b:2e:23:58:fe:4f:ab:58:fe:a2:
50:3d:02:c2:e6:d6:23:8b:1d:02:91:80:32:c1:b4:d9:1e:cc:
3d:25:47:1a:4b:cc:5e:7c:7d:21:04:af:14:fd:3d:a4:18:88:
f2:dd:06:7c:1b:18:0e:2b:78:21:da:84:99:21:27:01:e2:fe:
72:c4:e5:8c:02:00:05:50:99:96:b3:2f:15:f2:1a:6c:ed:50:
5d:c4:f0:86:b4:52:c5:f0:b8:48:59:a4:98:fa:0f:85:59:6a:
c6:99:16:92:78:a6:1d:02:39:6b:24:23:56:74:7e:34:63:35:
d0:c8:86:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:18:33 2026 by rpki-client