Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31362e302f32342d3234203d3e20323135373634.roa
File: 33312e362e31362e302f32342d3234203d3e20323135373634.roa (raw, json)
Hash identifier: KpUOgykVz+EN5HEndrPw+dVl0TO6K32RsYOys4r/qnk=
Subject key identifier: 56:2F:3C:A6:4C:B7:0C:EC:E5:B1:C0:F1:71:68:46:CB:B6:18:78:FF
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 3CB4CD9B7EF26317F767949BBE5A31E53AB2894C
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31362e302f32342d3234203d3e20323135373634.roa
Signing time: Sun 11 Oct 2026 14:49:36 +0000
ROA not before: Sun 11 Oct 2026 14:44:36 +0000
ROA not after: Sun 10 Oct 2027 14:49:36 +0000
asID: 215764
IP address blocks: 31.6.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 00:36:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:b4:cd:9b:7e:f2:63:17:f7:67:94:9b:be:5a:31:e5:3a:b2:89:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 11 14:44:36 2026 GMT
Not After : Oct 10 14:49:36 2027 GMT
Subject: CN=562F3CA64CB70CECE5B1C0F1716846CBB61878FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:23:f1:2c:2c:00:2a:e0:6e:dd:76:a1:d6:be:
96:9c:a8:96:4f:96:7a:d3:29:44:df:d1:fa:a8:2b:
17:74:5d:f4:2c:09:49:57:ff:8f:ec:61:75:28:d9:
bd:81:4d:f3:f5:cc:9c:c0:bb:bb:98:08:29:88:0c:
87:31:cb:2b:74:c9:0c:32:08:d7:d4:a4:d3:87:9a:
d9:d3:d6:c3:8c:2c:15:ff:4f:05:a7:48:6a:01:fd:
fb:c5:7b:84:dd:a2:39:f2:63:92:e5:43:a0:c0:cc:
e3:2d:89:48:4f:33:7e:44:2b:03:69:d1:cc:50:46:
54:4b:4c:42:e7:d7:ab:e5:bd:3f:1c:05:e4:50:1f:
e0:3b:0e:eb:36:b2:57:21:4f:52:c0:3e:ac:33:84:
59:ec:f1:3a:c2:c4:56:c0:09:7b:90:34:f8:1d:07:
8b:c0:88:c5:4d:3c:d7:b3:0f:a3:34:50:aa:c0:b8:
c7:0d:0e:9f:d1:18:29:2e:32:08:7c:6c:c9:ff:3f:
6b:39:b0:55:9c:92:6d:b4:64:3f:79:6b:63:29:ce:
62:c8:57:49:45:3d:1a:53:50:be:dc:e0:a4:90:31:
51:ff:c5:15:26:ca:f0:12:60:b1:23:91:5f:98:2f:
27:41:ad:08:16:28:53:c8:95:7e:99:97:ea:01:0c:
ca:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2F:3C:A6:4C:B7:0C:EC:E5:B1:C0:F1:71:68:46:CB:B6:18:78:FF
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31362e302f32342d3234203d3e20323135373634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.16.0/24
Signature Algorithm: sha256WithRSAEncryption
76:97:f4:75:bc:f9:ff:e6:b2:b3:10:de:e4:65:21:f6:df:e4:
7a:1a:44:d0:d7:00:82:3c:fc:a8:6c:53:3c:48:09:8c:e3:e9:
7b:ed:a6:d3:08:86:6f:20:f9:a3:da:42:79:c9:8e:40:9b:03:
86:37:98:d8:28:88:3f:cb:27:e4:ec:59:fb:ac:1a:9d:ac:35:
e6:56:ce:61:9b:49:a9:aa:17:9f:ce:7a:d4:a7:1d:9d:a8:b8:
bb:9a:c0:2d:fd:fa:f8:4a:fc:9d:87:a8:f6:7c:92:22:dd:fb:
0d:53:50:94:c3:6d:d1:2f:d0:8f:cd:d0:13:69:0a:d3:48:64:
b7:a1:b0:bd:da:88:09:b6:22:c1:2d:00:7d:4f:c6:7b:44:4f:
b7:08:d1:79:d7:f1:eb:41:8c:59:8d:a8:75:40:bb:3c:13:3a:
2e:28:c7:cc:41:05:34:73:5f:12:db:e6:4e:57:5f:d4:90:d5:
b4:90:22:69:c0:3e:a9:71:fd:93:de:6d:1d:61:88:c6:08:c8:
21:25:2e:70:f5:0d:38:bb:ad:e9:8f:ca:d2:3c:81:d7:c1:aa:
3e:83:0b:f1:2f:70:34:68:90:e4:a8:93:8f:51:cc:2e:f4:fd:
d8:42:8d:c4:30:e3:c9:3c:a3:b4:68:14:7f:ac:60:dc:eb:36:
61:b2:7f:e5
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUPLTNm37yYxf3Z5Sbvlox5TqyiUwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNjEwMTExNDQ0MzZaFw0yNzEwMTAxNDQ5MzZaMDMxMTAvBgNV
BAMTKDU2MkYzQ0E2NENCNzBDRUNFNUIxQzBGMTcxNjg0NkNCQjYxODc4RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYI/EsLAAq4G7ddqHWvpacqJZP
lnrTKUTf0fqoKxd0XfQsCUlX/4/sYXUo2b2BTfP1zJzAu7uYCCmIDIcxyyt0yQwy
CNfUpNOHmtnT1sOMLBX/TwWnSGoB/fvFe4TdojnyY5LlQ6DAzOMtiUhPM35EKwNp
0cxQRlRLTELn16vlvT8cBeRQH+A7Dus2slchT1LAPqwzhFns8TrCxFbACXuQNPgd
B4vAiMVNPNezD6M0UKrAuMcNDp/RGCkuMgh8bMn/P2s5sFWckm20ZD95a2MpzmLI
V0lFPRpTUL7c4KSQMVH/xRUmyvASYLEjkV+YLydBrQgWKFPIlX6Zl+oBDMrFAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUVi88pky3DOzlscDxcWhGy7YYeP8wHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTMxMzYyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzUzNzM2MzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBhAw
DQYJKoZIhvcNAQELBQADggEBAHaX9HW8+f/msrMQ3uRlIfbf5HoaRNDXAII8/Khs
UzxICYzj6XvtptMIhm8g+aPaQnnJjkCbA4Y3mNgoiD/LJ+TsWfusGp2sNeZWzmGb
SamqF5/OetSnHZ2ouLuawC39+vhK/J2HqPZ8kiLd+w1TUJTDbdEv0I/N0BNpCtNI
ZLehsL3aiAm2IsEtAH1PxntET7cI0XnX8etBjFmNqHVAuzwTOi4ox8xBBTRzXxLb
5k5XX9SQ1bSQImnAPqlx/ZPebR1hiMYIyCElLnD1DTi7remPytI8gdfBqj6DC/Ev
cDRokOSok49RzC70/dhCjcQw48k8o7RoFH+sYNzrNmGyf+U=
-----END CERTIFICATE-----
Generated at Sat Oct 24 10:27:27 2026 by rpki-client