Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31372e302f32342d3234203d3e203232333633.roa
File: 33312e362e31372e302f32342d3234203d3e203232333633.roa (raw, json)
Hash identifier: RQlOQf1oa6lYjfbgp4MuOS0aMmBnvj1bgdF/Q9Yh19c=
Subject key identifier: A6:88:6A:1A:38:3E:19:D2:0D:48:F0:64:71:38:0B:F9:82:3B:CD:8F
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 32EF0096BD6BBCEE7EF06284FA8629D4BA82BADA
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31372e302f32342d3234203d3e203232333633.roa
Signing time: Mon 06 Jul 2026 07:48:56 +0000
ROA not before: Mon 06 Jul 2026 07:43:56 +0000
ROA not after: Mon 05 Jul 2027 07:48:56 +0000
asID: 22363
IP address blocks: 31.6.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ef:00:96:bd:6b:bc:ee:7e:f0:62:84:fa:86:29:d4:ba:82:ba:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jul 6 07:43:56 2026 GMT
Not After : Jul 5 07:48:56 2027 GMT
Subject: CN=A6886A1A383E19D20D48F06471380BF9823BCD8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:76:0f:95:8d:26:2c:ae:69:b3:14:39:0b:39:
de:97:98:91:9a:40:d9:1d:75:70:17:26:3d:20:cd:
89:79:4a:80:04:9f:29:68:4c:ca:e0:d7:18:e2:85:
4e:97:5f:c6:1b:b2:74:ea:ff:46:a5:20:10:0d:61:
56:27:35:5e:a1:ec:99:d7:7e:da:01:b9:64:8c:4a:
ef:fc:14:25:f9:3a:52:4f:62:f3:c5:1e:be:e4:6d:
52:4a:7e:d3:6f:50:15:35:2e:27:8c:06:e7:55:e5:
4c:9e:c1:a2:73:58:3c:f4:00:04:57:40:8e:52:ae:
9e:9f:d1:31:c3:67:71:3d:f9:c2:34:7e:3d:5b:6b:
8f:1e:e2:72:ce:89:8b:55:79:c1:bf:f4:56:45:d7:
33:f6:ab:b3:64:32:4e:6e:96:c0:62:a3:c9:df:3b:
71:1b:f3:7a:1a:52:81:7b:67:04:7c:0f:04:27:08:
86:c3:1e:f4:b6:0a:02:f3:58:71:c8:68:e2:43:12:
d5:b4:12:3f:be:8d:b1:c8:c2:2c:08:cd:20:fe:87:
4a:a8:68:7f:f9:5e:7f:4b:4c:38:8a:56:d9:24:ee:
14:9d:8b:fe:6c:e8:59:e8:71:e6:05:aa:98:06:67:
ab:55:73:0e:48:22:a6:47:ff:ec:1b:17:26:dc:0e:
f6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:88:6A:1A:38:3E:19:D2:0D:48:F0:64:71:38:0B:F9:82:3B:CD:8F
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31372e302f32342d3234203d3e203232333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.17.0/24
Signature Algorithm: sha256WithRSAEncryption
97:59:2b:94:20:19:33:58:d3:89:da:c8:74:c7:02:17:ff:1e:
33:39:2e:60:13:da:cb:47:b1:69:53:93:9c:ee:e7:a8:03:ab:
2e:76:5f:c0:ed:d3:4e:e5:05:fc:76:df:b3:29:c9:05:20:c6:
17:cc:4d:58:17:38:bf:09:c4:ea:0c:7f:0e:fe:20:d2:32:8b:
7a:e6:fb:95:3d:e2:3f:40:db:6b:d0:f1:29:7c:24:b2:8a:08:
0c:f8:98:d4:ea:e7:63:2e:b4:86:15:f6:7f:1a:f1:fb:f2:ce:
a5:48:2a:a8:d7:5d:75:d2:9c:6a:18:01:2d:e0:c6:f6:ac:f0:
e0:63:6a:79:cb:c8:40:5f:c1:27:97:b8:c1:58:2a:c7:fa:8f:
38:a8:b8:e4:e5:62:7f:65:5e:c3:57:43:de:5f:d4:d2:01:37:
39:c7:d7:7b:23:ed:2c:64:8b:86:e9:6c:28:a4:5d:0c:97:8a:
d9:0f:52:00:bf:f5:aa:35:1f:59:87:85:e6:6c:59:2f:1c:d4:
89:92:ae:a4:85:f4:1d:1b:1d:41:53:16:46:a7:fc:be:32:ce:
b6:7a:70:b4:ec:96:79:e4:0a:39:95:32:b2:0e:38:82:28:15:
65:33:44:b5:9a:24:b0:56:b3:cd:55:38:eb:ff:83:7c:06:1b:
c8:83:0e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:19:41 2026 by rpki-client