Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31392e302f32342d3234203d3e203232333633.roa
File: 33312e362e31392e302f32342d3234203d3e203232333633.roa (raw, json)
Hash identifier: CeHhyfMF5XSvFwKKqUfxpXKFbqzRLPMrUzgCFNLCiUg=
Subject key identifier: 50:4A:C4:57:86:28:55:9C:43:EE:39:5D:3B:A4:0E:EB:D6:78:14:3D
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 6ECFEB75EAB5155169D4CAB5455344253A2D06C4
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31392e302f32342d3234203d3e203232333633.roa
Signing time: Mon 06 Jul 2026 07:48:56 +0000
ROA not before: Mon 06 Jul 2026 07:43:56 +0000
ROA not after: Mon 05 Jul 2027 07:48:56 +0000
asID: 22363
IP address blocks: 31.6.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:cf:eb:75:ea:b5:15:51:69:d4:ca:b5:45:53:44:25:3a:2d:06:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jul 6 07:43:56 2026 GMT
Not After : Jul 5 07:48:56 2027 GMT
Subject: CN=504AC4578628559C43EE395D3BA40EEBD678143D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3f:7e:3c:c8:8c:65:56:26:76:08:eb:d4:ad:
0e:27:26:7f:2b:2b:6c:ae:3b:83:4c:6e:22:6c:56:
96:c5:df:67:f9:00:1e:32:a4:44:4f:76:4e:91:a4:
80:6c:34:af:cc:22:9c:8f:be:67:34:a9:7a:37:d9:
af:fb:38:3e:b4:8d:7c:70:15:c4:85:12:fe:b7:a8:
57:0d:f9:02:f3:7b:9d:3d:a9:e0:28:aa:cf:d8:65:
b9:fc:31:f9:7a:04:d6:27:ad:5c:db:85:b0:ad:f2:
01:1b:b0:49:26:41:fa:7b:e9:9e:ee:7d:bf:10:86:
92:5b:a2:12:70:0d:85:49:24:30:f3:37:62:cd:3d:
45:8c:e3:ee:1c:83:f2:a7:92:af:c4:b7:40:be:cf:
14:5c:82:bf:2d:63:2e:e4:8f:4c:e1:3a:00:56:3f:
b2:49:95:56:4b:2a:8d:e8:70:c9:c9:60:ea:4b:03:
6f:d7:61:95:08:b0:77:83:72:8c:6f:42:c1:07:e1:
ba:a4:5e:63:99:34:f0:c8:2d:31:fd:8b:d1:ff:25:
5c:82:31:31:ce:e2:dc:c9:ee:24:5a:f3:75:f3:79:
f0:04:c6:e1:29:39:bd:cb:e7:86:b2:ad:93:aa:a1:
de:42:c2:c2:dd:8a:0e:96:60:d1:5b:c1:06:df:e4:
44:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4A:C4:57:86:28:55:9C:43:EE:39:5D:3B:A4:0E:EB:D6:78:14:3D
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31392e302f32342d3234203d3e203232333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.19.0/24
Signature Algorithm: sha256WithRSAEncryption
62:89:90:78:06:10:1d:43:37:67:b1:ee:58:c1:17:92:20:6c:
37:82:58:54:8a:4e:68:27:15:83:d1:6b:e1:62:df:0f:88:6a:
20:b7:8f:87:75:63:4f:9d:28:5e:5c:f6:61:b6:f4:58:0d:06:
d9:1b:23:37:c7:fc:a1:44:eb:43:ff:8e:8b:49:b4:a7:eb:a5:
0a:f3:59:55:00:83:3b:0f:28:8e:d0:cd:cd:3b:ab:86:7a:64:
09:25:f8:1f:0c:d9:2a:12:29:00:8e:e0:4e:84:69:57:d5:13:
bd:30:14:55:7e:44:f7:34:ab:7b:bd:7b:65:1c:4e:4f:63:04:
30:cf:18:69:1a:28:d8:ad:5c:dc:1a:92:46:8f:6c:56:12:27:
82:05:40:0b:1c:c3:f9:a6:08:95:23:28:29:8e:99:d2:0b:c0:
ac:a1:bb:4e:59:e2:09:8f:f1:06:ca:b4:dc:45:ab:1b:51:91:
fd:07:f2:62:e0:97:ea:c7:c2:80:a7:93:66:be:17:71:ee:46:
d9:7d:70:89:e0:8d:cf:db:35:19:ac:9e:fd:eb:5f:36:a2:80:
a1:32:55:b5:4c:13:23:d2:48:71:ba:c4:ff:94:16:ab:54:f3:
7a:43:84:fd:9c:c6:c6:d1:e1:81:91:51:f2:1c:bc:bc:d9:b0:
27:d2:b8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:19:33 2026 by rpki-client