Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32342e302f32342d3234203d3e203534323532.roa
File: 33312e362e32342e302f32342d3234203d3e203534323532.roa (raw, json)
Hash identifier: RZG2w3pHAxBCZsuwOEZLQo0pI4s3o7ZXLXYQauj4Vco=
Subject key identifier: E5:6C:C2:29:DB:00:6C:2A:83:AF:E4:A5:32:7A:76:20:54:8A:32:87
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 7E4DF87F1358573DF3DEB7D1D3EB14A4014B27F7
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32342e302f32342d3234203d3e203534323532.roa
Signing time: Tue 01 Sep 2026 19:49:32 +0000
ROA not before: Tue 01 Sep 2026 19:44:32 +0000
ROA not after: Tue 31 Aug 2027 19:49:32 +0000
asID: 54252
IP address blocks: 31.6.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:4d:f8:7f:13:58:57:3d:f3:de:b7:d1:d3:eb:14:a4:01:4b:27:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 1 19:44:32 2026 GMT
Not After : Aug 31 19:49:32 2027 GMT
Subject: CN=E56CC229DB006C2A83AFE4A5327A7620548A3287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:84:fc:20:b2:27:14:97:5f:29:9e:da:8f:45:
e5:50:1c:cf:38:3e:3c:f8:59:c6:53:72:e8:62:af:
8e:d1:96:5d:06:97:f2:16:c6:b2:8d:ed:0e:2c:f2:
d4:f1:24:f7:77:e6:30:e9:b8:44:78:99:41:f7:9d:
f7:7a:b9:af:28:13:97:14:9b:43:90:3e:06:1c:54:
eb:c9:60:12:21:f3:c0:41:09:68:f8:6f:6f:b4:38:
fe:4d:d6:18:2d:ed:ce:09:eb:ba:ba:7d:ca:2e:04:
38:36:4e:9f:32:6b:1b:9a:b8:b0:62:b0:10:f1:9d:
10:1f:b9:6b:34:ff:44:b5:50:3e:df:10:f6:7d:77:
1c:86:3f:3d:56:a7:96:99:69:66:f8:39:73:e1:74:
05:1d:f7:9b:20:a3:7c:66:67:be:06:19:9e:24:3f:
3b:dc:a0:4f:7c:1d:8a:ec:fd:ee:11:2c:24:2d:f5:
e0:0c:46:93:63:88:42:93:3c:d6:16:61:27:3b:02:
6d:08:33:26:1c:4d:b8:53:6b:86:47:3c:e6:ea:a2:
ea:4b:87:1e:05:3f:1f:34:90:4c:1d:03:13:06:eb:
16:7d:65:b2:d2:42:62:0e:0b:1c:a7:b8:f8:b5:6b:
e0:4e:46:95:3f:a1:25:3a:cb:92:bb:3d:d9:14:d0:
87:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6C:C2:29:DB:00:6C:2A:83:AF:E4:A5:32:7A:76:20:54:8A:32:87
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32342e302f32342d3234203d3e203534323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.24.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:76:ee:d4:70:1f:34:0a:44:f3:fe:90:70:98:65:66:1c:c6:
84:1c:a7:b8:06:ee:96:f7:6c:88:7e:af:ea:28:ab:a6:1a:ed:
aa:c3:15:d2:2d:50:45:b9:12:f9:61:d0:a6:25:a6:7e:41:74:
f7:4b:1f:0c:16:fb:cb:84:8d:56:0c:1f:e9:b7:18:68:bd:7a:
72:ae:1f:92:f6:3b:33:29:f2:aa:33:51:07:a7:a1:92:cb:4d:
7c:d6:1f:d3:7b:7c:ea:b8:12:b3:14:66:de:cb:d7:ce:05:06:
d8:a9:04:30:81:3d:4a:49:44:bd:fc:91:73:03:ef:6d:05:aa:
85:d1:46:36:a6:18:0e:ba:d9:6a:87:f5:82:ef:d4:94:8e:39:
68:b0:db:1c:26:e5:45:22:82:e6:70:b3:95:6b:c6:39:90:10:
ba:5d:3e:df:aa:be:5a:ad:9b:e0:fc:1f:bb:1b:f8:43:e2:d1:
99:7c:b7:91:14:e0:d4:ee:9e:24:57:de:a2:ee:88:90:be:95:
8a:24:da:be:0c:1e:c1:b6:59:41:dc:2b:29:15:19:7d:1d:1a:
98:13:e4:0c:e2:f8:20:6b:14:b0:e2:da:10:78:61:90:60:56:
af:8b:3a:ec:e0:77:b7:78:9a:99:42:5f:4c:55:c1:75:b7:ef:
5e:81:2e:f8
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUfk34fxNYVz3z3rfR0+sUpAFLJ/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNjA5MDExOTQ0MzJaFw0yNzA4MzExOTQ5MzJaMDMxMTAvBgNV
BAMTKEU1NkNDMjI5REIwMDZDMkE4M0FGRTRBNTMyN0E3NjIwNTQ4QTMyODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDhPwgsicUl18pntqPReVQHM84
Pjz4WcZTcuhir47Rll0Gl/IWxrKN7Q4s8tTxJPd35jDpuER4mUH3nfd6ua8oE5cU
m0OQPgYcVOvJYBIh88BBCWj4b2+0OP5N1hgt7c4J67q6fcouBDg2Tp8yaxuauLBi
sBDxnRAfuWs0/0S1UD7fEPZ9dxyGPz1Wp5aZaWb4OXPhdAUd95sgo3xmZ74GGZ4k
PzvcoE98HYrs/e4RLCQt9eAMRpNjiEKTPNYWYSc7Am0IMyYcTbhTa4ZHPObqoupL
hx4FPx80kEwdAxMG6xZ9ZbLSQmIOCxynuPi1a+BORpU/oSU6y5K7PdkU0IclAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQU5WzCKdsAbCqDr+SlMnp2IFSKMocwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTMyMzQyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM0MzIzNTMyLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHwYYMA0G
CSqGSIb3DQEBCwUAA4IBAQBbdu7UcB80CkTz/pBwmGVmHMaEHKe4Bu6W92yIfq/q
KKumGu2qwxXSLVBFuRL5YdCmJaZ+QXT3Sx8MFvvLhI1WDB/ptxhovXpyrh+S9jsz
KfKqM1EHp6GSy0181h/Te3zquBKzFGbey9fOBQbYqQQwgT1KSUS9/JFzA+9tBaqF
0UY2phgOutlqh/WC79SUjjlosNscJuVFIoLmcLOVa8Y5kBC6XT7fqr5arZvg/B+7
G/hD4tGZfLeRFODU7p4kV96i7oiQvpWKJNq+DB7BtllB3CspFRl9HRqYE+QM4vgg
axSw4toQeGGQYFavizrs4He3eJqZQl9MVcF1t+9egS74
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:02:06 2026 by rpki-client