Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32352e302f32342d3234203d3e20323134373935.roa
File: 33312e362e32352e302f32342d3234203d3e20323134373935.roa (raw, json)
Hash identifier: 9JXL/RFXUYsyNVb+wvsIYk2zxSsOWX3FccBeAQRCPlo=
Subject key identifier: B3:FF:1F:05:64:47:22:CE:03:14:EA:C6:F6:FA:92:7D:29:D5:92:2A
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 05167B33166DAA6A9FF812BDD1860A9941D30572
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32352e302f32342d3234203d3e20323134373935.roa
Signing time: Thu 25 Jun 2026 18:48:41 +0000
ROA not before: Thu 25 Jun 2026 18:43:41 +0000
ROA not after: Thu 24 Jun 2027 18:48:41 +0000
asID: 214795
IP address blocks: 31.6.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:16:7b:33:16:6d:aa:6a:9f:f8:12:bd:d1:86:0a:99:41:d3:05:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jun 25 18:43:41 2026 GMT
Not After : Jun 24 18:48:41 2027 GMT
Subject: CN=B3FF1F05644722CE0314EAC6F6FA927D29D5922A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:14:1d:cf:c7:49:c5:83:df:00:38:97:d5:ac:
b2:bc:10:17:17:e9:4e:b2:1d:f1:1e:50:8d:4a:97:
4b:43:9e:c7:1c:00:35:f7:ad:7d:c1:10:16:7f:55:
d9:87:58:fd:c2:6a:23:86:2a:7c:f7:d6:c8:02:fd:
79:dc:bd:6d:2c:6f:0a:28:7d:d7:17:07:df:d9:94:
d1:2c:35:75:e3:a0:3f:f8:43:9b:59:db:d1:7e:60:
cd:99:07:7b:c6:cc:3b:09:46:37:43:0a:ff:f0:0f:
a0:b3:b9:71:ea:d2:2d:72:b6:45:d8:0d:28:b0:59:
e7:67:af:d0:cd:39:94:8b:e6:99:c1:38:f8:2a:d8:
ce:59:58:9a:15:db:b1:7f:bd:94:aa:0c:65:fd:b3:
6c:6a:da:ff:33:3c:64:b9:df:99:d2:e2:64:0b:de:
4e:e3:df:82:7d:86:e4:53:f8:c8:da:54:fb:1b:12:
fe:53:b1:e0:2a:32:f7:8d:ca:f8:9c:ec:03:1e:9b:
4b:11:f0:71:48:70:50:ed:77:c4:82:74:c8:a6:42:
c7:d6:cc:0c:b5:c3:d6:ef:f2:f4:eb:a2:06:a7:c1:
f1:55:3e:61:40:3a:38:f5:55:5c:72:50:b9:fc:5a:
75:3d:93:39:28:b8:cf:06:c1:fc:3f:76:5f:7c:7d:
fd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FF:1F:05:64:47:22:CE:03:14:EA:C6:F6:FA:92:7D:29:D5:92:2A
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32352e302f32342d3234203d3e20323134373935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.25.0/24
Signature Algorithm: sha256WithRSAEncryption
39:bd:5a:33:5d:ec:c8:a0:08:5a:5f:da:a7:96:72:b5:50:d8:
6e:54:4f:6b:84:fe:7c:9c:38:1e:ba:96:d2:b0:e3:61:92:aa:
62:4d:32:b2:a5:6b:9c:1d:59:b6:3f:f1:61:a7:64:ec:8a:a9:
3e:e1:35:46:36:21:07:9f:65:7b:9c:9d:de:a6:34:30:c9:c3:
a7:f9:84:c7:17:ce:04:ac:b7:4b:85:9f:3c:51:42:dc:8b:ab:
a8:c2:cf:ef:5d:d4:45:f4:a6:f9:20:99:bb:ec:b8:ae:9d:de:
13:13:21:8a:db:39:ba:5c:f4:ab:10:f8:ed:0a:93:6c:81:fe:
17:dc:7f:e0:9d:0f:28:08:75:80:70:6e:54:e4:1e:f7:09:b5:
27:cb:d8:0c:51:bf:a5:ea:56:eb:de:78:1d:c3:06:11:b9:11:
4d:c3:ea:29:42:63:ae:0e:e9:3e:48:cd:44:74:58:f0:08:72:
27:65:da:92:50:cb:3f:79:d8:83:88:c9:3f:3f:d4:1d:dc:35:
9c:76:d8:8c:c8:2e:3e:17:26:4a:29:1a:23:a5:1b:ba:3d:86:
fb:3a:36:bb:d6:d3:b4:35:fe:0d:d8:2b:4e:f2:16:7e:77:5b:
b7:6d:d4:eb:05:2f:20:f1:f0:f7:ee:b8:2f:c9:ec:2e:a7:f8:
b9:ef:59:84
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUBRZ7MxZtqmqf+BK90YYKmUHTBXIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNjA2MjUxODQzNDFaFw0yNzA2MjQxODQ4NDFaMDMxMTAvBgNV
BAMTKEIzRkYxRjA1NjQ0NzIyQ0UwMzE0RUFDNkY2RkE5MjdEMjlENTkyMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3FB3Px0nFg98AOJfVrLK8EBcX
6U6yHfEeUI1Kl0tDnsccADX3rX3BEBZ/VdmHWP3CaiOGKnz31sgC/XncvW0sbwoo
fdcXB9/ZlNEsNXXjoD/4Q5tZ29F+YM2ZB3vGzDsJRjdDCv/wD6CzuXHq0i1ytkXY
DSiwWednr9DNOZSL5pnBOPgq2M5ZWJoV27F/vZSqDGX9s2xq2v8zPGS535nS4mQL
3k7j34J9huRT+MjaVPsbEv5TseAqMveNyvic7AMem0sR8HFIcFDtd8SCdMimQsfW
zAy1w9bv8vTroganwfFVPmFAOjj1VVxyULn8WnU9kzkouM8Gwfw/dl98ff3XAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUs/8fBWRHIs4DFOrG9vqSfSnVkiowHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTMyMzUyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzQzNzM5MzUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBhkw
DQYJKoZIhvcNAQELBQADggEBADm9WjNd7MigCFpf2qeWcrVQ2G5UT2uE/nycOB66
ltKw42GSqmJNMrKla5wdWbY/8WGnZOyKqT7hNUY2IQefZXucnd6mNDDJw6f5hMcX
zgSst0uFnzxRQtyLq6jCz+9d1EX0pvkgmbvsuK6d3hMTIYrbObpc9KsQ+O0Kk2yB
/hfcf+CdDygIdYBwblTkHvcJtSfL2AxRv6XqVuveeB3DBhG5EU3D6ilCY64O6T5I
zUR0WPAIcidl2pJQyz952IOIyT8/1B3cNZx22IzILj4XJkopGiOlG7o9hvs6NrvW
07Q1/g3YK07yFn53W7dt1OsFLyDx8PfuuC/J7C6n+LnvWYQ=
-----END CERTIFICATE-----
Generated at Tue Jul 21 10:20:25 2026 by rpki-client