Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32352e302f32342d3234203d3e20383334.roa
File: 33312e362e32352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: x34FJ0daue18qfDY0AeiIwPwiQnq6LKiSKWF5cxjysI=
Subject key identifier: AD:10:35:A8:19:6E:95:99:E1:D3:CD:97:B8:45:D3:B5:08:57:59:DF
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 1ABF7457010804C5F196803828B567A1D5740311
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32352e302f32342d3234203d3e20383334.roa
Signing time: Sun 23 Aug 2026 00:02:06 +0000
ROA not before: Sat 22 Aug 2026 23:57:06 +0000
ROA not after: Sun 22 Aug 2027 00:02:06 +0000
asID: 834
IP address blocks: 31.6.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:bf:74:57:01:08:04:c5:f1:96:80:38:28:b5:67:a1:d5:74:03:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Aug 22 23:57:06 2026 GMT
Not After : Aug 22 00:02:06 2027 GMT
Subject: CN=AD1035A8196E9599E1D3CD97B845D3B5085759DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:07:7c:b2:20:10:3d:d5:69:c0:89:2f:eb:f1:
4a:72:c5:ca:5a:38:7b:c2:5c:27:9d:30:63:1e:7e:
f4:fd:6a:00:b2:ad:c2:eb:4f:46:53:85:02:bd:1d:
b3:62:32:54:d7:f5:bf:dd:6a:16:60:15:73:e5:c2:
a2:8c:8c:1e:ba:ce:a6:93:cd:1a:cf:0f:e4:01:cf:
b9:77:5e:8b:fa:d6:3c:91:9d:0e:6b:3e:55:3a:dc:
cd:f9:27:01:78:11:56:e2:40:fd:c0:02:64:5a:ec:
33:c1:66:90:01:6f:ed:e4:a6:be:2f:d0:0c:96:ae:
43:90:00:ef:38:b8:3e:89:d5:33:71:fb:c0:24:99:
44:12:20:f0:30:cb:8c:18:ff:9d:c4:b7:ab:9d:d7:
1d:59:3b:fc:68:6c:31:08:c6:ac:9e:f1:2e:bc:af:
04:38:dc:d7:fe:49:ab:6d:ce:0a:ef:27:c4:4d:bf:
ec:2f:80:29:9c:2e:d6:51:b9:f8:4d:74:88:89:5f:
01:bb:db:7d:d0:d7:b0:68:74:c3:fb:dd:2a:53:44:
7e:1a:96:c3:f0:11:c3:78:c0:88:86:74:df:09:dc:
40:d7:dd:5e:c0:d5:32:79:22:84:2b:57:ed:57:ce:
9d:ee:fa:7e:2a:1c:1a:6f:f5:0a:67:80:30:97:3c:
ca:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:10:35:A8:19:6E:95:99:E1:D3:CD:97:B8:45:D3:B5:08:57:59:DF
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.25.0/24
Signature Algorithm: sha256WithRSAEncryption
41:97:71:3b:fc:15:03:0a:54:67:fb:f5:b3:23:95:84:f7:20:
ed:b3:f8:55:0f:4b:39:13:21:71:f9:b8:80:c0:96:71:76:6d:
23:ae:e1:74:9c:66:1e:ff:d0:77:1d:44:de:66:f7:49:79:1c:
0b:67:15:e2:ac:0d:0f:34:cb:d7:8c:53:1f:10:66:61:6f:94:
45:75:7b:4f:38:72:5a:a8:24:33:5c:c5:3d:51:24:8e:db:6d:
ea:7d:66:c8:11:f5:c3:87:dd:c1:f8:41:0c:cf:e3:2e:f4:ce:
ae:f0:d9:2a:d4:dc:22:5a:8d:7f:43:57:46:b4:9c:c0:2a:8e:
20:ce:a5:d3:e7:34:34:c3:42:90:6d:79:72:55:71:15:8a:85:
15:90:64:c1:1d:c6:e0:07:1d:ea:04:82:ea:cb:e4:7a:af:de:
db:ac:99:08:63:be:40:21:80:ba:c5:fd:dd:0c:03:35:91:57:
6a:a9:05:06:94:ea:10:63:14:dc:44:ae:91:38:18:63:d6:be:
37:fe:a5:d9:89:8e:a1:b6:92:46:76:c1:b3:48:ab:10:9c:d7:
d0:8a:01:89:32:b3:bd:a1:fd:d2:5e:3f:50:f6:61:aa:4e:d5:
a3:52:cb:e5:d6:f2:58:85:9b:bb:55:7b:f2:0b:0b:9f:13:64:
bb:5b:9e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:02:18 2026 by rpki-client