Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32352e302f32342d3234203d3e20383334.roa
File: 33312e362e32352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 4SM4mUq3Cf8q4SAQZxMPJDvFSzoj4Q5cmDwBexn+Uao=
Subject key identifier: A7:CB:66:B7:DF:42:BC:0F:B5:C8:FC:6B:EA:D4:60:2A:55:B0:DE:D6
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 1B64A20EF0477C278C2199542427C0E27B9C1C0F
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32352e302f32342d3234203d3e20383334.roa
Signing time: Thu 15 Oct 2026 11:11:00 +0000
ROA not before: Thu 15 Oct 2026 11:06:00 +0000
ROA not after: Thu 14 Oct 2027 11:11:00 +0000
asID: 834
IP address blocks: 31.6.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 06:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:64:a2:0e:f0:47:7c:27:8c:21:99:54:24:27:c0:e2:7b:9c:1c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 15 11:06:00 2026 GMT
Not After : Oct 14 11:11:00 2027 GMT
Subject: CN=A7CB66B7DF42BC0FB5C8FC6BEAD4602A55B0DED6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e6:32:76:0b:de:00:fc:cd:2a:48:21:ab:9a:
2a:fb:71:58:ec:78:0c:dc:02:4d:4c:db:96:1e:50:
56:25:98:73:1e:e3:bb:42:86:92:bb:3f:72:7c:9d:
7b:32:77:b1:30:8f:df:e2:93:b7:0a:2c:a4:d7:70:
fe:c9:94:25:f4:93:34:6b:db:14:df:ac:0d:cd:38:
46:aa:87:43:81:50:5d:6a:5e:71:7e:ed:66:be:f8:
b2:41:e8:b1:e4:04:5c:98:18:8b:ea:97:30:51:68:
8e:0e:c6:92:25:3f:77:00:0e:ea:9b:ef:1a:99:f7:
dc:07:b9:59:91:ce:02:6e:42:2b:1a:8e:da:86:1b:
f0:7d:5f:21:3f:e5:f2:f9:ef:a1:0e:a8:42:72:b1:
34:7e:b6:29:fa:b2:51:a7:7f:74:fc:93:05:ef:e3:
51:1b:ac:08:21:22:5e:16:4a:56:d7:c1:db:8c:a7:
03:56:8a:65:1c:bd:07:6a:ab:cc:e5:46:f5:83:ce:
e7:b2:b1:7c:9a:bc:3b:29:d6:df:79:6c:7e:ae:2f:
ed:e5:13:8a:78:35:3c:42:8e:d6:6a:bf:14:96:2e:
2c:d9:9f:c8:13:08:01:11:bd:8f:52:81:bf:97:f9:
59:ed:05:43:0b:2b:28:19:1b:38:1a:e6:b1:59:68:
9f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CB:66:B7:DF:42:BC:0F:B5:C8:FC:6B:EA:D4:60:2A:55:B0:DE:D6
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.25.0/24
Signature Algorithm: sha256WithRSAEncryption
91:0c:fa:4e:d5:eb:4a:e5:6b:ea:ab:e7:28:f2:16:d5:dd:18:
e1:91:f1:86:77:94:51:5a:0b:03:58:95:e0:24:5c:8b:54:ab:
9d:40:94:8c:6d:11:9a:b7:d0:c7:34:5f:d5:44:18:e4:f4:07:
08:6e:dc:c8:90:d9:5c:bb:0c:0e:47:96:2b:87:c1:03:e3:97:
d8:07:8f:c0:dc:b9:ba:03:38:31:0a:c8:f3:21:1d:3b:db:67:
0d:7b:ad:b8:7d:8f:04:7e:e5:00:5f:62:f8:e0:1a:3e:6d:57:
22:89:57:96:6a:ca:f8:a5:d9:24:ef:56:8b:8f:15:09:95:9e:
a3:c1:99:02:8b:e6:72:0b:93:0a:44:f3:9d:29:1b:00:23:08:
e3:d4:d3:ca:f3:07:16:02:7f:ea:87:40:ed:b8:58:d6:bf:5b:
99:69:19:15:51:cd:5e:fa:7a:4e:21:5c:9f:96:bb:35:ec:ac:
08:3b:f0:92:c3:8c:ba:bb:34:ae:1f:5c:50:59:45:4b:bc:66:
02:81:d8:53:76:9f:af:31:7c:3a:1b:db:76:9b:38:cf:be:0a:
b8:d3:ca:f6:d6:4f:9a:45:dc:15:9c:9b:89:cd:65:c0:41:a7:
a8:b9:82:19:e1:07:b0:01:e6:fe:45:6a:c5:98:d8:85:7f:40:
89:4c:bc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:41:25 2026 by rpki-client