Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32362e302f32342d3234203d3e20383334.roa
File: 33312e362e32362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: pOJbUDjP1UtoOufQVE00FQ/W75sktbCHgohnYHeZB1o=
Subject key identifier: 00:EB:CE:EF:66:48:49:56:74:CD:08:F0:6E:27:72:9B:0E:84:8C:E6
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 4E86DFCED9D7AFECAAC2CE8EC558EBA1597ECC74
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32362e302f32342d3234203d3e20383334.roa
Signing time: Sat 14 Nov 2026 00:08:33 +0000
ROA not before: Sat 14 Nov 2026 00:03:33 +0000
ROA not after: Sat 13 Nov 2027 00:08:33 +0000
asID: 834
IP address blocks: 31.6.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 20:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:86:df:ce:d9:d7:af:ec:aa:c2:ce:8e:c5:58:eb:a1:59:7e:cc:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Nov 14 00:03:33 2026 GMT
Not After : Nov 13 00:08:33 2027 GMT
Subject: CN=00EBCEEF6648495674CD08F06E27729B0E848CE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0d:fc:b0:07:65:7c:f4:2a:cc:c2:d9:31:8e:
63:52:36:58:41:e5:42:e7:f4:03:32:a8:2d:df:f1:
63:4e:e0:0a:ee:44:e5:cb:51:c4:83:eb:6f:71:e7:
c3:11:7a:3a:7a:d5:a6:22:8b:a9:b4:ca:f2:2f:d2:
f4:32:37:01:ad:da:ba:3e:8c:fe:c9:0a:c4:3a:9b:
7f:a9:cf:b2:46:63:0a:10:33:4d:44:af:2a:da:b6:
08:54:c7:07:ad:5f:37:85:3e:88:75:7d:4d:2e:8d:
87:c0:e2:23:ff:e6:15:b5:70:8c:e3:b5:75:7f:12:
f1:4c:ab:0a:72:b5:ca:25:bd:0b:b1:ca:e1:9a:b2:
5e:93:6e:4d:90:eb:1e:ca:49:56:fb:6b:16:5c:b4:
c9:09:1f:a1:32:0c:86:57:c0:10:50:3f:ed:e5:88:
39:b9:33:a2:76:cf:4f:5d:48:c8:0e:5d:04:19:e4:
2d:de:07:dc:30:ab:10:ea:86:f2:e2:df:2c:ab:08:
91:7a:17:77:63:e5:17:8a:b6:35:dc:6f:30:c0:f6:
d5:d9:93:b3:36:7c:e5:2f:fb:93:a3:59:13:39:07:
fc:82:f3:ad:0c:f0:ab:53:73:ae:ab:c1:2f:be:9f:
ef:fc:5d:7d:94:04:09:bc:3c:c5:2e:f6:dc:7a:f7:
1e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:EB:CE:EF:66:48:49:56:74:CD:08:F0:6E:27:72:9B:0E:84:8C:E6
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.26.0/24
Signature Algorithm: sha256WithRSAEncryption
18:b0:af:3b:ba:74:cc:d0:bf:82:f0:e3:29:c0:8b:1f:05:d6:
98:52:d9:f3:90:39:84:ad:d9:0a:50:fb:77:3d:8c:44:91:4a:
fa:f2:48:94:4f:0e:e5:22:d5:f8:e8:e6:ca:c0:a7:cc:2c:a6:
23:35:4d:d3:39:8b:21:6b:cf:bb:a7:d9:47:06:e5:33:0d:5c:
2a:49:67:5c:f2:43:9d:0c:ef:53:9d:7c:ad:34:91:31:a1:43:
b0:6e:e2:be:24:9f:70:cc:4f:59:cf:9f:38:e9:32:51:13:15:
3c:06:f5:89:bf:64:ef:9c:a9:eb:a4:c4:82:88:92:9e:26:47:
9a:2d:14:32:d3:f1:18:27:3a:74:dc:91:07:80:d4:15:a9:ad:
1a:ea:af:e1:d1:a6:50:ac:16:55:22:ae:51:2c:22:94:51:7c:
9f:6f:ba:ac:ce:f1:fb:42:50:c1:7a:b1:b8:36:61:49:d2:5a:
51:61:54:bb:55:3f:91:b6:28:65:86:e0:36:66:32:32:ae:ea:
c0:fa:c3:d5:54:81:00:52:27:8c:0b:74:00:a7:90:fd:b6:1c:
88:64:33:bc:99:0c:65:59:1e:b3:da:d3:2e:bc:e0:33:10:ae:
4c:ac:d2:5c:6d:c4:31:28:d5:39:f2:2e:c8:44:f1:2c:f9:52:
79:14:e6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:58:50 2026 by rpki-client