Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32372e302f32342d3234203d3e20383334.roa
File: 33312e362e32372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: yWvx1lgC48AskOYLV1SEe9p6QIgsw2IiARVZUMKeMas=
Subject key identifier: C5:C5:4A:61:E1:90:C3:90:D4:7B:2F:14:02:62:EA:97:D7:FC:43:B4
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 1D3CD13DBEBD94589270CD07F9EA9CA4321E08EE
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32372e302f32342d3234203d3e20383334.roa
Signing time: Mon 10 Aug 2026 00:00:38 +0000
ROA not before: Sun 09 Aug 2026 23:55:38 +0000
ROA not after: Mon 09 Aug 2027 00:00:38 +0000
asID: 834
IP address blocks: 31.6.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 07:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:3c:d1:3d:be:bd:94:58:92:70:cd:07:f9:ea:9c:a4:32:1e:08:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Aug 9 23:55:38 2026 GMT
Not After : Aug 9 00:00:38 2027 GMT
Subject: CN=C5C54A61E190C390D47B2F140262EA97D7FC43B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1b:7b:1c:7d:93:93:ca:37:ce:12:56:de:c1:
e3:4f:4c:35:17:6b:db:20:df:eb:5d:2f:1e:11:06:
5e:d3:74:10:8e:38:99:6b:6c:5c:dc:f1:a7:b0:6f:
82:b3:4a:5c:ca:01:24:96:53:3f:9b:7b:45:4c:27:
a0:14:e1:0a:02:98:d7:67:90:88:63:a4:f4:9d:db:
2d:a2:04:ca:8b:fc:4d:37:8d:ee:a3:8e:eb:a2:95:
b0:8f:2c:62:2c:bb:4d:18:99:5c:74:2a:38:bb:5a:
5b:27:06:6c:6c:57:81:d2:68:0d:43:57:5d:15:a8:
55:1a:75:3b:88:fb:47:cf:df:08:42:51:02:e0:8a:
b5:4d:b5:45:8c:9d:3b:80:96:78:34:49:f3:56:85:
87:dc:d7:a5:3d:05:54:bf:a0:98:8c:56:50:e3:00:
e6:7d:c9:31:a5:95:a4:8e:90:9b:9b:8b:9f:e3:37:
c3:a5:a5:e8:f9:7c:24:0b:48:a0:b6:46:97:56:41:
98:7f:bd:6e:3f:af:cc:36:70:70:a8:90:95:00:a9:
b8:ea:73:83:80:f0:d6:c0:e5:53:9c:89:41:60:d9:
e7:6d:15:1a:3e:da:f4:24:b8:e1:8c:8c:4c:fc:11:
20:2f:bb:a4:c2:e9:b1:31:a6:df:4f:f5:9b:43:a3:
a1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C5:4A:61:E1:90:C3:90:D4:7B:2F:14:02:62:EA:97:D7:FC:43:B4
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.27.0/24
Signature Algorithm: sha256WithRSAEncryption
71:a1:67:07:d1:4d:b1:cb:c9:92:d5:b9:25:b4:4c:2f:9b:12:
8e:07:97:d2:1c:79:ed:41:8d:29:fc:8b:a8:f2:65:37:b8:74:
85:d2:f2:15:a0:dd:8e:e1:34:9d:45:fa:ad:c7:3d:0e:c1:95:
43:d9:a1:59:fa:6f:ad:49:24:90:4a:12:74:6a:49:37:f8:9a:
56:d6:bc:7e:95:d5:04:16:d1:68:69:85:db:57:cc:db:4a:75:
de:60:05:98:b3:a2:c6:72:02:e6:7c:96:5a:d7:b9:17:43:4b:
cf:40:30:fd:57:ea:1e:19:41:76:8f:f7:4e:00:b8:42:91:3f:
4e:b5:60:5f:24:ee:3e:21:b7:a3:fa:fd:06:52:2b:c5:7c:2b:
92:86:b2:f3:94:b4:47:f6:38:d1:c6:d4:6f:4c:66:ee:b6:07:
23:7c:1b:9a:b8:bc:a6:1a:0e:59:c3:92:b8:a2:b0:4d:bc:05:
08:f8:f6:c5:ab:aa:e2:5d:6a:21:e7:d9:73:65:fd:0c:09:53:
35:b6:59:9d:46:c8:ca:c2:92:97:9c:2e:33:51:e5:09:99:3c:
56:67:37:59:09:b5:37:43:ef:be:d6:f4:de:77:9e:32:82:83:
80:20:3f:34:70:cc:55:a6:43:09:83:aa:7e:b2:74:64:99:28:
1c:74:e3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:20:16 2026 by rpki-client