Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32382e302f32332d3233203d3e20313938333833.roa
File: 33312e362e32382e302f32332d3233203d3e20313938333833.roa (raw, json)
Hash identifier: +HsYq3lNUdiE3XxCzSjCdYGI0upDR/hm3ILZUEk4xLY=
Subject key identifier: FE:D5:28:25:1B:CF:B2:8F:A9:F6:FE:81:E5:02:4C:67:D8:41:A4:90
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 0DE3706CDA72796F234CE1F158BBF9EA9D4983E3
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32382e302f32332d3233203d3e20313938333833.roa
Signing time: Mon 27 Apr 2026 07:08:07 +0000
ROA not before: Mon 27 Apr 2026 07:03:07 +0000
ROA not after: Mon 26 Apr 2027 07:08:07 +0000
asID: 198383
IP address blocks: 31.6.28.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 19:49:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:e3:70:6c:da:72:79:6f:23:4c:e1:f1:58:bb:f9:ea:9d:49:83:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Apr 27 07:03:07 2026 GMT
Not After : Apr 26 07:08:07 2027 GMT
Subject: CN=FED528251BCFB28FA9F6FE81E5024C67D841A490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:63:72:87:b0:08:b9:60:46:db:69:59:66:47:
8b:54:5b:96:25:9f:06:21:de:0d:8b:37:36:61:52:
de:68:7d:68:40:62:cc:1c:b4:61:ac:20:96:f0:1a:
56:e6:f6:85:54:cc:1d:0b:d6:cf:02:4d:56:17:8b:
87:35:43:ab:18:bf:b8:7c:fa:c4:58:ed:7e:b4:17:
d3:e5:e1:6e:9a:c7:c7:89:78:11:f5:33:6d:c7:dc:
24:78:c7:92:54:b8:23:d0:5f:64:51:5b:75:88:e5:
c2:9a:88:af:bc:2e:23:3f:f1:87:97:ac:70:06:43:
ef:ec:53:cf:34:21:ab:ca:99:cb:72:4b:b3:1a:84:
c5:cc:46:8e:eb:e6:e9:58:a9:7d:71:46:41:be:e6:
13:21:15:4e:ef:50:8d:7f:5d:7b:d2:ae:d1:c0:47:
e8:45:c0:05:70:75:de:6b:aa:b1:f5:42:52:ea:02:
5d:52:99:1e:de:10:11:38:e4:5e:ed:b3:1c:ca:29:
4f:00:69:70:44:5e:2b:75:25:95:dc:33:ef:3b:35:
0f:cc:26:67:9e:25:97:8c:f7:44:43:2c:37:5e:31:
d6:26:d0:46:66:40:23:56:10:b5:bc:b4:6b:52:eb:
cb:70:04:36:ad:ca:42:db:cc:04:9b:b2:84:bf:59:
58:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D5:28:25:1B:CF:B2:8F:A9:F6:FE:81:E5:02:4C:67:D8:41:A4:90
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32382e302f32332d3233203d3e20313938333833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.28.0/23
Signature Algorithm: sha256WithRSAEncryption
49:b9:41:e0:71:fe:1a:01:db:11:b0:66:a5:43:16:6d:02:c0:
70:71:5c:16:32:09:f0:50:54:a5:f4:90:b3:26:4d:f8:cf:c0:
16:7e:89:89:4a:81:73:b9:13:0a:b4:d4:38:44:33:6b:e0:92:
b0:76:b5:30:12:8b:c0:bd:1a:8e:c3:1c:0c:68:47:f2:51:01:
e4:e6:a1:ad:31:2b:73:05:c7:4d:7a:61:80:69:ba:c8:85:fe:
5a:ad:a6:8c:3b:4d:0f:67:26:4d:3c:a0:05:01:d9:0f:cf:56:
ba:74:0e:e4:90:57:4b:7d:21:43:14:84:db:c9:3e:0c:e4:1c:
c1:23:f4:88:ff:3d:09:c8:a4:3b:2c:12:96:4c:77:16:ad:51:
dc:b7:2e:5a:70:6f:c1:e8:c0:be:5c:0f:02:cc:79:34:fc:d5:
d8:83:57:f3:1e:a4:84:d1:b5:28:78:0c:27:fe:69:c1:59:28:
39:58:a2:8a:b9:fb:10:cf:d2:ff:89:4f:e9:ac:c0:bb:6d:34:
9e:e3:a0:16:4c:f9:6b:7e:67:4e:e6:b9:3a:d0:e6:87:a7:d5:
0e:00:92:f1:02:f6:06:3d:bd:f0:59:0b:c7:97:93:34:16:c7:
89:d0:62:30:5c:c1:aa:63:e3:c3:fe:41:e6:26:61:33:58:2a:
fe:8d:a8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 10:05:14 2026 by rpki-client