Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33332e302f32342d3234203d3e20323035353032.roa
File: 33312e362e33332e302f32342d3234203d3e20323035353032.roa (raw, json)
Hash identifier: p2DF2GvCLs5QhC/y66VWTYqBCjgyQngnOk1Ru0yhpv4=
Subject key identifier: B8:A7:33:52:92:AC:5D:B3:21:45:FB:5D:08:61:70:4D:25:DE:D6:02
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 7CC4A88DC0D186D701A49C464D2D17F60F248E1A
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33332e302f32342d3234203d3e20323035353032.roa
Signing time: Fri 05 Jun 2026 05:27:25 +0000
ROA not before: Fri 05 Jun 2026 05:22:25 +0000
ROA not after: Fri 04 Jun 2027 05:27:25 +0000
asID: 205502
IP address blocks: 31.6.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:c4:a8:8d:c0:d1:86:d7:01:a4:9c:46:4d:2d:17:f6:0f:24:8e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jun 5 05:22:25 2026 GMT
Not After : Jun 4 05:27:25 2027 GMT
Subject: CN=B8A7335292AC5DB32145FB5D0861704D25DED602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:d8:cc:ea:71:af:d5:ce:94:a4:6c:16:d5:
44:ab:bb:d5:52:d1:f1:d0:0e:6e:5a:d2:72:93:fe:
31:ef:11:90:9b:ba:27:43:f9:8e:4f:cf:54:79:32:
ae:55:66:65:03:40:76:03:32:bf:2b:34:e5:1e:c2:
c1:53:3f:d6:9f:4e:a4:1d:37:f8:f3:ed:5f:32:e5:
0f:f5:d0:d7:b1:76:1e:3e:93:92:56:c3:22:a1:6d:
bf:00:f8:8b:a5:dd:e4:39:05:63:5e:0f:95:30:aa:
33:c6:05:01:da:dd:cc:d6:69:52:57:f4:0c:6e:2b:
36:cb:60:67:5f:d4:86:e4:b0:b8:df:5f:57:9f:d8:
6b:cf:3e:44:2a:e1:c8:a1:51:7a:c3:bd:1b:9c:ca:
1f:b5:f1:a8:df:53:9e:e4:fe:63:39:d9:87:a4:e4:
44:75:20:85:dd:9b:26:44:bc:4d:c3:36:d3:60:3b:
1b:b4:06:78:4e:56:05:ca:44:be:0e:92:ae:c3:59:
eb:61:ea:73:90:11:d9:82:31:99:82:12:05:25:bb:
18:96:0c:c7:16:f7:84:c4:cf:71:59:34:1e:47:fe:
ff:59:83:e4:f7:64:2b:d0:83:0f:19:bf:bd:87:af:
77:93:d3:fe:37:20:44:3a:47:2a:e6:c4:98:d8:23:
9e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A7:33:52:92:AC:5D:B3:21:45:FB:5D:08:61:70:4D:25:DE:D6:02
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33332e302f32342d3234203d3e20323035353032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.33.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:d9:40:77:4d:d5:39:95:f8:8e:dd:63:83:ad:36:65:7d:76:
11:04:00:d1:a4:7e:bf:77:7c:59:d5:03:42:4f:26:1f:db:44:
d4:d5:fb:21:ec:c3:76:bb:f1:c3:48:01:31:ec:a0:c2:1b:a2:
24:ed:88:cc:5a:91:2f:61:3b:f1:13:2a:27:e0:0e:22:fc:9e:
39:5a:9e:ff:52:ce:bc:9e:eb:b3:57:4d:34:7b:b6:3f:5b:aa:
08:47:1b:1e:82:d3:27:e2:83:5d:45:ae:c1:65:84:d9:b8:49:
9c:9d:b1:b3:2d:80:36:28:00:c3:ab:12:f1:9c:17:69:61:44:
4b:1c:d5:f9:38:14:5a:d9:09:b8:1d:e3:a3:3a:15:58:14:ea:
8b:54:4a:c9:3d:a1:01:d7:eb:f1:7b:e0:02:65:18:19:45:e4:
cf:90:c3:e8:31:ac:55:e8:a3:31:c2:0f:00:41:c0:b3:37:d0:
c2:33:83:77:97:ae:dd:0f:65:63:8f:c0:e4:ad:77:8d:eb:5f:
5b:80:7a:f7:6c:9b:2b:71:2b:f6:a5:65:11:e6:13:3b:b1:0d:
fc:02:a4:f2:46:26:de:15:4b:d4:76:c2:b5:1e:4a:2d:78:dd:
cc:4f:d3:46:01:08:f6:20:1d:7b:63:4e:a7:82:32:4b:77:e5:
38:f3:c7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:49:23 2026 by rpki-client