Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33332e302f32342d3234203d3e20323037313538.roa
File: 33312e362e33332e302f32342d3234203d3e20323037313538.roa (raw, json)
Hash identifier: yBfk7FFvhFpxLP5g0vGPVJVW/stCLUarQ3pJqb4Nz/E=
Subject key identifier: 1B:D3:F7:CF:22:BC:8B:67:A4:73:AE:7E:02:EF:4F:73:B1:29:B2:D3
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 25DADDD63D3181864F9E9BF009D177542962A45E
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33332e302f32342d3234203d3e20323037313538.roa
Signing time: Fri 05 Jun 2026 09:51:00 +0000
ROA not before: Fri 05 Jun 2026 09:46:00 +0000
ROA not after: Fri 04 Jun 2027 09:51:00 +0000
asID: 207158
IP address blocks: 31.6.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:56:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:da:dd:d6:3d:31:81:86:4f:9e:9b:f0:09:d1:77:54:29:62:a4:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jun 5 09:46:00 2026 GMT
Not After : Jun 4 09:51:00 2027 GMT
Subject: CN=1BD3F7CF22BC8B67A473AE7E02EF4F73B129B2D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8b:4b:f2:89:6a:3b:81:2c:c7:05:3f:9d:10:
88:2f:6a:00:f9:69:f1:99:9b:c0:f0:82:3a:b0:73:
4d:c0:c6:60:06:45:86:ea:8f:fe:d8:45:1d:98:cd:
4e:fb:aa:b6:66:f8:a0:7f:89:6c:6d:f6:eb:45:8c:
00:88:7d:c6:f5:a8:05:a8:f9:7e:73:a2:84:5b:04:
41:62:c6:43:e0:6d:cf:5c:c5:65:60:1b:8f:e1:4d:
12:1f:81:a3:b0:d8:69:68:9e:e3:d2:67:70:69:83:
0e:eb:15:5f:41:e3:46:37:3a:ca:08:01:04:c5:a1:
71:85:bc:8e:57:79:d2:0b:bc:2d:13:a4:83:bd:ca:
ba:5e:f0:16:a9:92:4f:71:b8:90:3b:0d:8a:2d:c9:
4f:df:23:53:9b:c9:d1:4b:0c:9c:20:59:ec:9a:d5:
58:19:a2:35:cd:ab:42:b4:61:a8:bf:77:8d:2b:0d:
78:65:a6:b9:9d:36:8c:69:33:24:6c:ee:f2:0f:9b:
da:b0:27:38:75:10:0d:15:23:12:75:5d:03:03:f7:
39:1a:f0:c6:75:9d:95:da:71:f9:66:6e:c3:2c:c3:
aa:67:00:db:97:b6:4a:6a:a7:81:e7:c8:fa:5c:f7:
d3:24:42:82:64:06:f9:09:c1:31:b2:04:0f:c5:29:
d7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D3:F7:CF:22:BC:8B:67:A4:73:AE:7E:02:EF:4F:73:B1:29:B2:D3
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33332e302f32342d3234203d3e20323037313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.33.0/24
Signature Algorithm: sha256WithRSAEncryption
54:04:2a:d3:68:9a:bb:8e:e4:b1:bd:10:6e:f5:e9:e7:14:70:
40:04:7f:57:c3:39:c9:2d:92:ea:bb:51:ce:3c:94:dc:de:12:
7f:98:51:7c:5e:8e:28:3e:00:58:46:82:75:78:af:b4:11:35:
f5:c3:b8:ce:fb:51:c5:24:34:3c:23:18:8b:28:2a:85:33:44:
37:7e:fd:a2:f9:81:9f:95:3c:48:37:27:b5:7c:cc:b1:c0:c7:
f7:f4:24:68:73:f4:81:1a:82:3f:55:a7:cd:9f:75:2e:af:cc:
12:28:9f:3d:38:4d:6d:9c:97:ea:ff:b1:19:db:fc:5f:d0:c5:
e3:ab:28:bd:e5:0e:2a:bb:b1:4d:4a:d5:e7:5e:1c:97:61:04:
de:b7:d1:54:c1:1a:7a:a1:a3:74:c6:c0:41:1c:1b:bc:50:78:
4b:9f:af:7e:66:c5:b8:6f:78:ae:51:95:a9:28:e5:ad:65:dd:
25:dc:47:37:8d:ee:0f:d3:f5:74:df:f0:20:d1:29:ce:18:67:
70:08:6d:59:c7:8a:53:8e:2a:5e:31:cb:7c:2c:7d:a2:d9:61:
07:3e:27:ef:bd:bd:77:2c:ce:3b:d6:41:28:a0:67:45:cf:fe:
9a:f3:52:ff:a2:82:37:8d:c3:86:8f:6e:9d:a5:18:00:88:87:
e5:52:c6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:04 2026 by rpki-client