Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33362e302f32342d3234203d3e20323035353434.roa
File: 33312e362e33362e302f32342d3234203d3e20323035353434.roa (raw, json)
Hash identifier: z0IUwZObCZCVKDruQNUO+dRlf0TQ16Ztz/LL/TEFVMA=
Subject key identifier: F5:A1:63:EE:EC:5C:83:DB:B4:33:2F:E8:32:45:74:9C:8F:8F:06:83
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 12A4D44DC9CE2DD4C03B84C2172756DEBCF1BDE2
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33362e302f32342d3234203d3e20323035353434.roa
Signing time: Wed 21 Oct 2026 11:39:57 +0000
ROA not before: Wed 21 Oct 2026 11:34:57 +0000
ROA not after: Wed 20 Oct 2027 11:39:57 +0000
asID: 205544
IP address blocks: 31.6.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 06:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:a4:d4:4d:c9:ce:2d:d4:c0:3b:84:c2:17:27:56:de:bc:f1:bd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 21 11:34:57 2026 GMT
Not After : Oct 20 11:39:57 2027 GMT
Subject: CN=F5A163EEEC5C83DBB4332FE83245749C8F8F0683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:f3:53:6c:81:43:89:8d:57:ee:92:66:91:
ae:f8:99:86:f2:bc:27:3e:d9:90:e9:e2:6d:89:9b:
6a:0e:81:f0:c5:3d:34:10:97:dc:56:9d:23:cf:ae:
72:01:b6:87:fc:22:af:d8:df:33:c6:3b:5e:6a:3e:
ce:1f:3d:d4:47:d9:a9:b9:61:6d:77:1a:7b:f0:2c:
53:42:31:a3:34:e7:e9:74:12:3f:38:42:04:12:00:
0e:3c:dc:9a:ad:13:5e:13:5f:95:2d:73:3c:59:17:
d7:c7:b7:fc:3c:6a:2d:40:af:c6:c9:f7:ea:b5:0b:
d9:2a:ae:1f:2d:ac:92:31:bf:b9:60:4f:02:87:a3:
05:06:5a:f3:76:59:b7:6e:a9:1c:ac:6f:33:e7:7c:
c6:cc:f8:84:f3:f4:94:cb:13:88:a5:da:5f:cd:f9:
12:41:e3:07:0d:9f:50:20:c4:ba:68:ad:ed:e7:f4:
4b:4d:6c:65:5f:18:64:7e:88:bb:2f:db:1d:42:50:
da:40:77:62:27:73:72:08:e6:f3:af:82:5f:b1:8c:
54:9a:1a:0e:19:31:29:dc:59:ae:ba:a3:42:bf:2f:
b9:47:d1:ae:5c:e7:e0:7c:a1:e5:13:0e:5f:df:0e:
d6:b0:39:43:29:f2:9e:b8:88:0c:d3:ce:29:b5:07:
f6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A1:63:EE:EC:5C:83:DB:B4:33:2F:E8:32:45:74:9C:8F:8F:06:83
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33362e302f32342d3234203d3e20323035353434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.36.0/24
Signature Algorithm: sha256WithRSAEncryption
64:28:90:45:80:ed:be:f6:a7:13:2f:07:c3:d1:e9:09:79:ef:
e8:3e:ad:38:c8:8e:a4:ea:17:fa:de:a7:75:e7:b3:3d:61:03:
9b:2f:e1:31:96:5f:2f:5f:59:a3:eb:f8:91:4c:37:a7:32:e1:
e6:d8:4f:69:44:36:6a:ff:c9:5b:d5:44:e8:50:1c:71:66:07:
73:12:88:7a:c1:8c:dc:fd:62:8d:5d:f1:5b:3b:1c:80:d8:e0:
c5:6e:00:d8:a8:1e:2c:60:6d:46:90:c1:4b:48:84:23:86:8e:
11:3b:6c:45:59:02:e2:9f:e1:13:11:f4:d3:04:59:9f:21:72:
64:00:aa:0e:5b:2b:ed:58:b0:dc:f6:96:4d:ca:c6:0c:79:2d:
a1:bb:b0:d1:92:90:80:a2:83:ab:34:ff:15:14:c5:a7:ae:1c:
0f:53:21:2f:18:30:85:cd:a4:2e:87:39:dd:5c:49:df:33:73:
35:12:d0:2c:da:ff:3e:5d:1b:01:7c:dd:17:d1:3c:3c:83:1a:
9f:ad:3f:ed:51:19:b0:d4:a4:5b:d7:1a:f7:52:c7:cb:04:10:
9e:d4:82:24:64:ed:9f:cb:eb:6b:9a:de:c7:bc:e3:c7:97:ab:
c0:c6:1b:b8:b7:1c:2c:75:b1:e2:89:e4:be:d1:df:ab:a0:73:
3c:d5:50:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 17:39:15 2026 by rpki-client