Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34312e302f32342d3234203d3e203232333633.roa
File: 33312e362e34312e302f32342d3234203d3e203232333633.roa (raw, json)
Hash identifier: eTmxCXa7y/GeP0eqrL49CpAhDbdVwnSeHL4CH07Gb3E=
Subject key identifier: A8:52:C3:7B:AF:4F:A4:49:C4:88:24:66:83:80:EF:CE:93:56:FA:85
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 3B48E29861FA702AD75614990DD92B7185EFC8A2
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34312e302f32342d3234203d3e203232333633.roa
Signing time: Mon 06 Jul 2026 07:48:56 +0000
ROA not before: Mon 06 Jul 2026 07:43:56 +0000
ROA not after: Mon 05 Jul 2027 07:48:56 +0000
asID: 22363
IP address blocks: 31.6.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:48:e2:98:61:fa:70:2a:d7:56:14:99:0d:d9:2b:71:85:ef:c8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jul 6 07:43:56 2026 GMT
Not After : Jul 5 07:48:56 2027 GMT
Subject: CN=A852C37BAF4FA449C48824668380EFCE9356FA85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7b:dc:93:71:2e:8d:36:97:d1:13:d3:1f:82:
42:39:73:90:19:73:ef:e4:cb:28:c8:72:a3:04:a0:
7f:f0:c0:74:51:79:af:91:b6:69:f0:8e:9b:9e:fc:
0f:b0:a2:e7:b7:ff:1e:70:63:d6:43:a6:e6:45:e7:
78:61:34:b3:04:ae:08:65:d1:9f:4d:67:c1:85:29:
86:6a:09:2e:3a:0b:43:17:81:0c:2d:63:65:6d:74:
c4:a1:b2:58:f7:9a:74:af:bf:46:b2:65:3f:ff:94:
f6:ef:c3:43:e8:22:e3:db:ab:a9:6f:49:d8:7c:21:
5f:f9:dd:23:f7:66:8f:1a:de:6b:85:11:11:36:4d:
76:08:9d:5b:0a:6c:f1:ad:1f:f1:ef:55:d1:3b:d3:
8b:28:93:80:47:76:ea:46:e8:ce:71:0e:27:30:ba:
c1:07:bb:17:93:b2:c0:99:97:c2:6d:96:d6:83:c3:
39:ef:73:3d:7e:9d:49:81:ca:b0:0e:50:83:bc:a9:
7c:d2:6a:41:fe:ad:29:6c:e6:3e:da:ad:10:ac:be:
7f:15:bf:c7:8f:5d:e2:04:02:be:99:63:5e:1a:73:
6a:1a:78:db:01:a9:9d:c2:9e:e1:8a:ad:d9:86:c9:
0b:09:02:79:2d:db:5e:68:e0:b7:d2:0b:cf:78:22:
94:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:52:C3:7B:AF:4F:A4:49:C4:88:24:66:83:80:EF:CE:93:56:FA:85
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34312e302f32342d3234203d3e203232333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.41.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:cd:d9:c0:37:e5:03:9b:63:a3:62:f3:e8:fe:bf:9b:8c:5b:
a2:73:66:17:0f:45:41:e7:99:0c:55:a5:c2:fb:72:90:93:44:
f3:8f:74:55:b7:da:37:fb:f0:8f:01:cc:7f:d4:9f:a7:00:98:
61:e1:01:bc:a2:8a:40:b4:ed:71:b2:68:c9:98:24:99:21:66:
2c:62:fb:21:bc:1f:fc:bd:6e:d8:90:8c:25:ca:d4:fd:d4:44:
7e:94:a1:4f:a6:d1:db:69:e2:ca:1f:69:d6:d0:84:2a:48:45:
8d:f6:47:dc:87:15:45:a2:f0:ac:85:e4:7e:df:89:76:28:c5:
64:5e:29:a0:34:df:a1:f0:2b:87:14:0b:a4:f2:cc:14:80:87:
36:58:dd:91:4e:15:a4:38:1d:42:0b:93:6a:c9:f6:12:c7:f0:
1e:c4:9f:73:58:1f:ad:7f:30:53:36:4c:4b:71:e5:0a:86:08:
9a:cf:05:75:69:1f:c1:d5:a0:46:ee:18:a6:de:e4:0e:6b:42:
74:3f:4e:70:14:32:46:c7:22:c4:c4:53:c4:1d:90:04:ca:08:
62:61:df:15:6a:b5:be:fe:de:c7:91:e1:7b:7b:7e:8e:d6:c0:
7f:e1:c1:65:c3:97:0b:f0:15:2b:92:bb:40:c4:3d:14:0b:4c:
ae:54:be:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:20:16 2026 by rpki-client