Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34312e302f32342d3234203d3e203430383631.roa
File: 33312e362e34312e302f32342d3234203d3e203430383631.roa (raw, json)
Hash identifier: igAD4WUaoBe2tiK3mF81kBXXb9/jd9/ml29E6kv7K54=
Subject key identifier: CC:0E:31:5B:22:7F:B7:07:90:3C:D3:9C:59:07:2B:07:0C:2B:FA:E3
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 148B9E47EFD4999C1A9D0D949FE0E05FE49DB3C8
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34312e302f32342d3234203d3e203430383631.roa
Signing time: Fri 31 Jul 2026 16:49:16 +0000
ROA not before: Fri 31 Jul 2026 16:44:16 +0000
ROA not after: Fri 30 Jul 2027 16:49:16 +0000
asID: 40861
IP address blocks: 31.6.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:8b:9e:47:ef:d4:99:9c:1a:9d:0d:94:9f:e0:e0:5f:e4:9d:b3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jul 31 16:44:16 2026 GMT
Not After : Jul 30 16:49:16 2027 GMT
Subject: CN=CC0E315B227FB707903CD39C59072B070C2BFAE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0e:b9:37:bc:aa:41:1e:8d:c2:b8:e6:cc:03:
43:01:3d:ab:84:c6:96:0a:10:73:df:ab:a9:38:33:
fc:59:2d:06:d6:2f:e0:ea:5c:c5:14:e4:bc:ac:4b:
94:f6:1b:23:86:1f:86:4e:44:d1:a6:45:bb:2c:47:
81:29:54:16:c3:2a:20:21:8b:78:f6:55:ed:8b:0f:
13:e5:3a:05:de:a0:a7:3b:e6:ac:aa:66:78:cd:3b:
39:ee:6f:f8:ae:1c:42:03:4a:1b:47:14:21:d0:6f:
56:99:1f:f9:18:cb:71:09:4b:f3:4f:4f:f6:34:98:
df:f3:64:21:f2:76:7f:f7:f5:44:8d:e6:50:6b:ed:
39:05:50:52:de:5e:0b:6f:4e:0f:f5:5c:80:64:ad:
d7:b1:f4:14:b4:99:cd:8f:a9:30:59:84:b7:af:a9:
a4:98:ed:2e:e0:30:bc:37:a6:a7:1f:43:77:fc:3b:
2b:e3:3f:9e:7d:20:7f:a1:50:7f:9f:07:2a:71:9a:
e1:0d:c4:72:44:d8:82:99:f2:df:08:7f:61:b0:86:
e0:ee:f6:1c:c5:41:84:4a:a6:6f:cf:c2:d2:fd:f8:
6b:73:59:ff:85:68:23:7b:34:07:4c:6b:41:df:c9:
c1:e9:4b:43:5f:b2:88:6b:2b:e3:43:5e:be:53:81:
7f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0E:31:5B:22:7F:B7:07:90:3C:D3:9C:59:07:2B:07:0C:2B:FA:E3
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34312e302f32342d3234203d3e203430383631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.41.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:de:47:35:aa:4b:df:aa:12:27:b9:a4:cb:db:a5:92:e9:68:
ec:46:79:d1:3c:d2:df:10:0c:a7:d4:80:c1:f9:75:11:33:f9:
1f:e6:20:f4:53:eb:69:00:10:f1:95:d2:e1:21:22:87:29:d3:
22:38:19:44:ab:82:63:0f:e4:92:45:c7:6b:b6:76:57:65:32:
e2:f6:27:5f:ef:5d:a5:dc:5c:71:6c:98:06:8d:b9:98:20:70:
87:9a:c8:6e:13:51:ae:cb:e7:05:81:f4:76:96:ea:1b:b9:50:
f1:59:47:50:74:9f:43:ec:b2:15:c5:9e:54:42:69:c5:78:1c:
0c:32:1b:22:88:a7:eb:10:56:38:9a:ba:3b:f8:18:b0:41:fd:
e6:13:d8:00:e1:2c:62:47:35:8d:07:f6:dd:d1:15:39:b4:08:
5e:04:28:fd:d1:49:4d:b1:e2:a3:f5:40:4a:09:f8:92:13:95:
56:a9:53:27:4e:b1:79:fd:7c:80:03:33:73:99:11:fa:62:76:
4f:3b:d1:bf:9d:d8:77:2b:96:5f:40:9d:39:a0:7e:18:9d:f2:
f4:c2:43:84:a7:7a:b5:fa:be:df:41:66:ba:d4:46:bf:28:1a:
73:3f:0a:01:70:ad:26:24:a2:62:99:e7:45:6c:d9:17:1d:a2:
5e:53:ea:3a
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUFIueR+/UmZwanQ2Un+DgX+Sds8gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNjA3MzExNjQ0MTZaFw0yNzA3MzAxNjQ5MTZaMDMxMTAvBgNV
BAMTKENDMEUzMTVCMjI3RkI3MDc5MDNDRDM5QzU5MDcyQjA3MEMyQkZBRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSDrk3vKpBHo3CuObMA0MBPauE
xpYKEHPfq6k4M/xZLQbWL+DqXMUU5LysS5T2GyOGH4ZORNGmRbssR4EpVBbDKiAh
i3j2Ve2LDxPlOgXeoKc75qyqZnjNOznub/iuHEIDShtHFCHQb1aZH/kYy3EJS/NP
T/Y0mN/zZCHydn/39USN5lBr7TkFUFLeXgtvTg/1XIBkrdex9BS0mc2PqTBZhLev
qaSY7S7gMLw3pqcfQ3f8OyvjP559IH+hUH+fBypxmuENxHJE2IKZ8t8If2GwhuDu
9hzFQYRKpm/PwtL9+GtzWf+FaCN7NAdMa0HfycHpS0NfsohrK+NDXr5TgX8dAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUzA4xWyJ/tweQPNOcWQcrBwwr+uMwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM0MzEyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMwMzgzNjMxLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHwYpMA0G
CSqGSIb3DQEBCwUAA4IBAQBf3kc1qkvfqhInuaTL26WS6WjsRnnRPNLfEAyn1IDB
+XURM/kf5iD0U+tpABDxldLhISKHKdMiOBlEq4JjD+SSRcdrtnZXZTLi9idf712l
3FxxbJgGjbmYIHCHmshuE1Guy+cFgfR2luobuVDxWUdQdJ9D7LIVxZ5UQmnFeBwM
MhsiiKfrEFY4mro7+BiwQf3mE9gA4SxiRzWNB/bd0RU5tAheBCj90UlNseKj9UBK
CfiSE5VWqVMnTrF5/XyAAzNzmRH6YnZPO9G/ndh3K5ZfQJ05oH4YnfL0wkOEp3q1
+r7fQWa61Ea/KBpzPwoBcK0mJKJimedFbNkXHaJeU+o6
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:02:26 2026 by rpki-client