Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34322e302f32342d3234203d3e203232333633.roa
File: 33312e362e34322e302f32342d3234203d3e203232333633.roa (raw, json)
Hash identifier: 0FSKVeDfJ5bpofSVRcB1uR5D756oorcBJ2+LkxMekcU=
Subject key identifier: B7:C0:D5:E8:2C:70:6F:56:ED:CB:B5:C9:95:6A:AE:EC:49:A7:00:42
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 65C89DA60834865CAF4E14F7F915FD1DA6F54504
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34322e302f32342d3234203d3e203232333633.roa
Signing time: Mon 06 Jul 2026 07:48:56 +0000
ROA not before: Mon 06 Jul 2026 07:43:56 +0000
ROA not after: Mon 05 Jul 2027 07:48:56 +0000
asID: 22363
IP address blocks: 31.6.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:c8:9d:a6:08:34:86:5c:af:4e:14:f7:f9:15:fd:1d:a6:f5:45:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jul 6 07:43:56 2026 GMT
Not After : Jul 5 07:48:56 2027 GMT
Subject: CN=B7C0D5E82C706F56EDCBB5C9956AAEEC49A70042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5c:66:a9:35:9d:75:69:a5:b6:ed:ba:0c:e9:
71:66:fe:70:2d:50:36:86:94:6d:44:9b:31:ec:ed:
d0:d7:d1:ef:05:ee:a7:63:bf:12:f3:b0:48:ab:10:
77:7a:a6:89:d1:2b:c5:e0:06:d2:88:d0:7d:35:a3:
a9:a1:a3:9b:a6:90:ef:21:c0:2e:fb:8d:f5:66:b1:
dc:07:e8:ee:a7:ab:5b:ee:0a:eb:ad:d1:0e:64:ba:
5b:fa:65:bc:b1:52:de:eb:27:47:28:b3:c4:ca:dc:
ee:62:40:ba:b2:01:34:92:91:c3:d6:6e:03:4c:dc:
31:47:6c:eb:94:c9:91:69:af:22:0b:c7:9b:35:ed:
2f:b1:4d:a5:d5:c1:57:62:ac:8c:22:a0:f9:b1:30:
f0:78:af:38:81:52:37:ff:35:0a:e4:fc:a6:dd:2c:
03:3b:04:84:1d:8e:1c:64:5a:fb:db:38:d0:c5:09:
31:a5:0f:b0:92:c0:76:50:3c:3a:57:14:be:30:be:
35:bd:2e:3a:e8:11:91:e5:64:c9:4b:ad:69:a2:54:
26:20:0b:fe:0b:4e:df:c1:29:58:f9:57:c0:e5:dc:
e7:59:87:bb:8e:24:19:23:79:a3:15:9d:70:01:9c:
73:79:8c:d0:be:5a:02:15:ee:ac:0b:6d:e3:ef:05:
92:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C0:D5:E8:2C:70:6F:56:ED:CB:B5:C9:95:6A:AE:EC:49:A7:00:42
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34322e302f32342d3234203d3e203232333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.42.0/24
Signature Algorithm: sha256WithRSAEncryption
80:1b:46:2a:1e:76:d7:06:d9:70:1c:c6:03:28:66:26:6c:94:
b1:86:6b:64:33:c0:7c:aa:99:cf:d5:9f:41:7c:16:03:c9:be:
ce:f1:7b:05:75:b6:dd:cd:d1:7b:87:7f:11:1f:5c:21:7a:ec:
ba:fa:26:b0:7b:0e:19:12:5e:e5:0c:bd:9f:2b:03:46:f5:4f:
e1:fc:3c:4a:99:09:aa:a6:3b:f0:71:40:ac:75:ab:c9:a5:00:
4a:22:0f:4d:2f:9d:36:db:11:f5:39:08:73:38:8d:3c:0c:93:
e5:ac:4c:45:8f:8a:61:87:7d:19:13:76:1a:81:45:52:25:67:
0e:6c:4c:58:cb:23:7d:85:f8:45:9d:42:b2:bc:ad:79:ba:cd:
3b:7d:27:76:f1:dc:8a:de:31:71:0a:3b:5f:6a:63:e4:50:6d:
ce:5b:40:fb:07:94:58:53:51:e6:7d:e1:70:e0:30:c2:91:ba:
6c:94:79:9d:3f:af:ef:e8:71:ed:eb:bb:a2:93:30:50:7d:25:
3b:e7:23:4c:59:9f:b4:26:78:8e:ce:88:b0:ee:a2:9e:18:34:
cd:93:58:7a:db:53:02:57:86:fd:b0:dd:aa:ae:8a:dc:b6:27:
3d:ea:08:a6:03:46:70:7f:10:b9:d5:79:ab:fb:b7:c1:41:70:
d1:2c:82:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:19:51 2026 by rpki-client