Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34322e302f32342d3234203d3e203430383631.roa
File: 33312e362e34322e302f32342d3234203d3e203430383631.roa (raw, json)
Hash identifier: phSmiB3ji7TBUM+pvGHVowfWpbHLyuCNtRfpK4Iy0lE=
Subject key identifier: A8:3B:D8:16:C3:7E:37:3B:1C:08:9D:07:C9:4D:78:E2:44:2D:6B:A8
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 372B2B88F501F166B2F1C38640B8B6C962A28A69
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34322e302f32342d3234203d3e203430383631.roa
Signing time: Fri 31 Jul 2026 16:49:16 +0000
ROA not before: Fri 31 Jul 2026 16:44:16 +0000
ROA not after: Fri 30 Jul 2027 16:49:16 +0000
asID: 40861
IP address blocks: 31.6.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:2b:2b:88:f5:01:f1:66:b2:f1:c3:86:40:b8:b6:c9:62:a2:8a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jul 31 16:44:16 2026 GMT
Not After : Jul 30 16:49:16 2027 GMT
Subject: CN=A83BD816C37E373B1C089D07C94D78E2442D6BA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:dc:87:14:90:ed:77:ee:bc:76:8d:90:bc:8a:
2d:53:f0:9f:67:2a:b5:66:72:74:ee:05:4d:d8:0b:
c0:88:3e:b2:73:14:50:a7:74:04:f4:60:92:6d:8c:
9a:81:b0:ab:04:e4:99:e2:86:9d:db:f2:2d:bb:68:
aa:d5:8c:a2:23:ce:4b:1d:d9:d5:a9:d0:7c:fa:ad:
46:15:72:b1:8b:ff:2e:40:d6:02:bf:e6:87:b9:8e:
1c:f8:01:88:d1:e3:c5:72:07:75:7f:22:11:bb:52:
55:32:79:95:1d:c3:28:f2:d8:a8:bf:8c:46:28:35:
4a:f1:37:8b:2b:90:52:3e:46:25:c0:07:3c:69:60:
ee:83:50:71:7a:16:66:fa:a6:69:cb:94:e4:5d:eb:
7f:28:20:87:e1:5f:d0:e2:30:73:b4:04:7d:a5:17:
67:e7:94:cb:30:af:fa:14:17:81:67:e0:03:0f:f7:
2c:24:b0:a9:c5:9e:3c:b7:e9:48:b7:11:55:66:b9:
15:cf:1b:fb:01:01:f3:8b:02:4b:71:b1:ab:42:17:
7f:10:e1:be:a7:9d:d1:bf:ea:96:d7:f7:b3:65:31:
33:84:ca:bd:2e:2b:24:15:8d:c2:67:10:13:fd:d9:
e8:0f:fe:f1:47:f8:b8:c8:95:40:21:4f:23:76:77:
c7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3B:D8:16:C3:7E:37:3B:1C:08:9D:07:C9:4D:78:E2:44:2D:6B:A8
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34322e302f32342d3234203d3e203430383631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.42.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:38:2d:c0:b2:8d:cf:ef:11:91:cc:da:c6:fc:f3:6c:b2:d7:
2c:03:61:fb:ef:33:ce:e8:26:e6:17:93:a2:ea:db:ae:77:54:
49:9b:51:21:72:af:07:98:47:34:4c:7c:5d:80:d6:56:f7:83:
88:27:5d:d4:c3:94:2a:4b:27:0a:04:18:1b:1b:8e:6f:41:34:
6e:10:67:27:19:84:ef:4d:44:03:7a:84:45:1d:2b:73:f1:26:
26:58:a7:0e:72:42:02:24:67:21:ec:07:9d:3b:bd:62:77:85:
4d:a4:98:fe:dd:28:82:15:dd:09:c7:ba:6f:41:95:2c:2f:be:
eb:fe:f1:7b:78:09:6f:b9:86:cf:a2:7f:19:71:e3:68:c4:cb:
e1:29:7e:9a:d9:ba:da:ef:ff:f2:38:b9:4e:d4:96:a0:27:41:
93:9c:8b:17:1c:19:30:c1:92:50:9e:f8:94:8c:ca:f4:fc:d2:
81:64:f4:22:ad:cc:3b:dc:b1:c2:ba:ea:32:34:36:56:db:fa:
2d:c6:af:0d:a5:b8:41:6d:e4:fc:55:62:f0:23:f3:59:2c:55:
d7:e6:f7:1a:0b:11:27:1b:5c:35:35:87:e7:04:c1:56:f3:fb:
1e:b3:99:1c:cb:0a:10:02:b6:62:a6:20:eb:ae:4c:b8:77:b7:
e3:fa:4f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:02:29 2026 by rpki-client