Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34352e302f32342d3234203d3e20323030303137.roa
File: 33312e362e34352e302f32342d3234203d3e20323030303137.roa (raw, json)
Hash identifier: XsIVm9f7ENlzHazbJzD5VC44LrQpb1p0s9ZvDUnb23M=
Subject key identifier: 45:4D:0C:AE:73:54:20:9D:AF:87:7C:28:8E:82:7A:AB:D0:EF:6A:F7
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 1313EE59A72C34D871AD3AF2AB196D82BB3D1854
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34352e302f32342d3234203d3e20323030303137.roa
Signing time: Thu 13 Aug 2026 06:57:02 +0000
ROA not before: Thu 13 Aug 2026 06:52:02 +0000
ROA not after: Thu 12 Aug 2027 06:57:02 +0000
asID: 200017
IP address blocks: 31.6.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 08:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:13:ee:59:a7:2c:34:d8:71:ad:3a:f2:ab:19:6d:82:bb:3d:18:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Aug 13 06:52:02 2026 GMT
Not After : Aug 12 06:57:02 2027 GMT
Subject: CN=454D0CAE7354209DAF877C288E827AABD0EF6AF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b2:fc:0e:bc:38:c9:68:df:74:23:81:3f:8d:
80:0f:6c:90:f3:ec:28:6c:76:2b:6c:c1:c9:35:c6:
c1:eb:be:d5:6c:0a:c4:cf:9c:8f:7b:99:02:93:06:
c1:3a:c8:03:e4:17:2c:d0:31:41:b8:92:79:82:f2:
78:99:1a:89:39:3e:5b:d9:b1:5d:db:7f:ee:14:3c:
01:3e:13:59:ce:06:97:01:43:29:7a:98:0d:cf:f7:
70:84:0f:c2:5e:99:b3:11:34:ae:59:21:e1:17:38:
0f:6c:0a:19:ec:ea:c3:51:bc:56:ce:14:1f:16:50:
2e:5f:26:c9:33:b5:99:70:1c:96:8f:b6:41:ba:a0:
f9:8a:92:e2:c2:5c:ff:fe:e5:be:10:aa:19:17:10:
a8:34:66:c7:92:16:f7:a5:c0:31:75:e4:de:4f:f7:
d1:41:3c:ef:f9:2d:59:b1:9b:72:61:0d:57:79:71:
fc:b9:71:15:56:5b:d5:90:c3:b4:5c:5c:e7:92:07:
cb:38:2b:38:84:ea:d9:dd:cf:d9:2f:27:f5:05:2d:
e5:dd:f5:c2:b6:c1:57:af:0c:bf:ad:29:c5:13:3a:
80:8e:b9:e9:db:7f:d4:70:ed:d6:0e:8d:ae:2a:d2:
7e:fa:8e:ef:40:64:3c:92:73:dd:00:1a:f9:00:8b:
d1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4D:0C:AE:73:54:20:9D:AF:87:7C:28:8E:82:7A:AB:D0:EF:6A:F7
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34352e302f32342d3234203d3e20323030303137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.45.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:3e:86:a9:7b:f8:ca:8a:02:47:d0:46:53:e7:32:d6:6a:3b:
cc:f9:15:82:be:c9:7b:24:06:16:9e:58:c5:7d:67:d9:29:b8:
d4:a0:d0:0b:e7:bb:40:6a:7b:3c:9f:a2:37:eb:d6:d4:e5:75:
3e:a3:ec:13:1b:0b:01:f5:47:4c:00:03:d5:56:4a:67:18:79:
c0:67:03:ab:ed:1d:f8:89:6b:c4:eb:e1:19:90:59:7f:a7:4b:
93:e2:0c:ea:21:55:4f:11:fc:2d:b8:83:54:67:c3:dc:3c:0c:
81:0c:07:e6:ef:88:8d:f7:22:1a:84:01:1d:17:87:1e:76:76:
71:87:dd:ff:8e:9a:36:44:8a:b8:e2:86:5b:b7:fa:e7:dc:17:
f8:ae:13:2e:41:bd:e2:d5:87:7d:ea:ce:d4:71:d3:3f:ad:b2:
bf:cd:2d:fd:97:e6:cc:01:be:e1:0f:cc:58:cf:e6:a7:b7:7c:
3d:b6:a4:1d:92:6e:02:ac:e2:b3:d1:fe:a6:d4:d6:b5:e9:82:
05:bf:24:15:a5:f8:fc:64:55:17:3c:af:ef:54:31:af:e4:e4:
00:a0:e7:92:4f:c3:61:ca:e9:5d:c7:59:51:de:e9:a7:39:44:
e5:b3:69:b9:d5:0e:ae:3a:aa:4b:2a:46:65:37:91:99:36:9e:
87:a0:97:12
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUExPuWacsNNhxrTryqxltgrs9GFQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNjA4MTMwNjUyMDJaFw0yNzA4MTIwNjU3MDJaMDMxMTAvBgNV
BAMTKDQ1NEQwQ0FFNzM1NDIwOURBRjg3N0MyODhFODI3QUFCRDBFRjZBRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/svwOvDjJaN90I4E/jYAPbJDz
7Chsditswck1xsHrvtVsCsTPnI97mQKTBsE6yAPkFyzQMUG4knmC8niZGok5PlvZ
sV3bf+4UPAE+E1nOBpcBQyl6mA3P93CED8JembMRNK5ZIeEXOA9sChns6sNRvFbO
FB8WUC5fJskztZlwHJaPtkG6oPmKkuLCXP/+5b4QqhkXEKg0ZseSFvelwDF15N5P
99FBPO/5LVmxm3JhDVd5cfy5cRVWW9WQw7RcXOeSB8s4KziE6tndz9kvJ/UFLeXd
9cK2wVevDL+tKcUTOoCOuenbf9Rw7dYOja4q0n76ju9AZDySc90AGvkAi9HjAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQURU0MrnNUIJ2vh3wojoJ6q9DvavcwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM0MzUyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzAzMDMxMzcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBi0w
DQYJKoZIhvcNAQELBQADggEBAF0+hql7+MqKAkfQRlPnMtZqO8z5FYK+yXskBhae
WMV9Z9kpuNSg0Avnu0Bqezyfojfr1tTldT6j7BMbCwH1R0wAA9VWSmcYecBnA6vt
HfiJa8Tr4RmQWX+nS5PiDOohVU8R/C24g1Rnw9w8DIEMB+bviI33IhqEAR0Xhx52
dnGH3f+OmjZEirjihlu3+ufcF/iuEy5BveLVh33qztRx0z+tsr/NLf2X5swBvuEP
zFjP5qe3fD22pB2SbgKs4rPR/qbU1rXpggW/JBWl+PxkVRc8r+9UMa/k5ACg55JP
w2HK6V3HWVHe6ac5ROWzabnVDq46qksqRmU3kZk2noeglxI=
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:11 2026 by rpki-client