Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34372e302f32342d3234203d3e20383334.roa
File: 33312e362e34372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 4W7eSHu+YpvYATYLT+lvCvhKWE7M5kOHuGTuiEhK3/8=
Subject key identifier: 89:10:B3:0C:FA:70:02:45:6A:B6:23:8C:CA:F6:F4:E4:15:5D:81:E8
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 5215642BC7CBC949626C4FAC1842A87781161ED2
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34372e302f32342d3234203d3e20383334.roa
Signing time: Sat 18 Apr 2026 09:20:30 +0000
ROA not before: Sat 18 Apr 2026 09:15:30 +0000
ROA not after: Sat 17 Apr 2027 09:20:30 +0000
asID: 834
IP address blocks: 31.6.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:15:64:2b:c7:cb:c9:49:62:6c:4f:ac:18:42:a8:77:81:16:1e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Apr 18 09:15:30 2026 GMT
Not After : Apr 17 09:20:30 2027 GMT
Subject: CN=8910B30CFA7002456AB6238CCAF6F4E4155D81E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f2:ba:54:04:f7:93:f5:c3:07:9b:74:b2:e6:
61:8d:80:3d:b6:ca:f2:73:6d:39:c1:aa:8c:cc:e0:
35:99:de:d4:10:cf:89:91:bb:45:b2:6c:38:2b:3b:
55:14:ac:31:4c:52:e8:ff:f8:0c:51:0e:ea:fa:7d:
c4:38:43:71:9e:d2:95:7d:d1:f2:63:33:15:50:51:
d4:f3:a1:11:04:f6:fe:53:d5:f7:cd:38:7e:56:3e:
f6:d7:bd:cf:93:1f:b9:c2:f7:b2:90:69:9b:91:82:
f1:20:b9:36:b3:8d:a2:ab:80:c5:af:2b:bc:45:88:
8e:ee:64:f6:2e:b9:4a:39:16:e0:6a:d9:a3:09:0e:
52:85:4d:f1:4b:29:8f:66:ae:da:6a:28:45:44:01:
cf:3b:69:e5:8e:3c:ca:68:a9:ee:d0:5b:15:67:4e:
7e:71:c5:1c:f0:28:0e:a1:de:fb:37:e9:35:1a:37:
3d:c7:65:a3:56:25:86:19:fd:69:ab:17:aa:44:57:
46:5a:63:e9:38:13:4b:c5:9c:bb:9b:a5:55:66:db:
00:52:91:fb:2c:b2:d6:94:ab:06:db:ba:84:b2:20:
ca:c9:40:5a:6a:82:06:eb:d9:57:e2:36:87:4c:eb:
c0:19:51:10:ec:c7:0a:2b:e8:3b:eb:36:c4:d5:c9:
62:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:10:B3:0C:FA:70:02:45:6A:B6:23:8C:CA:F6:F4:E4:15:5D:81:E8
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.47.0/24
Signature Algorithm: sha256WithRSAEncryption
43:af:18:35:ab:ea:df:a1:d1:91:bc:10:26:78:0a:7d:d9:74:
58:c4:e9:cd:7b:08:6e:9a:d7:c4:cc:82:a5:a5:70:a4:0c:21:
f7:13:ad:56:0d:b0:c2:aa:20:54:36:c4:30:b4:2c:2f:a5:54:
89:08:49:50:19:9d:df:15:35:30:2b:27:60:db:cd:fa:c9:27:
72:e9:a7:11:18:c0:40:06:70:4a:b2:75:e2:a6:2c:70:8d:c1:
b7:1e:b1:c7:82:57:e4:20:69:32:8f:47:df:83:38:a3:6d:90:
73:96:2b:db:bb:2e:e2:5e:fd:32:3c:4e:ae:36:eb:7c:34:96:
b9:fe:4f:69:a0:6b:95:56:ad:5f:36:79:8b:93:3a:99:32:6b:
2a:a1:9e:1d:c8:4e:77:27:95:55:1c:74:d4:f2:c5:72:e7:b2:
f3:ec:36:77:cd:20:e1:dd:1f:f4:23:dd:64:46:d5:af:a6:46:
c6:c3:4e:e0:44:08:72:14:e3:b3:92:71:16:ab:12:ba:b3:6e:
39:5e:d2:c0:3d:1e:99:f0:ba:4f:cc:a3:71:0c:01:f2:2d:c8:
2b:fa:5b:16:74:9f:19:75:24:53:9f:ff:3f:71:8d:62:8e:b9:
40:39:51:31:ad:88:a0:30:32:41:ea:a6:08:4b:bc:38:38:d2:
32:c9:d0:3d
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUUhVkK8fLyUlibE+sGEKod4EWHtIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNjA0MTgwOTE1MzBaFw0yNzA0MTcwOTIwMzBaMDMxMTAvBgNV
BAMTKDg5MTBCMzBDRkE3MDAyNDU2QUI2MjM4Q0NBRjZGNEU0MTU1RDgxRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS8rpUBPeT9cMHm3Sy5mGNgD22
yvJzbTnBqozM4DWZ3tQQz4mRu0WybDgrO1UUrDFMUuj/+AxRDur6fcQ4Q3Ge0pV9
0fJjMxVQUdTzoREE9v5T1ffNOH5WPvbXvc+TH7nC97KQaZuRgvEguTazjaKrgMWv
K7xFiI7uZPYuuUo5FuBq2aMJDlKFTfFLKY9mrtpqKEVEAc87aeWOPMpoqe7QWxVn
Tn5xxRzwKA6h3vs36TUaNz3HZaNWJYYZ/WmrF6pEV0ZaY+k4E0vFnLubpVVm2wBS
kfssstaUqwbbuoSyIMrJQFpqggbr2VfiNodM68AZURDsxwor6DvrNsTVyWLJAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUiRCzDPpwAkVqtiOMyvb05BVdgegwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM0MzcyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBi8wDQYJKoZI
hvcNAQELBQADggEBAEOvGDWr6t+h0ZG8ECZ4Cn3ZdFjE6c17CG6a18TMgqWlcKQM
IfcTrVYNsMKqIFQ2xDC0LC+lVIkISVAZnd8VNTArJ2DbzfrJJ3LppxEYwEAGcEqy
deKmLHCNwbcesceCV+QgaTKPR9+DOKNtkHOWK9u7LuJe/TI8Tq4263w0lrn+T2mg
a5VWrV82eYuTOpkyayqhnh3ITncnlVUcdNTyxXLnsvPsNnfNIOHdH/Qj3WRG1a+m
RsbDTuBECHIU47OScRarErqzbjle0sA9Hpnwuk/Mo3EMAfItyCv6WxZ0nxl1JFOf
/z9xjWKOuUA5UTGtiKAwMkHqpghLvDg40jLJ0D0=
-----END CERTIFICATE-----
Generated at Mon Apr 20 00:30:23 2026 by rpki-client