Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34372e302f32342d3234203d3e20383334.roa
File: 33312e362e34372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: e7IVJwpM9uSH9XaXifUX4PshdHdQ1SI7xhPDy715uDk=
Subject key identifier: 4F:34:FD:3D:1F:9F:83:0B:3D:FD:09:7E:6F:2E:85:EB:4A:7D:4B:25
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 4D541A35F5D58E2EB06943080BAD2B8A504466BB
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34372e302f32342d3234203d3e20383334.roa
Signing time: Fri 16 Oct 2026 13:28:46 +0000
ROA not before: Fri 16 Oct 2026 13:23:46 +0000
ROA not after: Fri 15 Oct 2027 13:28:46 +0000
asID: 834
IP address blocks: 31.6.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 12:51:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:54:1a:35:f5:d5:8e:2e:b0:69:43:08:0b:ad:2b:8a:50:44:66:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 16 13:23:46 2026 GMT
Not After : Oct 15 13:28:46 2027 GMT
Subject: CN=4F34FD3D1F9F830B3DFD097E6F2E85EB4A7D4B25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:53:bc:08:c1:3b:9b:a1:3c:04:ab:5b:4e:f1:
23:88:89:8e:d6:f1:ee:1b:e4:46:e3:b2:6d:09:89:
a4:a3:20:be:f4:18:df:e8:17:36:d3:91:45:c3:b3:
69:bc:de:4b:50:33:cd:a5:a4:1b:36:8b:7f:3b:1f:
d0:5c:f1:45:bc:1f:90:dd:f2:12:1b:43:0b:bb:80:
91:8a:bb:55:e5:9d:e9:89:23:46:40:f5:5c:ee:aa:
21:9c:db:74:6b:f3:7d:97:b9:cb:da:06:3f:0f:65:
80:d3:e1:1c:a9:0b:73:b6:25:de:63:ee:79:ab:ec:
61:2c:af:d8:b5:42:a4:2e:28:9e:bf:b8:a0:12:d9:
74:60:42:15:f8:78:06:0e:f9:88:1f:3e:85:40:5f:
48:31:67:72:f1:19:13:52:ea:ee:01:01:95:21:06:
c9:df:36:29:5c:65:2a:44:bc:9d:37:d2:0c:8f:c7:
d6:ba:c0:ac:f0:36:96:e7:c1:63:e5:62:a1:3d:0e:
8f:33:1e:e3:0e:99:56:ef:bd:6c:d6:8f:6f:ec:8e:
43:98:8d:f7:65:d3:96:77:04:f4:08:c1:db:23:45:
8d:04:53:66:45:91:2a:45:44:b8:83:17:81:c2:43:
ff:82:c0:f8:fe:a1:3c:48:81:43:20:4c:08:86:41:
f5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:34:FD:3D:1F:9F:83:0B:3D:FD:09:7E:6F:2E:85:EB:4A:7D:4B:25
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.47.0/24
Signature Algorithm: sha256WithRSAEncryption
68:53:ba:c4:49:05:4f:16:c9:7b:36:10:9e:ab:a5:9f:c9:e2:
7e:e2:ae:bf:3e:28:d0:f0:f5:37:26:cd:41:5f:5b:a1:81:80:
d4:47:86:e5:65:7c:b7:10:2b:08:21:61:56:ec:ef:18:ad:ed:
99:51:21:64:ad:de:32:fb:09:17:53:26:a7:c8:f5:94:9b:13:
f7:88:7c:6a:be:34:85:72:ff:1b:ae:83:1a:8f:e4:b7:24:37:
99:0f:65:43:79:df:89:01:08:15:89:0e:76:c7:a9:c9:98:98:
b7:a2:2e:de:40:35:da:f6:5b:30:37:21:0a:a9:1c:68:b9:36:
d3:67:84:ce:3b:12:5c:8a:db:8e:49:69:83:ae:da:26:81:3c:
fc:44:9f:2e:87:49:e4:89:bc:2e:59:3d:02:7f:48:76:ec:2b:
3e:55:e8:3b:de:d7:c7:60:24:cb:23:56:18:31:5a:40:35:16:
c2:51:c2:da:7d:58:eb:26:01:5f:c7:3c:d1:f1:7a:16:4b:86:
ca:60:d8:84:5c:65:b3:2a:82:ad:42:ad:41:36:41:5c:4a:aa:
65:06:df:b8:4f:de:bc:73:dc:6f:e9:0a:75:b4:04:bd:46:c2:
d4:44:61:09:06:ef:93:50:47:ac:1a:eb:82:83:d3:07:0b:52:
ec:85:3e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:42:11 2026 by rpki-client