Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35302e302f32342d3234203d3e20323133323030.roa
File: 33312e362e35302e302f32342d3234203d3e20323133323030.roa (raw, json)
Hash identifier: z08Js6UPwwL8cfg31FQlSMEttlLXMyLDt3DwNvQPb4E=
Subject key identifier: 03:3F:2D:7B:BB:42:FC:D5:05:BB:B8:E3:B7:44:FD:5F:22:CB:7F:ED
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 593E616BB8FCDEA6605760B3C375ACB9D61E3D67
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35302e302f32342d3234203d3e20323133323030.roa
Signing time: Fri 31 Jul 2026 13:49:16 +0000
ROA not before: Fri 31 Jul 2026 13:44:16 +0000
ROA not after: Fri 30 Jul 2027 13:49:16 +0000
asID: 213200
IP address blocks: 31.6.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:3e:61:6b:b8:fc:de:a6:60:57:60:b3:c3:75:ac:b9:d6:1e:3d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jul 31 13:44:16 2026 GMT
Not After : Jul 30 13:49:16 2027 GMT
Subject: CN=033F2D7BBB42FCD505BBB8E3B744FD5F22CB7FED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bd:01:b9:9d:c7:3f:50:b1:c1:0f:12:ec:0e:
bc:1f:27:64:ba:15:26:80:41:bb:92:75:7f:f7:56:
3b:af:78:57:af:91:01:e1:7a:7b:83:30:9c:c7:78:
73:7b:ff:22:97:eb:0f:7c:6e:50:ed:ef:62:af:24:
3b:ec:b1:11:1c:16:bc:4d:95:3c:b8:65:17:7c:85:
a4:43:c4:98:e0:cb:ef:9d:b0:74:a1:f5:1f:5b:ce:
ff:8f:32:c5:f1:28:27:58:ca:b4:20:1c:e1:cc:91:
3e:f1:6f:df:ef:e5:8f:e6:9f:a9:4c:bb:d4:8d:3d:
91:16:29:39:94:2a:b0:f5:b8:22:92:71:57:6c:3b:
e4:b5:3e:38:bb:69:36:a1:7b:66:f4:cf:d1:b7:66:
9f:68:0a:79:e4:18:d3:a5:65:db:38:38:9c:dd:2e:
57:24:de:ee:83:5b:46:b9:69:5a:8c:2c:60:5f:cc:
5f:e8:ca:bc:d5:88:22:67:1c:59:77:d9:1d:82:78:
6e:db:8c:3b:40:5b:9c:9a:9d:36:84:81:71:0b:40:
db:b7:30:c3:32:90:b5:fb:2d:f2:fc:06:a1:fc:54:
a4:4b:3c:07:9a:47:de:0e:20:8c:dd:56:3c:23:03:
39:7a:40:a8:1f:58:b9:11:5e:64:b4:f6:ce:4a:d2:
a9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3F:2D:7B:BB:42:FC:D5:05:BB:B8:E3:B7:44:FD:5F:22:CB:7F:ED
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35302e302f32342d3234203d3e20323133323030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.50.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b8:53:01:c1:bf:63:30:05:ad:69:b2:7f:f5:a6:d9:78:0b:
27:3e:40:00:4a:53:8e:bf:34:d0:b7:ae:5c:40:cc:d6:6f:98:
9e:ac:b7:54:60:85:d9:ac:61:61:fe:13:a2:aa:ce:e4:a7:bb:
59:ae:b1:6c:a0:97:7a:a0:97:cc:57:42:04:6f:9e:cf:60:99:
2d:5b:0b:ef:d8:14:2b:7f:ef:e0:23:97:b2:85:40:da:20:1b:
b9:01:10:73:1a:a6:0a:3e:96:98:e5:7c:fd:e3:47:ad:b9:b2:
32:4f:69:65:f1:ac:4a:2c:06:8c:5c:f9:ef:de:b9:f4:1c:70:
64:50:0a:58:86:2d:52:9e:6a:6e:96:3e:4b:15:1c:79:f2:bf:
7e:67:f6:c5:9c:f5:bb:32:dc:cb:ec:1d:95:39:c0:3a:45:02:
1d:73:e1:f0:33:ec:85:50:e7:d2:bc:12:30:78:ce:fc:38:bb:
b7:96:1b:5c:a3:11:56:3f:16:3c:d5:40:f5:57:22:6e:eb:9f:
28:3f:a1:bb:0e:57:17:45:0f:46:f4:e7:cd:7d:05:cd:2a:49:
ec:25:52:6d:f8:9b:24:28:f6:d5:61:01:d6:e0:28:e5:9d:ea:
bc:c4:7d:8b:92:af:9a:ea:69:16:0d:c5:46:23:b6:63:8e:92:
ac:fd:a8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 00:11:09 2026 by rpki-client