Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35312e302f32342d3234203d3e20333939303733.roa
File: 33312e362e35312e302f32342d3234203d3e20333939303733.roa (raw, json)
Hash identifier: HwYHClenT0pJHiMJfym0x5mriz7iR8Qa+2umc96KwUY=
Subject key identifier: 52:4E:53:B8:9C:88:78:D6:86:14:7F:33:6B:F8:47:0A:A9:BC:32:66
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 28FC3C282CD0A4660587F947EB11D0402EABC640
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35312e302f32342d3234203d3e20333939303733.roa
Signing time: Wed 15 Jul 2026 09:49:11 +0000
ROA not before: Wed 15 Jul 2026 09:44:11 +0000
ROA not after: Wed 14 Jul 2027 09:49:11 +0000
asID: 399073
IP address blocks: 31.6.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:fc:3c:28:2c:d0:a4:66:05:87:f9:47:eb:11:d0:40:2e:ab:c6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jul 15 09:44:11 2026 GMT
Not After : Jul 14 09:49:11 2027 GMT
Subject: CN=524E53B89C8878D686147F336BF8470AA9BC3266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:c6:96:74:ab:89:70:5e:c0:eb:7c:fa:cb:
07:47:ee:c3:16:ab:78:fe:e4:31:e4:6f:3b:fc:41:
81:67:14:63:14:e0:f0:2a:6c:1d:2d:69:70:ba:bb:
00:ed:31:80:a2:65:91:91:b4:ef:b9:5f:e9:32:1e:
ef:c2:98:97:bc:ed:ca:06:31:57:b1:5d:d9:b1:9d:
20:53:14:d5:83:4f:93:ff:60:ae:52:73:b1:26:67:
7c:62:b6:26:40:f3:5a:31:8d:6c:f6:12:82:69:5c:
7a:41:42:f8:13:90:a4:33:b7:6d:c0:77:3e:93:b8:
0e:b2:88:d3:64:47:a1:40:d9:00:95:fc:ee:e3:cf:
a8:11:92:2f:3b:f8:53:32:63:7f:0b:9c:24:cb:00:
3d:be:f5:1d:6c:2a:83:1a:33:f3:5c:b3:88:ba:c2:
25:82:26:89:bb:0c:06:60:b2:f8:35:5a:64:fa:4e:
63:ec:62:c3:f1:97:0c:1f:10:e6:b8:88:09:2f:94:
b2:5a:7c:cf:c3:e5:2f:d8:cc:f4:69:4a:83:0f:23:
51:22:ba:53:ac:e8:56:f5:64:7b:f8:b9:7a:d0:97:
1d:93:7e:0b:c7:43:96:63:54:d0:79:a4:03:9c:20:
84:34:79:a5:fd:92:6f:eb:18:80:a2:ad:7f:ff:11:
9b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4E:53:B8:9C:88:78:D6:86:14:7F:33:6B:F8:47:0A:A9:BC:32:66
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35312e302f32342d3234203d3e20333939303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.51.0/24
Signature Algorithm: sha256WithRSAEncryption
79:d7:2d:62:cc:ff:8b:52:bc:e9:0a:55:0c:8e:9f:62:08:57:
a5:f2:02:4a:45:a5:f3:b4:77:24:a6:ac:d2:09:83:17:ff:06:
6c:00:2f:ec:af:1c:c8:5b:d9:22:5a:18:6d:c9:5a:a8:ed:42:
88:98:e9:df:70:c6:d5:8e:66:91:c0:62:a6:29:3e:32:e6:e9:
dc:67:5a:2a:38:f3:c1:bb:0f:18:a3:51:76:73:c1:df:05:ab:
f4:72:02:8d:73:e5:ca:02:16:45:ac:28:a2:7c:a0:eb:f6:75:
6b:94:49:c0:fb:fe:47:b5:96:74:2f:86:f4:99:a9:0a:49:ac:
8c:98:d7:96:94:be:8e:a5:91:64:f1:fd:73:37:03:a4:fd:0d:
2e:ff:32:52:6f:a8:1a:17:4d:e1:6e:06:17:c8:cd:39:b2:b5:
dc:02:f0:cf:34:92:c3:40:86:c1:21:b4:13:cb:45:cc:97:ca:
7a:89:f8:20:09:e9:f7:bb:f1:5c:10:da:c2:21:8a:9a:95:bb:
7e:d0:64:24:0d:82:07:d6:82:1f:40:a8:71:2a:0b:ac:df:54:
8e:9f:da:88:e8:71:eb:fb:72:47:67:f2:96:49:dd:c3:95:b9:
34:d8:e7:81:76:29:61:ea:17:60:1a:e9:70:e1:13:94:f3:b1:
b9:72:d5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:19:41 2026 by rpki-client