Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35322e302f32342d3234203d3e20343032383636.roa
File: 33312e362e35322e302f32342d3234203d3e20343032383636.roa (raw, json)
Hash identifier: X/yIE4e8lp3bNtU/vLY0nBbXancMD6CUnfcy/fZ6IKo=
Subject key identifier: DE:9A:B2:E9:CC:10:20:19:D0:D5:29:D1:71:45:79:BD:C4:51:E3:D9
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 05EB474D547829CC71DA690146443575CD1E2942
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35322e302f32342d3234203d3e20343032383636.roa
Signing time: Fri 04 Sep 2026 04:42:30 +0000
ROA not before: Fri 04 Sep 2026 04:37:30 +0000
ROA not after: Fri 03 Sep 2027 04:42:30 +0000
asID: 402866
IP address blocks: 31.6.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:eb:47:4d:54:78:29:cc:71:da:69:01:46:44:35:75:cd:1e:29:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 4 04:37:30 2026 GMT
Not After : Sep 3 04:42:30 2027 GMT
Subject: CN=DE9AB2E9CC102019D0D529D1714579BDC451E3D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d0:0d:2c:af:4e:6f:42:72:1f:b6:69:c2:28:
fa:bb:4d:15:a0:af:82:95:6a:77:5b:2c:be:ea:fd:
8f:9d:13:58:9b:73:76:3f:e7:04:85:42:69:b2:d3:
95:6c:24:ac:7e:61:94:e2:7f:d5:21:e2:5f:17:ce:
8d:5e:19:1d:07:fd:27:fd:2a:7f:bb:4e:e4:f1:a8:
49:fa:b8:31:4a:1a:1a:f8:23:32:1e:6a:c6:6a:2b:
d8:1f:8c:79:d2:8b:98:ff:85:14:72:82:24:d4:bb:
52:57:c5:1b:fb:2f:11:af:fe:e6:e6:8a:1d:ba:ae:
62:ca:be:f6:80:68:d9:05:0b:65:56:1f:22:c2:41:
4e:c0:02:d4:3c:80:13:66:b9:05:3e:69:c9:0f:4c:
6b:14:ea:a4:37:12:e6:a7:0a:0e:19:60:aa:f3:79:
43:fa:39:02:70:d0:a3:05:f8:e1:64:47:d6:a0:d4:
34:b8:bc:e9:bf:06:e8:84:3e:e4:53:02:dc:1e:c0:
d1:a3:1a:2c:ad:f2:3c:e8:d8:00:d1:b7:d1:0e:ac:
eb:4a:8d:0b:47:8b:b0:85:5a:a4:21:09:98:ff:e6:
78:7c:de:4e:29:20:7c:ce:cc:a2:b0:d8:5f:92:65:
cd:bd:8f:56:c3:c3:7f:6c:66:57:2a:65:6b:af:15:
44:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9A:B2:E9:CC:10:20:19:D0:D5:29:D1:71:45:79:BD:C4:51:E3:D9
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35322e302f32342d3234203d3e20343032383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.52.0/24
Signature Algorithm: sha256WithRSAEncryption
67:e4:f4:43:05:c7:e8:18:2a:be:01:ee:ca:3e:20:a7:cc:9b:
f7:38:eb:00:f2:13:cf:c1:bb:60:4b:cc:94:e7:8c:60:f6:9c:
e1:5b:b7:47:68:6d:09:08:f2:20:93:3f:0a:69:30:a7:e3:bd:
32:29:82:f9:2a:e7:cb:ea:4a:bc:54:00:d3:90:1f:19:a1:a9:
5b:ac:ff:45:e6:c8:2e:08:d9:c2:a7:7a:f8:f5:49:f5:47:2b:
11:ea:48:49:a0:01:e6:04:3a:c1:f3:6d:b9:21:df:1a:a5:ee:
7c:0d:4e:0d:82:e9:dc:e5:47:4a:59:7e:37:df:1c:ac:0b:bb:
ee:a1:ee:11:ba:a6:ed:e9:d0:39:f0:d3:4e:1c:f8:92:20:f2:
8c:5e:0e:97:b5:a0:9c:79:14:87:c8:84:96:fb:4d:21:c3:15:
ec:b4:1a:61:fb:94:ab:3b:96:21:76:b6:c8:b0:f1:47:bd:47:
84:8d:83:03:18:a2:6a:c3:e9:42:9c:04:e7:a7:73:9c:27:87:
a9:60:d9:12:88:77:da:5d:ca:4c:42:38:43:80:5f:c3:54:e2:
c4:fa:a6:4a:4c:bc:e7:35:0e:db:b7:e2:83:59:d7:3b:5c:cf:
bf:0a:a5:0a:5d:6f:be:01:a1:60:cb:92:eb:77:7b:f6:13:43:
6c:d9:81:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:30:31 2026 by rpki-client