Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35342e302f32342d3234203d3e20323138393131.roa
File: 33312e362e35342e302f32342d3234203d3e20323138393131.roa (raw, json)
Hash identifier: GJsGmGwv/nzuGYAX91nJzLn06O4eIVy2+1JuMH+j1e0=
Subject key identifier: 19:90:BB:B3:30:BE:07:C1:B2:BC:05:7E:0A:DF:40:FC:0B:C2:C0:DB
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 46197C87A6026313CCB55C500A720B4EF26EC796
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35342e302f32342d3234203d3e20323138393131.roa
Signing time: Sat 10 Oct 2026 02:53:51 +0000
ROA not before: Sat 10 Oct 2026 02:48:51 +0000
ROA not after: Sat 09 Oct 2027 02:53:51 +0000
asID: 218911
IP address blocks: 31.6.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 22:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:19:7c:87:a6:02:63:13:cc:b5:5c:50:0a:72:0b:4e:f2:6e:c7:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 10 02:48:51 2026 GMT
Not After : Oct 9 02:53:51 2027 GMT
Subject: CN=1990BBB330BE07C1B2BC057E0ADF40FC0BC2C0DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:11:c3:93:4b:cc:1d:70:dc:d9:ac:59:60:
33:a5:74:cf:fb:33:35:ed:1d:bd:fc:09:5f:92:31:
90:78:c1:f0:4e:c3:a8:4b:8e:dd:14:88:0f:a1:26:
1f:61:cb:15:d0:29:9b:0a:5f:7c:a3:c8:8f:be:5a:
7c:11:5c:22:c2:ed:39:72:20:68:9f:09:db:bc:fe:
4e:77:d0:76:12:65:74:44:b1:0d:37:ce:d1:2d:ad:
00:31:81:b5:77:33:6f:4a:de:46:39:7b:05:eb:fa:
a6:a1:a5:7f:f3:89:bb:f6:da:50:86:1d:c3:01:ea:
d4:c4:28:e7:e3:79:c5:5d:46:0c:ac:e4:a1:23:16:
9f:56:74:3d:bc:f7:0c:97:b6:5b:00:c1:61:f9:48:
cd:a9:47:1e:8d:49:05:ce:c3:1f:cc:13:84:8c:6d:
fd:a9:71:e7:06:ee:be:24:7c:08:eb:e4:35:36:9f:
ee:3e:b2:c9:4b:d7:eb:7a:ab:09:91:be:54:f5:66:
8d:ab:45:35:7d:5c:a5:52:93:31:8c:06:3e:e8:16:
69:08:bc:8f:37:97:96:61:60:68:6f:85:1e:c4:86:
03:d5:31:7e:ae:7f:7c:6d:ce:14:dd:4e:c8:8a:85:
13:5b:69:6d:20:1d:fa:2d:ee:ea:8c:84:28:a6:b2:
b9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:90:BB:B3:30:BE:07:C1:B2:BC:05:7E:0A:DF:40:FC:0B:C2:C0:DB
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35342e302f32342d3234203d3e20323138393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.54.0/24
Signature Algorithm: sha256WithRSAEncryption
91:28:7a:6b:27:f8:1a:da:e8:70:cf:62:c9:b4:fe:6e:55:53:
f1:e9:a7:dc:19:91:f0:bd:05:6b:b3:14:cb:27:e2:19:50:9a:
b5:e0:89:ee:8c:c5:33:f8:d8:4c:59:a1:ca:96:fe:b8:33:09:
53:23:6e:7d:a1:f9:b1:4c:4e:39:19:37:b9:10:60:d3:6d:d4:
74:45:d3:1a:ec:ac:c2:ed:dd:e1:ed:67:db:19:e7:4e:8a:39:
73:15:ff:10:97:7e:ee:4c:b1:e4:c8:a8:d9:f6:55:92:4a:8c:
1c:2a:a9:99:2e:66:91:49:bc:be:b4:c2:3d:85:3b:91:9e:c1:
c8:6f:45:29:8b:82:dd:f6:c2:37:a7:96:95:4c:de:76:87:0f:
2c:e2:4b:f5:47:62:2b:67:d0:3d:5e:48:f9:3f:c1:17:0a:50:
1e:51:03:e2:e4:c7:05:c5:22:51:b0:be:6f:de:7e:fb:ae:70:
f5:fa:63:da:f6:0d:f3:c3:ba:9c:77:63:3f:80:4f:04:7b:01:
35:99:42:59:15:40:a0:8f:f2:ec:d4:86:c6:2b:ad:ca:09:c8:
7e:c7:21:e5:51:e5:10:c6:d3:66:0d:50:0f:f5:3e:2f:47:be:
e6:e0:22:49:c6:0b:6f:67:e1:29:e5:b6:f1:df:e3:f8:a6:84:
44:43:d1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:19:36 2026 by rpki-client