Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35342e302f32342d3234203d3e20323139303735.roa
File: 33312e362e35342e302f32342d3234203d3e20323139303735.roa (raw, json)
Hash identifier: VXH2Mc7KaSlZjbo0hI5pMQRUMhVyvWwaJ74WTnk1Id8=
Subject key identifier: 5B:27:57:59:83:FE:D5:13:D2:41:07:15:5C:97:1E:FD:D0:44:0C:EB
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 0A9AEAFA4B8991CFE429B1F179437C816F46E489
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35342e302f32342d3234203d3e20323139303735.roa
Signing time: Sat 10 Oct 2026 02:53:51 +0000
ROA not before: Sat 10 Oct 2026 02:48:51 +0000
ROA not after: Sat 09 Oct 2027 02:53:51 +0000
asID: 219075
IP address blocks: 31.6.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:9a:ea:fa:4b:89:91:cf:e4:29:b1:f1:79:43:7c:81:6f:46:e4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 10 02:48:51 2026 GMT
Not After : Oct 9 02:53:51 2027 GMT
Subject: CN=5B27575983FED513D24107155C971EFDD0440CEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:78:0e:3f:ea:e5:ff:53:a9:ad:ec:73:79:3f:
ac:28:74:71:46:e6:3f:c1:98:5a:f7:36:b3:50:d8:
37:dd:5a:48:91:b2:a3:e5:52:8c:2e:44:d7:26:5d:
cd:a5:83:16:cb:26:32:65:b9:c5:82:8b:e1:3e:f4:
d2:bb:95:4e:1f:10:3d:e6:48:a0:3d:71:86:3a:98:
97:22:c0:16:a2:a9:1f:e1:51:f6:b9:a1:36:a3:e9:
14:34:08:bc:60:5b:1a:39:96:19:02:81:bd:ff:e1:
52:36:37:94:51:bc:95:b2:48:d4:dd:94:a6:0f:c1:
64:9e:7f:02:af:70:69:12:70:b0:7e:85:b3:bd:1a:
37:e5:4f:e5:88:72:18:9d:40:fa:b1:7f:d0:8f:bd:
14:4f:16:2f:d0:1e:bc:2e:12:03:e1:85:dc:11:06:
9b:10:ae:0e:22:d0:0b:dd:6d:e3:ba:0d:ed:f3:c6:
17:e4:0b:94:e9:fa:2f:50:04:c0:b1:bd:94:8b:67:
ea:d3:b8:94:28:63:81:69:db:2c:e8:2d:d4:95:d8:
3e:85:17:2e:cc:1c:c3:38:ba:01:d4:d1:91:34:3b:
2b:ac:7b:43:2a:32:35:11:2b:48:7b:74:6d:d0:e8:
5e:38:fd:72:5a:42:49:b7:35:85:30:55:69:43:88:
fe:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:27:57:59:83:FE:D5:13:D2:41:07:15:5C:97:1E:FD:D0:44:0C:EB
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35342e302f32342d3234203d3e20323139303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.54.0/24
Signature Algorithm: sha256WithRSAEncryption
48:d3:ad:8e:bb:50:81:9b:d4:4e:b6:70:b0:9f:22:31:5f:ef:
53:f8:4b:2c:cb:03:18:e8:97:d1:6f:d2:6e:54:94:3b:09:4d:
d9:2b:5c:eb:e7:24:24:97:45:f7:eb:16:5b:09:65:77:e0:94:
0e:af:fa:4e:e9:22:c3:3a:3c:e8:bc:42:56:38:84:eb:bb:ad:
25:9b:2b:e0:bc:80:43:a7:e4:14:8e:e2:37:a2:57:53:2e:aa:
c6:80:6d:07:22:e0:3d:89:ec:1e:23:7f:a4:01:25:71:1d:83:
ad:8f:40:fe:0c:98:c6:88:0a:c2:d8:1c:42:a8:3b:ed:a4:42:
ed:6e:e1:08:96:34:64:8e:27:65:f6:e8:99:83:67:aa:64:6e:
15:a3:2f:35:f2:20:f7:ed:8b:3a:35:c5:85:e6:46:83:67:ed:
75:4d:24:f6:60:3f:f9:a4:6f:44:53:a0:e4:c7:ea:31:c5:0f:
17:c3:a4:a3:52:2a:81:ae:6a:82:c5:df:51:f4:a0:55:a2:95:
19:10:86:a0:81:a5:f4:c7:95:89:14:d4:96:b1:7f:2a:de:17:
d5:96:b3:f4:d3:39:4f:7e:a4:ca:15:4f:f9:68:9f:b1:a8:dc:
68:a9:97:d3:31:b4:fb:43:a8:51:f9:78:c0:0c:de:23:a8:f4:
66:fb:7c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:49:11 2026 by rpki-client