Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35352e302f32342d3234203d3e20323138393131.roa
File: 33312e362e35352e302f32342d3234203d3e20323138393131.roa (raw, json)
Hash identifier: mDE0VH5eu5NZhRy4Dppn51dDyNu1FL1m5UYOFTarVkU=
Subject key identifier: FA:09:FF:20:BF:C5:33:F9:EC:A5:B9:C2:5B:75:5D:54:82:EC:AE:A2
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 346E2FD21C559A8E45DD7D660D19FBBC089F40ED
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35352e302f32342d3234203d3e20323138393131.roa
Signing time: Sat 10 Oct 2026 02:53:51 +0000
ROA not before: Sat 10 Oct 2026 02:48:51 +0000
ROA not after: Sat 09 Oct 2027 02:53:51 +0000
asID: 218911
IP address blocks: 31.6.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 06:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:6e:2f:d2:1c:55:9a:8e:45:dd:7d:66:0d:19:fb:bc:08:9f:40:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 10 02:48:51 2026 GMT
Not After : Oct 9 02:53:51 2027 GMT
Subject: CN=FA09FF20BFC533F9ECA5B9C25B755D5482ECAEA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:13:e3:85:1b:ce:cc:e7:40:07:b2:fa:56:31:
ee:30:99:b1:ae:43:82:84:67:f1:f4:2d:23:71:79:
18:44:63:82:89:41:da:b0:37:c6:27:3a:42:92:17:
9d:b0:a5:d5:32:61:11:c8:6e:0a:56:a1:4c:9c:46:
b2:43:c4:fc:92:58:5a:cd:eb:22:cd:65:05:c4:58:
34:10:18:0f:d2:8e:fa:66:19:14:b8:e7:d8:a9:23:
b2:db:ee:2f:9d:87:e9:2a:9b:17:6b:ba:77:f6:01:
0c:e5:b9:f2:2e:b6:0d:9f:69:cc:77:21:a3:56:c4:
5e:e4:22:6c:e1:09:35:03:14:55:8a:82:a6:74:b0:
a3:83:40:ae:16:e8:35:c0:32:64:f7:f4:e5:7f:b0:
5d:6f:9b:32:9f:ed:ca:b0:31:4c:98:87:40:c6:82:
dd:26:ca:41:e1:41:6b:96:4f:07:8f:3d:52:4a:4d:
a4:ec:8e:b8:21:6a:c8:f4:34:95:18:3d:85:20:07:
ef:72:9e:64:b5:8c:f5:e3:57:2c:4e:9e:98:38:81:
62:fc:85:68:1f:d4:32:8e:7f:20:93:71:e9:a5:ec:
66:14:52:44:ea:eb:26:c8:91:21:12:46:62:1b:04:
c7:10:7e:d3:a5:fc:87:14:a3:3d:04:82:9a:5f:f7:
05:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:09:FF:20:BF:C5:33:F9:EC:A5:B9:C2:5B:75:5D:54:82:EC:AE:A2
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35352e302f32342d3234203d3e20323138393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.55.0/24
Signature Algorithm: sha256WithRSAEncryption
61:a0:e8:28:0d:8e:0f:f6:a1:db:b4:9e:78:24:c2:a4:00:dd:
c9:c7:40:55:91:3a:75:ed:02:e4:ef:9e:da:13:ec:7c:86:4f:
b6:78:72:5f:ae:3d:07:54:71:0c:10:c1:30:c3:ce:6f:cc:8e:
af:f9:c8:7a:98:5d:e7:a4:90:74:b6:d2:94:07:2a:e8:1c:4b:
2a:af:ee:60:61:bb:65:4e:df:ef:b6:04:a2:fb:c5:db:26:97:
16:f7:7e:97:65:f6:f5:8c:2d:c2:bf:30:70:a0:97:91:c4:f5:
5d:73:b7:68:72:ad:e0:ea:95:3c:47:2b:71:6f:07:62:7c:24:
35:b7:99:7d:67:fe:4f:be:61:a3:94:17:7d:a7:3e:37:08:9e:
05:f1:ca:77:ca:2d:be:21:1c:2d:39:0e:52:73:3d:2c:4e:31:
0f:a9:26:53:95:68:0e:da:4c:11:93:03:9f:a1:4e:52:a3:04:
1a:fc:f4:57:18:7d:4a:39:8f:5d:23:b8:10:e9:74:9d:86:c3:
0d:ed:4b:38:c6:4a:ac:4e:0a:d4:b0:96:60:41:13:de:c6:17:
17:2e:9d:2d:e7:e6:fe:f4:d7:4f:58:e4:d1:36:a6:01:d0:0b:
fc:a5:f9:35:37:d2:92:f2:63:ed:39:c1:6f:5c:e8:01:fb:ef:
d7:bd:d8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:03 2026 by rpki-client