Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35352e302f32342d3234203d3e20323139303735.roa
File: 33312e362e35352e302f32342d3234203d3e20323139303735.roa (raw, json)
Hash identifier: TguEXaZCZpMFkXRsjytnpEqo7sFcD+a0oOmxe+nSeYU=
Subject key identifier: EA:54:B3:EF:16:2B:85:09:2E:B1:E5:EC:F5:A0:B0:3A:A0:48:7E:37
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 0AED2AA2FDFB67DB4046A24D60973A3AB8B8F200
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35352e302f32342d3234203d3e20323139303735.roa
Signing time: Sat 10 Oct 2026 02:53:51 +0000
ROA not before: Sat 10 Oct 2026 02:48:51 +0000
ROA not after: Sat 09 Oct 2027 02:53:51 +0000
asID: 219075
IP address blocks: 31.6.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ed:2a:a2:fd:fb:67:db:40:46:a2:4d:60:97:3a:3a:b8:b8:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 10 02:48:51 2026 GMT
Not After : Oct 9 02:53:51 2027 GMT
Subject: CN=EA54B3EF162B85092EB1E5ECF5A0B03AA0487E37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:66:93:61:b0:cc:97:b0:54:3c:5b:86:37:87:
25:65:67:38:e7:c4:ea:15:e1:0c:0e:a4:51:e4:1f:
67:83:12:b7:93:6b:a6:79:95:68:79:23:8b:c3:10:
20:1f:e6:ea:31:f4:97:5a:84:d1:c3:1c:66:49:ed:
01:a6:89:43:7e:96:75:1c:68:62:31:25:53:9c:2a:
66:f4:d7:d3:3e:c1:f2:6b:de:42:8a:44:83:89:0a:
15:43:e3:1c:c5:60:69:03:8c:96:c1:ca:31:26:af:
00:c1:7c:7b:2a:59:c9:ab:95:08:df:68:69:12:09:
5d:21:17:12:7d:3e:eb:98:21:ad:5e:88:66:2c:ca:
d5:89:57:6e:b0:b3:ed:17:fd:6a:e7:32:e4:36:00:
14:02:d0:e0:ba:ef:6b:e9:39:73:77:f6:ad:4c:15:
dd:be:99:f7:dd:4f:b1:11:73:12:ec:61:ca:a3:21:
a1:c4:4d:cb:2c:c8:40:d9:f7:62:e2:ab:2a:cf:cd:
20:f9:d0:10:36:a2:77:d7:4c:2c:bc:b4:63:78:1d:
c1:8c:c3:59:c5:2e:9f:8d:5b:12:8c:3e:ad:09:25:
da:99:2a:ab:01:1a:b3:d0:28:81:d9:0a:a0:fb:72:
fa:b4:51:72:71:74:11:e6:50:fc:6e:bb:df:a1:5c:
e2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:54:B3:EF:16:2B:85:09:2E:B1:E5:EC:F5:A0:B0:3A:A0:48:7E:37
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35352e302f32342d3234203d3e20323139303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.55.0/24
Signature Algorithm: sha256WithRSAEncryption
89:3a:af:d5:06:56:52:73:33:81:5f:a7:0f:cf:f2:b3:55:69:
70:80:e8:52:10:e7:3e:84:f3:ad:16:e3:ed:c6:70:ae:ae:e2:
2b:93:d2:7e:28:fd:01:95:96:ef:ec:81:b5:9e:76:05:b4:c6:
90:ac:92:d9:9b:d5:57:a1:ad:0d:5a:44:6f:ab:b3:c9:63:0e:
bb:8b:17:e6:ff:68:1a:01:14:d3:0b:aa:08:54:33:8d:f2:cd:
e0:de:84:20:9e:82:c0:3e:75:8e:48:6c:0a:3d:2b:c1:b9:15:
a5:f4:6c:2a:99:bb:2d:9a:97:2c:d7:6b:10:dd:e6:1f:bd:e5:
1e:40:40:6a:93:09:40:7f:37:bd:65:61:11:65:0f:66:5c:87:
9b:13:99:b7:4b:9a:b4:08:88:91:0e:cf:26:ed:e5:9c:80:1e:
57:67:d5:ac:2b:55:d3:21:db:e5:b8:95:ac:02:69:6d:3f:bb:
1b:f7:7e:29:6d:e3:0f:5a:7e:ec:d2:9b:65:20:b6:42:31:e8:
ad:ff:d3:6d:ac:ef:47:aa:7a:fc:b0:85:76:49:3a:75:3b:04:
5b:56:29:8d:ce:5b:fc:29:51:94:6a:43:d8:56:f6:9f:5b:60:
4e:fb:91:76:63:12:9f:e6:65:cf:f7:2c:67:d4:43:f0:3c:62:
9d:b7:d8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:13:43 2026 by rpki-client