Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35382e302f32342d3234203d3e203232333633.roa
File: 33312e362e35382e302f32342d3234203d3e203232333633.roa (raw, json)
Hash identifier: IU/SjcU24z6/NNnAM9P9iDom6C6uYslZhNjTKgIj7+k=
Subject key identifier: 86:BD:6D:8C:70:E1:37:FA:1E:EF:FF:17:B7:CB:1E:D0:00:4B:20:A2
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 3CCA4118F372A1D527466C59A79B4961157E9913
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35382e302f32342d3234203d3e203232333633.roa
Signing time: Mon 06 Jul 2026 07:48:56 +0000
ROA not before: Mon 06 Jul 2026 07:43:56 +0000
ROA not after: Mon 05 Jul 2027 07:48:56 +0000
asID: 22363
IP address blocks: 31.6.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:ca:41:18:f3:72:a1:d5:27:46:6c:59:a7:9b:49:61:15:7e:99:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jul 6 07:43:56 2026 GMT
Not After : Jul 5 07:48:56 2027 GMT
Subject: CN=86BD6D8C70E137FA1EEFFF17B7CB1ED0004B20A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e7:d2:34:ef:a8:6e:44:04:51:54:16:bc:12:
2f:67:34:10:e2:6c:3e:28:6e:75:19:1a:8d:94:13:
22:d6:47:a0:38:b5:f2:b6:6c:0f:38:19:2d:86:14:
52:f7:a2:ca:42:27:dc:88:32:2b:11:2f:61:9d:2f:
c0:7c:1c:66:3e:86:28:6c:bc:8f:61:4c:10:85:f4:
de:53:e6:4f:e9:2b:a9:56:ff:f1:0c:1d:71:5a:43:
5e:2f:7c:4a:88:fb:70:98:20:74:47:34:cb:0a:54:
60:d0:29:c0:05:e0:25:59:30:c2:14:32:7c:de:9c:
e6:c5:bf:c6:2b:1a:38:ca:2a:45:57:ac:70:1a:39:
ec:a2:24:66:cc:e4:ba:54:b5:94:94:84:e9:0e:61:
b3:50:42:78:58:9c:56:28:aa:b7:21:1b:50:56:ed:
f3:96:28:e8:9d:50:c5:6a:c2:73:45:48:d5:93:f2:
05:2f:85:4e:a0:61:e0:ee:17:31:1e:e2:55:d4:fe:
1b:11:e1:8f:20:26:ee:6e:34:0d:1b:4e:c1:8c:38:
9e:ee:4a:ca:64:a2:e5:93:97:ad:96:26:dd:31:02:
33:da:c5:6d:c5:42:42:0a:52:d0:0b:0f:06:d1:0b:
12:92:eb:9a:25:61:0b:80:64:d2:c0:1b:8f:05:7b:
97:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BD:6D:8C:70:E1:37:FA:1E:EF:FF:17:B7:CB:1E:D0:00:4B:20:A2
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35382e302f32342d3234203d3e203232333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.58.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:14:7d:4f:68:ab:3e:bf:04:c8:60:70:f3:b5:8f:92:97:b7:
21:e6:c4:75:c6:40:e1:0c:d1:66:5a:67:87:4c:e6:e3:06:2b:
cb:00:80:d0:37:9a:57:a4:c8:b1:52:64:ef:15:93:2f:cb:6d:
79:04:b1:07:2f:7c:f9:ff:d0:1e:65:f7:6c:af:9c:11:ba:8c:
84:5c:f7:06:23:a9:c0:5b:30:2b:20:92:54:78:fb:f1:9e:43:
f5:e4:94:22:01:cc:d6:21:b6:e3:cc:e2:fe:02:59:0f:77:40:
08:71:40:09:6c:bc:bc:91:77:7a:98:d7:4f:b5:d3:67:9d:82:
0e:8e:10:f0:cf:cb:0f:76:3b:6a:75:06:73:53:22:05:b1:2d:
57:de:86:af:9f:b1:e2:88:04:bc:22:bc:59:78:35:db:bb:03:
28:96:fa:d7:6e:88:c2:eb:45:cb:41:98:00:3e:7f:0f:21:f6:
d5:1c:8d:80:c7:80:76:3a:03:7a:81:e2:8e:e6:1e:c7:eb:5a:
a4:50:d3:89:fc:bc:db:4f:d9:6f:00:46:5a:61:19:ac:0d:4a:
78:32:e0:4a:52:71:5c:76:8b:7c:84:80:6e:3b:c8:c1:25:99:
43:29:6a:2d:cf:a8:01:3d:4e:46:ab:43:36:a7:49:97:c6:e8:
08:c6:18:38
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUPMpBGPNyodUnRmxZp5tJYRV+mRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNjA3MDYwNzQzNTZaFw0yNzA3MDUwNzQ4NTZaMDMxMTAvBgNV
BAMTKDg2QkQ2RDhDNzBFMTM3RkExRUVGRkYxN0I3Q0IxRUQwMDA0QjIwQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG59I076huRARRVBa8Ei9nNBDi
bD4obnUZGo2UEyLWR6A4tfK2bA84GS2GFFL3ospCJ9yIMisRL2GdL8B8HGY+hihs
vI9hTBCF9N5T5k/pK6lW//EMHXFaQ14vfEqI+3CYIHRHNMsKVGDQKcAF4CVZMMIU
MnzenObFv8YrGjjKKkVXrHAaOeyiJGbM5LpUtZSUhOkOYbNQQnhYnFYoqrchG1BW
7fOWKOidUMVqwnNFSNWT8gUvhU6gYeDuFzEe4lXU/hsR4Y8gJu5uNA0bTsGMOJ7u
SspkouWTl62WJt0xAjPaxW3FQkIKUtALDwbRCxKS65olYQuAZNLAG48Fe5czAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUhr1tjHDhN/oe7/8Xt8se0ABLIKIwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM1MzgyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMyMzMzNjMzLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHwY6MA0G
CSqGSIb3DQEBCwUAA4IBAQBuFH1PaKs+vwTIYHDztY+Sl7ch5sR1xkDhDNFmWmeH
TObjBivLAIDQN5pXpMixUmTvFZMvy215BLEHL3z5/9AeZfdsr5wRuoyEXPcGI6nA
WzArIJJUePvxnkP15JQiAczWIbbjzOL+AlkPd0AIcUAJbLy8kXd6mNdPtdNnnYIO
jhDwz8sPdjtqdQZzUyIFsS1X3oavn7HiiAS8IrxZeDXbuwMolvrXbojC60XLQZgA
Pn8PIfbVHI2Ax4B2OgN6geKO5h7H61qkUNOJ/LzbT9lvAEZaYRmsDUp4MuBKUnFc
dot8hIBuO8jBJZlDKWotz6gBPU5Gq0M2p0mXxugIxhg4
-----END CERTIFICATE-----
Generated at Tue Jul 21 10:20:16 2026 by rpki-client