Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e362e302f32342d3234203d3e203232333633.roa
File: 33312e362e362e302f32342d3234203d3e203232333633.roa (raw, json)
Hash identifier: YIehoZm7arYnxfGj4+q6chbJUtry9C8F4MXC0gh6q5s=
Subject key identifier: 06:75:E6:73:EB:74:40:D4:4C:FD:AE:F1:0B:72:E8:39:C2:0D:73:87
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 1E7C0BCD7300236F9CA78F5AEF64832038D52E72
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e362e302f32342d3234203d3e203232333633.roa
Signing time: Mon 06 Jul 2026 07:48:56 +0000
ROA not before: Mon 06 Jul 2026 07:43:56 +0000
ROA not after: Mon 05 Jul 2027 07:48:56 +0000
asID: 22363
IP address blocks: 31.6.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:7c:0b:cd:73:00:23:6f:9c:a7:8f:5a:ef:64:83:20:38:d5:2e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jul 6 07:43:56 2026 GMT
Not After : Jul 5 07:48:56 2027 GMT
Subject: CN=0675E673EB7440D44CFDAEF10B72E839C20D7387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6c:b5:24:0b:dd:d5:dc:5f:85:5b:d7:93:47:
63:eb:7f:26:5c:58:6a:18:b1:49:64:bb:50:48:af:
93:dd:ad:bb:24:d6:df:a0:c9:9e:5d:b7:f4:fb:1f:
00:d8:4c:7d:96:52:c2:f3:25:bf:72:a6:f7:94:48:
6a:dc:d3:2b:00:36:82:fc:f6:47:0d:f0:43:f7:33:
3e:0e:09:6b:37:2a:b1:33:e4:72:01:d5:e9:37:4f:
ee:ce:66:d4:36:85:46:f7:08:95:aa:7c:e4:17:bd:
14:c2:a3:19:93:44:a7:a5:34:6a:98:3c:90:8d:a1:
4a:33:a5:c8:4e:8b:e8:54:f0:2e:17:37:29:f0:cd:
22:b4:1a:6c:a8:07:55:c0:7c:82:fa:4e:0d:9b:ed:
38:7e:d5:cc:ef:d2:21:0c:20:ba:84:79:70:98:5a:
33:d2:cb:81:12:34:17:30:e9:bc:0f:72:c4:78:f9:
50:b6:39:fa:b9:55:96:87:3f:3e:c0:fc:4f:e6:5e:
b2:fc:88:ce:4b:c5:18:44:29:b0:a5:03:d6:f1:ac:
86:5b:14:20:3c:c7:18:f6:d7:6c:e8:78:e6:15:d7:
6c:d6:90:8b:05:33:4d:a2:39:1a:ac:bf:2a:33:41:
48:c0:ba:54:4a:5f:5c:94:a6:8e:5c:01:2a:40:2f:
e0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:75:E6:73:EB:74:40:D4:4C:FD:AE:F1:0B:72:E8:39:C2:0D:73:87
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e362e302f32342d3234203d3e203232333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.6.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:7e:57:45:9e:be:d4:b8:d9:55:11:6b:93:02:0b:ce:cd:9e:
48:00:0b:ef:84:d9:7a:5b:88:67:7d:dd:51:ca:84:b7:82:a4:
e9:bc:c6:65:cb:7e:11:77:c1:2e:90:4c:2b:6e:6f:69:de:d1:
d8:41:33:c3:c1:de:cc:b0:5c:95:25:54:72:ef:07:ae:cf:15:
f2:f6:67:0f:6d:20:59:bd:5e:a1:94:02:49:17:72:76:ce:cb:
41:cc:ee:b2:6b:c8:ad:04:07:6a:1b:c8:65:91:ee:34:2a:61:
ee:3c:cd:68:ba:9b:16:e6:b2:99:20:3f:2a:c8:7c:cd:dd:71:
98:73:c3:65:a9:8d:09:01:14:bf:40:52:1f:4c:39:06:b1:33:
07:15:2d:3d:64:33:9c:3e:db:ae:07:4f:31:d5:d7:46:b3:49:
b1:96:b4:bb:d7:bb:48:0a:2e:26:ce:5a:fc:1f:12:3a:8b:33:
5a:3d:d0:99:29:ee:2e:84:1f:43:e8:3d:7d:8f:54:82:a7:aa:
64:d2:cf:78:e9:20:a0:c4:c4:ab:a6:22:b0:6f:38:1e:b0:c7:
98:14:32:cd:de:48:92:3a:d5:2b:69:34:5c:20:51:09:12:10:
de:92:91:7f:f1:96:4b:78:a5:69:a8:77:74:01:df:67:ac:c3:
ef:25:27:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:19:23 2026 by rpki-client