Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e312e302f32342d3234203d3e203339333833.roa
File: 33312e362e312e302f32342d3234203d3e203339333833.roa (raw, json)
Hash identifier: oN1J5AMxM4XmHxKIK9gVL379nfJEA5Y5gc6WTxXga24=
Subject key identifier: E5:5E:EA:D2:34:14:54:24:8E:69:D2:2A:9C:EA:D7:CB:C5:A4:8E:CF
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 1348647634C3656FC695B1A30D1FF78DE9024AA5
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e312e302f32342d3234203d3e203339333833.roa
Signing time: Thu 17 Sep 2026 07:49:35 +0000
ROA not before: Thu 17 Sep 2026 07:44:35 +0000
ROA not after: Thu 16 Sep 2027 07:49:35 +0000
asID: 39383
IP address blocks: 31.6.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:48:64:76:34:c3:65:6f:c6:95:b1:a3:0d:1f:f7:8d:e9:02:4a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 17 07:44:35 2026 GMT
Not After : Sep 16 07:49:35 2027 GMT
Subject: CN=E55EEAD2341454248E69D22A9CEAD7CBC5A48ECF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:23:21:50:ca:9d:d2:c1:ab:75:d1:f1:c6:a4:
fc:75:0d:17:b9:f5:81:10:d2:18:92:d3:35:91:02:
5d:7d:ea:88:cf:69:5c:74:92:8c:18:40:2b:e7:1b:
35:c3:a9:26:e0:d3:ce:ea:52:17:54:48:a7:51:c3:
24:f3:e7:a7:2e:35:1b:e9:3f:05:7a:1c:27:3a:41:
17:1a:40:0a:05:7a:0d:2d:8a:e6:94:d1:fd:d3:cf:
9c:00:41:77:1f:1b:46:e6:18:2b:da:43:05:d2:8b:
c0:68:05:fb:91:8a:14:de:39:f5:63:dc:16:cb:29:
d2:9b:d8:23:2b:fc:73:75:41:92:f2:ce:2a:90:bf:
1e:bb:d6:da:f0:36:67:ed:7d:a6:85:06:84:87:51:
22:84:04:ec:ec:71:70:31:3a:cf:ca:3c:da:7a:e0:
30:db:ac:88:38:99:c5:73:0e:02:d8:ab:fa:c5:74:
03:af:9b:4e:8b:61:fc:1a:cf:e5:f9:9c:27:ce:fb:
aa:d7:05:e1:9c:7b:7b:75:9b:37:82:94:4e:5f:37:
82:c1:d8:61:d5:ec:64:23:82:af:c5:b3:7c:37:5f:
d6:3e:d5:7d:5e:e1:ec:e3:4c:9f:d1:40:f5:91:99:
0e:22:4d:10:a2:6f:fa:71:97:08:3b:07:83:61:46:
b7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5E:EA:D2:34:14:54:24:8E:69:D2:2A:9C:EA:D7:CB:C5:A4:8E:CF
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e312e302f32342d3234203d3e203339333833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.1.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:39:75:18:5a:c9:6a:cd:e4:6b:5d:e6:59:9f:b2:52:12:07:
87:38:4a:4f:cd:ff:d9:2a:e5:81:40:af:be:c8:f9:92:df:9a:
ac:90:5b:88:01:a0:a1:6b:8a:cf:c5:2c:4b:76:f1:62:d0:9e:
b4:1f:dd:f9:93:a0:0d:e2:7e:02:92:22:0e:dc:51:7a:02:4c:
c9:b5:ce:b2:dd:4d:a4:a8:10:92:8e:f2:e8:f2:e8:aa:2e:ad:
79:7f:26:6c:cd:6d:b1:3b:5c:f7:df:b6:02:04:94:cc:f6:2a:
9a:ff:15:7a:ae:88:63:e5:99:09:61:d3:53:e1:a4:6a:81:68:
52:6d:de:63:73:26:09:8a:58:19:7b:98:41:00:db:67:de:7c:
45:e6:56:84:46:56:89:4d:55:7d:9d:59:65:4c:07:76:c4:0f:
9a:4e:9a:eb:00:a1:1b:2a:df:7d:bd:33:d0:cb:72:6a:43:19:
f6:18:d1:0a:30:c4:d8:98:3a:dc:68:76:e5:9e:c5:6c:7e:85:
bc:1a:43:a6:04:e2:13:7d:44:05:fe:8f:48:d2:ac:aa:7d:5c:
c9:21:6a:25:d0:9b:0d:be:b5:7e:61:25:24:2a:78:31:18:88:
07:a6:9f:ed:8e:d6:7e:2a:b3:26:63:69:e5:34:fe:74:59:af:
fd:33:e8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:56:14 2026 by rpki-client