
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31312e302f32342d3234203d3e203232333633.roa
File: 33312e362e31312e302f32342d3234203d3e203232333633.roa (raw, json)
Hash identifier: DEKcEMYT/mit08PsdruDuG40yy/4jW5YdtS+GL0S91s=
Subject key identifier: 3B:88:FD:86:1A:74:FD:9F:E3:EB:AD:F5:3F:64:83:79:88:F4:B6:F3
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 40ED50539D5927A1EC92FCDBFE2095D39351A2E0
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31312e302f32342d3234203d3e203232333633.roa
Signing time: Mon 04 Aug 2025 06:54:13 +0000
ROA not before: Mon 04 Aug 2025 06:49:13 +0000
ROA not after: Mon 03 Aug 2026 06:54:13 +0000
asID: 22363
IP address blocks: 31.6.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ed:50:53:9d:59:27:a1:ec:92:fc:db:fe:20:95:d3:93:51:a2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Aug 4 06:49:13 2025 GMT
Not After : Aug 3 06:54:13 2026 GMT
Subject: CN=3B88FD861A74FD9FE3EBADF53F64837988F4B6F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:d2:bb:b7:9f:72:9c:6e:6f:cb:9f:2e:44:
c8:15:ae:31:c6:e0:34:c4:b8:cd:ae:dc:17:cd:c7:
8f:24:22:cb:e5:6a:df:55:67:df:ee:e0:8e:d9:87:
09:cc:55:17:04:9d:e9:25:7e:80:6d:ac:08:6b:e9:
39:da:52:4e:3b:02:3b:4a:03:c0:5b:e2:58:62:05:
7a:d1:d9:10:a9:b7:65:2b:59:da:d4:68:8a:2b:1e:
2e:34:39:54:b9:f9:18:b9:40:21:49:36:3a:6b:60:
93:ea:c5:0b:12:59:21:9c:5e:12:5c:1b:b6:be:8b:
43:0c:3f:fc:f4:26:06:96:5d:ee:57:ce:35:f5:00:
59:64:ce:66:a0:b9:ee:f7:75:cc:c3:18:f6:4b:ba:
ed:40:b9:99:95:d3:85:e6:41:69:1a:5d:01:8d:df:
a4:df:d6:5a:03:bc:e5:f4:5c:6c:df:ea:b6:62:35:
dc:c3:41:9a:0f:10:91:b0:08:8f:51:24:4b:9c:a3:
1a:40:68:e1:17:03:32:0c:fe:8f:b8:ea:fb:89:ee:
c2:94:98:6f:39:c3:ba:2f:95:4c:e6:f6:ea:76:cb:
e5:ce:27:a3:29:06:20:8d:ea:7f:95:2b:c2:04:2f:
bf:c8:63:9c:67:31:6d:1a:85:74:05:34:8a:be:19:
ef:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:88:FD:86:1A:74:FD:9F:E3:EB:AD:F5:3F:64:83:79:88:F4:B6:F3
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31312e302f32342d3234203d3e203232333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.11.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:1a:0c:81:ba:23:08:a7:85:e0:24:e3:30:e6:8b:5f:3d:eb:
4e:46:7b:51:8d:5e:77:0a:12:3f:cd:ee:6f:f2:a4:6d:99:6c:
69:e5:f0:ed:0e:c2:bc:43:54:df:36:b2:72:16:9f:97:46:e2:
9d:ff:cf:4a:e8:97:c5:42:0c:83:ad:85:78:e2:8a:fe:64:e0:
d9:67:e9:b3:72:37:dd:de:9b:0f:90:3e:13:65:b7:ef:51:9e:
1f:25:49:40:35:03:40:08:0a:09:73:df:31:ca:fa:6d:23:db:
b0:7b:08:80:6f:68:de:72:55:a7:fa:7f:81:fd:d5:c4:f6:68:
4c:5b:03:ba:c4:a9:9f:6c:7d:b9:f2:0f:31:69:b9:78:b6:70:
e0:a2:2c:b8:b9:5f:9a:73:33:52:22:d2:6c:e3:c3:47:4d:b2:
7d:50:14:1a:00:d9:ed:f7:9e:e0:57:e0:86:0a:70:75:78:5d:
49:61:a1:fa:b3:66:21:0f:d7:aa:c2:a8:ca:96:b1:bb:1a:83:
0c:5b:7f:a8:1c:f9:04:c5:db:0c:a7:74:f7:8f:41:81:4b:31:
34:83:89:19:1f:8c:1f:9c:31:e4:32:32:28:23:77:f6:53:a6:
68:05:4e:a0:f7:cb:d9:39:69:3b:50:20:70:96:c3:df:9d:0d:
b1:8c:dd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:54:35 2025 by rpki-client