Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e20333937363330.roa
File: 33312e362e31332e302f32342d3234203d3e20333937363330.roa (raw, json)
Hash identifier: TtbFFPAQoG8kHvRo2V9SPHPLc0S1baLeWfXib1AkxwA=
Subject key identifier: A9:52:ED:63:EA:B1:3C:81:D0:96:F4:EE:A3:7B:26:F9:35:A8:22:A3
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 6B3455C4F605B29DEDE97A0C0B8A1680BB88DAB0
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e20333937363330.roa
Signing time: Fri 11 Sep 2026 12:49:34 +0000
ROA not before: Fri 11 Sep 2026 12:44:34 +0000
ROA not after: Fri 10 Sep 2027 12:49:34 +0000
asID: 397630
IP address blocks: 31.6.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:34:55:c4:f6:05:b2:9d:ed:e9:7a:0c:0b:8a:16:80:bb:88:da:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 11 12:44:34 2026 GMT
Not After : Sep 10 12:49:34 2027 GMT
Subject: CN=A952ED63EAB13C81D096F4EEA37B26F935A822A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a1:6a:d6:71:36:83:08:48:33:2d:8e:15:30:
8b:61:80:5a:ec:cf:6a:de:99:59:65:6a:00:b4:47:
e4:0f:de:1b:4a:4e:f7:c8:72:11:63:b2:0f:12:46:
96:f4:ae:cb:09:23:0d:ed:17:2e:59:e2:b2:69:6b:
5e:6e:85:c4:8a:76:06:2d:19:ff:db:7a:3a:d7:98:
42:67:93:ec:9d:75:0e:e6:ee:2f:33:6c:5f:af:32:
4f:f4:a2:34:e5:05:7e:fc:26:fd:31:60:17:bb:59:
83:25:e8:3f:79:c1:bc:1d:a3:43:cd:ac:76:7b:a2:
17:d5:c8:53:eb:f3:19:d3:76:dd:d4:08:8a:c4:87:
65:b4:c5:be:08:b7:b9:08:2f:cf:ba:70:14:e2:64:
4f:be:c6:6e:7e:dc:29:c5:e5:43:21:b1:94:22:ac:
b7:af:be:89:cd:fe:25:54:10:71:ed:ff:98:d4:8e:
86:a2:57:ba:db:db:2f:c1:00:a1:bb:45:5e:ed:d5:
26:c0:5a:9a:11:dd:a5:a4:a0:f2:24:c4:00:97:e6:
6a:61:19:96:54:7b:1c:bf:bc:50:f3:f1:8a:dd:92:
b0:97:50:3b:9a:15:a7:9e:58:05:4a:b5:b0:f3:c5:
62:73:e3:00:eb:c5:21:62:b1:17:43:08:78:14:1e:
e9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:52:ED:63:EA:B1:3C:81:D0:96:F4:EE:A3:7B:26:F9:35:A8:22:A3
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e20333937363330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.13.0/24
Signature Algorithm: sha256WithRSAEncryption
04:56:11:bf:6e:4e:c9:57:1b:d6:a2:74:78:85:d0:4f:41:7c:
90:8e:69:33:5d:ba:5f:0f:85:1d:d8:9f:ef:d6:79:2c:98:14:
90:2f:53:41:fa:18:f5:cc:45:cb:c2:91:75:ac:b0:ae:a5:ff:
48:d5:e1:01:02:2f:90:72:8c:59:5f:bc:7c:a2:9e:cc:b8:40:
f0:6a:c0:79:62:15:d4:93:2a:d4:92:a4:35:0a:58:c5:7a:39:
56:1e:71:25:8e:e6:ee:77:1c:d5:bf:a4:62:27:6f:04:30:b3:
6a:9b:bd:e9:cb:a4:bb:38:e2:90:1c:60:8f:52:4f:41:e5:41:
aa:7d:c5:27:e6:fa:42:b2:4c:04:0c:df:54:95:23:f0:e2:8c:
5c:29:e6:75:90:7f:47:b3:5a:ce:28:b1:98:b2:ae:fe:50:b0:
d1:99:8d:cf:fd:03:0f:e1:9c:0a:d1:7b:3e:7f:49:f7:d8:ae:
f2:32:82:23:fd:bb:fa:8d:18:c4:50:4c:fa:1b:e1:84:4f:3f:
c4:66:c2:6d:5c:01:83:47:0d:dd:b4:fa:9d:05:7c:69:88:64:
fe:da:1b:a6:8a:04:1b:fd:5a:8c:9c:4c:f9:b3:56:4f:9e:29:
c7:18:dc:c0:22:eb:4c:42:34:73:8f:e2:71:40:6f:43:5c:8f:
68:42:b5:9b
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUazRVxPYFsp3t6XoMC4oWgLuI2rAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNjA5MTExMjQ0MzRaFw0yNzA5MTAxMjQ5MzRaMDMxMTAvBgNV
BAMTKEE5NTJFRDYzRUFCMTNDODFEMDk2RjRFRUEzN0IyNkY5MzVBODIyQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEoWrWcTaDCEgzLY4VMIthgFrs
z2remVllagC0R+QP3htKTvfIchFjsg8SRpb0rssJIw3tFy5Z4rJpa15uhcSKdgYt
Gf/bejrXmEJnk+yddQ7m7i8zbF+vMk/0ojTlBX78Jv0xYBe7WYMl6D95wbwdo0PN
rHZ7ohfVyFPr8xnTdt3UCIrEh2W0xb4It7kIL8+6cBTiZE++xm5+3CnF5UMhsZQi
rLevvonN/iVUEHHt/5jUjoaiV7rb2y/BAKG7RV7t1SbAWpoR3aWkoPIkxACX5mph
GZZUexy/vFDz8YrdkrCXUDuaFaeeWAVKtbDzxWJz4wDrxSFisRdDCHgUHum3AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUqVLtY+qxPIHQlvTuo3sm+TWoIqMwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTMxMzMyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM5MzczNjMzMzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBg0w
DQYJKoZIhvcNAQELBQADggEBAARWEb9uTslXG9aidHiF0E9BfJCOaTNdul8PhR3Y
n+/WeSyYFJAvU0H6GPXMRcvCkXWssK6l/0jV4QECL5ByjFlfvHyinsy4QPBqwHli
FdSTKtSSpDUKWMV6OVYecSWO5u53HNW/pGInbwQws2qbvenLpLs44pAcYI9ST0Hl
Qap9xSfm+kKyTAQM31SVI/DijFwp5nWQf0ezWs4osZiyrv5QsNGZjc/9Aw/hnArR
ez5/SffYrvIygiP9u/qNGMRQTPob4YRPP8Rmwm1cAYNHDd20+p0FfGmIZP7aG6aK
BBv9WoycTPmzVk+eKccY3MAi60xCNHOP4nFAb0Ncj2hCtZs=
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:37:27 2026 by rpki-client