Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e203534323532.roa
File: 33312e362e31332e302f32342d3234203d3e203534323532.roa (raw, json)
Hash identifier: TzzfHS6FKIc0v4y6tGfM+MYPGOv+azZ4IKh8cGKPSso=
Subject key identifier: 8D:C7:B4:83:22:F3:98:63:2E:47:A5:83:0C:E1:F2:58:CA:85:61:9C
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 4CA2A2A1788F126FA0678E6E655057E5278082CC
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e203534323532.roa
Signing time: Fri 11 Sep 2026 12:49:34 +0000
ROA not before: Fri 11 Sep 2026 12:44:34 +0000
ROA not after: Fri 10 Sep 2027 12:49:34 +0000
asID: 54252
IP address blocks: 31.6.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:a2:a2:a1:78:8f:12:6f:a0:67:8e:6e:65:50:57:e5:27:80:82:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 11 12:44:34 2026 GMT
Not After : Sep 10 12:49:34 2027 GMT
Subject: CN=8DC7B48322F398632E47A5830CE1F258CA85619C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e9:1c:55:e5:0a:68:73:e3:93:5c:13:97:22:
5d:a5:c2:6c:09:37:9e:f4:57:b0:74:0c:24:d4:9c:
09:6e:81:da:09:ef:b7:39:75:ed:99:bf:0e:b0:3e:
ff:8c:90:f6:fe:43:a6:4e:97:cf:4c:08:68:a2:d1:
2c:ce:03:37:ff:0f:a2:55:d1:3e:79:34:11:4d:4d:
20:ee:9c:3b:90:51:1c:c3:19:88:56:bc:2a:49:a6:
d6:fd:db:c0:dc:3a:4a:1b:f7:01:b7:5c:83:27:c4:
36:0f:a4:c3:98:e2:83:fd:d3:72:57:3e:d2:26:3d:
cb:fb:38:9a:65:82:46:2e:e3:1e:99:e9:f7:31:17:
66:1f:8f:69:dc:9f:0c:40:f3:6a:7f:54:49:7b:91:
8a:e3:8e:e3:86:52:3a:9a:52:05:88:b8:bd:6b:79:
55:d7:0c:e0:c8:5d:08:03:ce:84:e3:32:74:03:c7:
0d:bf:fa:3b:6a:3e:d8:68:41:ff:9f:9b:78:f1:e3:
6a:d9:eb:ea:89:a9:8d:02:74:c9:f1:aa:2d:e4:60:
c4:d0:03:bd:0c:1b:3b:0f:cf:5c:e7:1d:9f:5e:06:
28:b7:1a:95:58:eb:79:77:9e:eb:8a:38:f0:68:82:
88:b8:12:a7:d5:c8:f3:4b:db:55:ed:32:18:c6:61:
fe:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C7:B4:83:22:F3:98:63:2E:47:A5:83:0C:E1:F2:58:CA:85:61:9C
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e203534323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.13.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:b7:9d:c7:4b:a4:fa:a3:6c:89:43:ec:33:6a:79:57:d9:94:
9a:6a:71:2a:b2:ba:b8:9e:75:12:a2:cb:b6:ef:2c:14:4c:8c:
57:7e:d9:9d:d8:4b:9a:4a:bc:7c:ee:cf:b2:98:e2:78:d3:ef:
9a:b7:98:91:22:0b:a1:74:51:dc:b2:06:57:93:e6:e3:72:43:
1d:6f:86:f5:79:2e:e6:cd:9b:3d:57:3d:90:bb:73:00:cf:3e:
9c:66:1f:96:bf:f6:87:99:b2:0b:77:79:4c:bd:e0:76:b3:a3:
96:da:09:a8:4f:b6:e6:8c:7b:f5:fc:d1:25:79:75:6a:cf:27:
a0:4c:df:49:f9:54:f9:8f:23:11:26:e8:9f:34:78:8c:00:4b:
65:50:9e:74:54:17:d6:aa:cd:ff:3a:87:95:88:ff:14:74:62:
5d:20:d7:5b:85:44:a6:cf:9a:86:49:68:58:6d:f8:db:86:f3:
82:8e:a6:d3:90:16:73:19:68:1e:4d:57:cd:f1:f2:bf:39:a6:
55:31:17:7b:9e:92:60:d2:23:a4:ff:6e:b0:1d:90:5b:d2:4a:
dd:31:29:9f:11:eb:a6:24:4c:8b:35:68:e9:b4:80:87:e3:7a:
b4:c0:7d:98:31:3a:d5:5f:29:68:81:ee:8e:24:6a:b9:56:1b:
f4:9a:44:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:40:08 2026 by rpki-client