Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e203634323637.roa
File: 33312e362e31332e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier: ObDbbFN5LXj4SSiXXfAiihb3nIM+4QNMdx9XlczkZDg=
Subject key identifier: 6F:E9:63:14:C5:DB:AE:29:C4:3A:DE:88:A5:8A:F2:5C:FE:9E:A4:25
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 1CD7E697D0F0C1A5058C1D77891F6191D5E771BB
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e203634323637.roa
Signing time: Fri 11 Sep 2026 12:49:34 +0000
ROA not before: Fri 11 Sep 2026 12:44:34 +0000
ROA not after: Fri 10 Sep 2027 12:49:34 +0000
asID: 64267
IP address blocks: 31.6.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:d7:e6:97:d0:f0:c1:a5:05:8c:1d:77:89:1f:61:91:d5:e7:71:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 11 12:44:34 2026 GMT
Not After : Sep 10 12:49:34 2027 GMT
Subject: CN=6FE96314C5DBAE29C43ADE88A58AF25CFE9EA425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:24:02:04:bf:47:41:f7:69:84:af:d5:cd:c3:
ae:ed:63:38:df:02:bd:20:1e:42:85:15:6f:57:54:
bc:f4:6b:9e:74:87:ae:28:75:05:e3:01:16:78:62:
c2:26:1c:be:c4:32:b9:5d:4e:8f:e7:5e:ba:b5:ef:
0a:2f:c8:7e:1c:78:62:c8:c9:14:63:19:46:e4:ae:
3d:dc:60:f0:46:35:cb:33:62:f6:87:f6:9c:d3:c1:
1a:2d:48:7c:c7:f2:23:a1:96:43:40:97:d8:c6:52:
58:b5:e6:8e:f8:5e:53:69:c9:b4:c5:ce:16:c8:81:
ac:1d:9e:42:a1:7d:d6:0f:7b:2a:33:95:55:6e:bf:
34:a7:50:68:1f:72:88:b2:2f:4e:fa:15:6e:88:15:
6b:39:48:6a:44:de:97:cb:3b:11:83:d7:ac:39:ca:
63:1d:f6:de:33:8f:22:ec:7f:8e:9e:ed:e3:d5:bf:
6a:62:5c:57:eb:1c:59:b0:16:0f:59:a6:b4:2c:62:
db:01:ca:36:bc:47:a2:d2:18:8c:f8:36:98:a4:5f:
5c:15:54:93:0e:9e:31:63:2a:8c:7a:47:26:1c:01:
fb:23:fb:79:99:71:00:4b:70:cf:d3:7b:9e:f6:45:
c2:b4:a5:0d:ea:0f:b5:d0:a0:fc:e2:ac:af:df:6c:
5d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E9:63:14:C5:DB:AE:29:C4:3A:DE:88:A5:8A:F2:5C:FE:9E:A4:25
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e203634323637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.13.0/24
Signature Algorithm: sha256WithRSAEncryption
33:f9:86:89:c9:28:00:ae:8b:e2:ab:0a:65:ef:12:36:37:4c:
c7:e9:5e:cc:cb:51:b1:4a:27:e0:50:8c:e8:6a:8a:e1:6a:4c:
bf:c3:0c:47:2a:0c:0b:0a:3b:e3:fa:1d:05:c2:a3:41:9f:0d:
b0:02:eb:f9:af:ab:04:26:56:79:d5:1d:83:21:9c:bf:5b:1a:
cf:e4:27:e0:7f:e8:08:0c:ec:90:9b:c5:1d:1c:59:7f:08:11:
62:89:01:37:30:3d:31:9c:2f:a9:b3:63:6b:50:bf:6f:d9:c9:
af:ae:3e:1f:52:62:64:fa:7a:e6:a4:ee:5c:37:44:91:49:9b:
7a:5b:4a:ed:f7:d0:78:cc:fa:66:30:4d:12:e3:4e:3a:cc:bb:
87:62:b1:0d:04:a5:bd:75:ce:41:71:7f:3d:04:f7:c3:d5:83:
4a:3e:27:1f:0a:51:68:54:dc:29:3b:b7:22:46:59:62:df:62:
8d:25:79:4e:ca:28:7c:2c:1d:cf:36:70:81:b1:24:be:61:26:
d7:0c:bf:90:95:a6:ed:f9:65:b6:6c:3c:61:fb:64:a3:c6:5c:
e1:64:a0:4f:4d:40:44:f6:14:c7:ff:0c:e3:31:c9:21:81:96:
da:dc:ba:c0:5f:36:ef:b4:2b:f0:5a:78:d1:82:8f:fd:9e:9b:
16:01:ba:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:15:30 2026 by rpki-client