Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e20323135373634.roa
File: 33312e362e31342e302f32342d3234203d3e20323135373634.roa (raw, json)
Hash identifier: qEvYLjo5HFsy5+EctLOKcEkHzuwHDdlZH6Anld5qMqM=
Subject key identifier: A0:2F:3D:51:17:63:72:D4:50:37:34:C0:11:31:CA:ED:37:9E:B7:62
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 221D2238A1671E502DF5BC4CFC71C8E9541C4CC9
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e20323135373634.roa
Signing time: Sat 09 Aug 2025 12:54:13 +0000
ROA not before: Sat 09 Aug 2025 12:49:13 +0000
ROA not after: Sat 08 Aug 2026 12:54:13 +0000
asID: 215764
IP address blocks: 31.6.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:1d:22:38:a1:67:1e:50:2d:f5:bc:4c:fc:71:c8:e9:54:1c:4c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Aug 9 12:49:13 2025 GMT
Not After : Aug 8 12:54:13 2026 GMT
Subject: CN=A02F3D51176372D4503734C01131CAED379EB762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b8:86:af:c3:43:77:e3:16:55:75:00:6b:7d:
ba:63:00:e3:77:f3:a9:cf:28:db:27:7f:59:00:3b:
10:59:14:d8:ae:65:17:30:d9:5b:99:6c:4d:ae:70:
1d:b0:11:c5:76:9b:0d:4c:3c:77:af:2f:0c:b6:f4:
b9:eb:46:ae:3d:67:63:b2:a7:6b:fd:c3:fb:57:e6:
c5:62:46:69:65:b4:91:6f:0e:63:32:2a:a2:b7:60:
aa:68:24:ae:bc:c8:ab:18:04:73:bb:c1:2b:27:be:
46:3e:46:b7:2d:70:55:cc:2d:7d:a3:c8:cf:9f:79:
8a:7c:c1:dd:34:8f:b2:15:97:9c:9d:74:2b:01:e6:
86:8e:fe:f6:91:0f:3a:26:ba:a5:28:c6:68:d3:4a:
6f:6f:31:4d:de:2d:4e:60:2a:21:a0:a2:08:6f:37:
15:f8:06:26:7d:8b:93:d3:ec:cc:5d:1b:e3:b2:06:
a5:e9:ad:96:d5:fb:27:d1:fb:7a:d3:a4:67:81:5f:
df:ac:71:39:82:d0:7b:d7:2e:15:3c:32:99:dd:73:
36:94:76:c2:2a:d4:36:ec:eb:a5:5a:e1:3f:bb:7c:
cf:a1:2d:2d:89:f5:3d:b9:09:2b:a3:1f:f4:4a:d9:
5b:66:fa:4b:5a:ee:15:1e:e6:45:90:71:13:b0:14:
ab:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2F:3D:51:17:63:72:D4:50:37:34:C0:11:31:CA:ED:37:9E:B7:62
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e20323135373634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.14.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:55:67:db:88:40:a0:ab:c3:a9:07:74:c4:2c:ff:fa:38:db:
9f:10:49:01:88:a5:25:54:b7:6d:7f:2a:ae:77:66:f3:5f:44:
98:68:45:17:57:8e:c1:49:57:ab:e8:bd:c9:50:4a:85:70:8f:
06:01:74:09:f6:23:81:9a:b2:89:d2:c1:7c:b3:6f:81:88:36:
43:58:19:a1:cd:0b:a9:8d:45:92:e6:e0:54:30:17:f9:78:0c:
72:90:32:1b:18:b6:b4:3b:94:f1:80:a3:25:79:af:8a:25:11:
06:36:20:80:13:6c:46:84:b0:c6:fd:92:b0:ec:6f:a0:4d:65:
28:f5:f3:7d:f5:00:5b:d0:1f:70:9e:be:2c:1c:0a:69:5a:38:
d4:e9:30:59:ba:53:b9:1c:bb:1c:28:a7:d3:68:00:79:5d:07:
e9:87:27:69:8e:f2:43:7a:af:ae:d1:ca:43:2c:c0:b0:54:c3:
8b:ce:79:de:78:dd:58:32:f1:42:52:0c:34:0e:76:d4:7a:78:
30:e5:60:d8:3e:66:ec:92:01:5e:b8:69:e5:58:80:2e:fe:7a:
d8:a3:b9:33:f4:f7:1c:53:e2:07:22:8e:44:78:b5:e0:d6:c3:
97:e8:b7:e3:bb:c5:bd:53:0b:59:8e:23:26:57:da:01:9d:c9:
8f:af:dc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:51:58 2025 by rpki-client