Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31352e302f32342d3234203d3e20323135373634.roa
File: 33312e362e31352e302f32342d3234203d3e20323135373634.roa (raw, json)
Hash identifier: g9JQDFe2a/PwSMe9icXHGC4PzNgwqqsd9Cx5Qp13Nz4=
Subject key identifier: BA:2D:AD:41:16:0D:6F:20:28:BB:E8:F5:DD:7E:56:48:48:8C:D1:7A
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 656F366CA6CC0962DBB9B05B7E7A88584DAADFD4
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31352e302f32342d3234203d3e20323135373634.roa
Signing time: Thu 05 Feb 2026 13:55:37 +0000
ROA not before: Thu 05 Feb 2026 13:50:37 +0000
ROA not after: Thu 04 Feb 2027 13:55:37 +0000
asID: 215764
IP address blocks: 31.6.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:6f:36:6c:a6:cc:09:62:db:b9:b0:5b:7e:7a:88:58:4d:aa:df:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Feb 5 13:50:37 2026 GMT
Not After : Feb 4 13:55:37 2027 GMT
Subject: CN=BA2DAD41160D6F2028BBE8F5DD7E5648488CD17A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3e:6c:0a:a5:a9:d0:fa:ff:ac:83:59:ff:ce:
35:1e:ec:73:d8:ab:63:fa:78:89:91:55:0a:30:df:
e4:1d:c7:fa:27:04:23:50:ca:97:3d:9d:4c:ff:8a:
3a:3f:48:16:b4:08:66:77:6c:02:fb:7b:74:bd:78:
7e:cf:e8:5e:c4:d4:3d:b7:3f:1c:be:dc:97:18:34:
7a:08:a4:4c:75:ea:96:49:a8:a4:36:85:02:dd:48:
2f:a8:6b:2a:60:19:e0:ab:cb:fa:47:55:e7:f9:58:
24:90:93:3c:31:19:76:93:ef:0a:92:b2:89:bc:82:
85:5d:19:8d:68:fe:73:ad:2e:f2:a1:48:40:8c:6a:
21:8e:eb:45:84:69:26:04:ce:ec:b8:f2:3b:ea:be:
d8:68:df:ef:ce:a1:1b:0d:25:fa:fb:69:4c:d8:f8:
6e:8b:84:c3:40:d6:98:30:c2:7c:fc:7f:be:e0:7c:
ae:b9:3f:c4:04:1b:f1:64:b9:0b:cb:19:94:10:b7:
c8:1f:65:23:23:56:b1:4d:e9:6f:b3:f6:c5:55:be:
e2:76:56:aa:3e:72:e5:7a:bd:06:7e:ec:f0:b5:f3:
f2:ec:88:be:89:fa:62:fd:ae:e5:2c:63:11:b1:c1:
6b:9e:dc:b2:96:ec:2e:92:b5:6c:66:e7:69:c5:7f:
5b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2D:AD:41:16:0D:6F:20:28:BB:E8:F5:DD:7E:56:48:48:8C:D1:7A
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31352e302f32342d3234203d3e20323135373634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.15.0/24
Signature Algorithm: sha256WithRSAEncryption
05:99:15:07:66:83:a5:44:77:c3:15:22:44:c2:75:ec:f6:0b:
ba:19:1f:14:15:cc:8f:c0:a5:ed:59:66:30:80:de:93:7f:44:
d2:bc:9c:73:59:68:2c:ab:70:4c:b8:60:ef:ae:63:e9:0f:fa:
9e:91:1e:ed:a0:0a:4b:59:46:9f:88:97:21:1a:f1:0a:97:84:
76:06:fd:64:06:f3:5e:14:cd:71:95:65:81:04:29:99:57:dd:
dd:be:03:ca:8f:65:72:be:b6:1c:9f:76:07:7e:50:64:5f:b7:
c0:22:4a:a1:2d:a5:54:13:19:0f:b0:b6:75:da:de:d7:26:45:
35:c3:05:28:8e:37:64:64:e5:54:9a:62:43:5f:1c:fe:a1:99:
6c:fc:4d:ab:bd:9f:dd:f4:dd:b0:fb:15:52:1e:63:a3:dd:ce:
8a:67:76:e1:c6:03:c4:4b:2f:7a:91:31:36:6a:62:be:ad:74:
fd:e7:f1:16:2e:ce:d0:c2:cc:a5:fa:c4:1f:48:96:51:83:c9:
cc:cf:7d:40:3e:e7:c0:c6:3b:12:68:9f:d9:ad:6a:0c:2e:d5:
ee:c0:15:67:31:2b:d1:5d:ee:dd:99:14:df:c8:fc:5e:4e:c9:
81:cf:6b:1e:a8:fb:94:52:20:1e:f7:a5:99:a7:54:08:f2:02:
40:60:99:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:39:56 2026 by rpki-client