
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31392e302f32342d3234203d3e203232333633.roa
File: 33312e362e31392e302f32342d3234203d3e203232333633.roa (raw, json)
Hash identifier: CVrAoAoDUU79a8WLXzqDvEZ5dukW9gdxwKeoHxvWdtc=
Subject key identifier: BA:2B:80:B4:7B:98:13:08:26:A9:5C:7C:FB:AC:88:B2:BE:E1:F7:2B
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 5F1298AFA7A2B87A785EE3FB72F52589FC8E926E
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31392e302f32342d3234203d3e203232333633.roa
Signing time: Mon 04 Aug 2025 06:54:13 +0000
ROA not before: Mon 04 Aug 2025 06:49:13 +0000
ROA not after: Mon 03 Aug 2026 06:54:13 +0000
asID: 22363
IP address blocks: 31.6.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:12:98:af:a7:a2:b8:7a:78:5e:e3:fb:72:f5:25:89:fc:8e:92:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Aug 4 06:49:13 2025 GMT
Not After : Aug 3 06:54:13 2026 GMT
Subject: CN=BA2B80B47B98130826A95C7CFBAC88B2BEE1F72B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:82:37:3d:02:34:e8:b2:18:d5:f3:18:71:f7:
c8:57:f5:3a:3e:e8:25:b3:60:b4:4c:2a:5d:de:3e:
2e:7c:e6:6d:d8:17:b9:c6:2d:d6:c2:c7:5e:0b:e4:
ee:27:12:5b:62:64:45:2c:cf:54:54:78:c0:54:17:
03:cc:18:44:66:b3:96:6d:4c:49:4d:07:67:38:3a:
0d:95:9a:eb:26:83:e9:50:c8:8f:7d:de:76:53:30:
42:0b:56:73:bd:22:ec:06:d1:1e:3a:4a:32:af:6b:
6b:7a:10:ae:92:8d:ac:7f:e9:c2:70:48:69:4b:da:
fd:13:37:9b:e1:f5:f1:8b:12:67:2c:27:a1:a0:06:
e8:ed:3c:c7:fe:09:61:52:70:83:63:e2:29:fe:6a:
3e:fd:10:30:66:37:10:63:11:19:f0:e6:5c:7e:2e:
56:16:bf:6a:72:80:d6:d6:99:eb:34:1a:a3:34:54:
da:24:6c:5c:36:79:5a:dc:e4:5a:72:f6:0c:20:18:
06:de:51:43:c9:1f:26:1c:26:05:87:9c:1c:d9:da:
8e:ef:67:0a:f5:0c:b2:cb:e8:34:ee:8a:d0:43:ec:
c7:4f:1d:8d:f8:54:c3:3f:66:08:cc:f2:62:90:7d:
b3:07:bc:ed:7d:88:5f:88:79:9e:6d:b1:fe:bb:57:
a4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2B:80:B4:7B:98:13:08:26:A9:5C:7C:FB:AC:88:B2:BE:E1:F7:2B
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31392e302f32342d3234203d3e203232333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.19.0/24
Signature Algorithm: sha256WithRSAEncryption
54:eb:e1:ce:1d:f6:71:b8:5d:e8:59:8c:b5:90:e7:33:6b:3b:
f5:fd:ac:31:3d:fa:4b:ff:ff:27:ae:90:19:03:91:25:2b:d1:
72:04:cd:58:91:75:63:32:92:47:bd:eb:cd:d7:aa:71:07:85:
1b:78:73:a9:d9:ee:4d:6b:ff:b5:ed:8a:a8:28:92:79:01:f2:
d5:3e:58:af:ed:1a:ed:e4:87:09:aa:fc:fe:1b:f8:03:2d:f6:
de:32:40:48:7e:95:64:d7:86:28:09:f2:8a:8d:ce:de:a5:fb:
a1:dd:bc:e2:c3:b0:f5:bb:e3:fc:f5:b4:df:c0:69:28:ca:76:
bc:f6:2a:62:bc:18:5c:49:08:74:22:66:29:89:a6:8b:db:7c:
a5:ed:dd:41:df:ad:78:87:70:c0:4a:7a:85:5e:4f:df:c2:9a:
49:47:06:83:6c:a6:57:58:61:a2:8f:e4:88:30:94:1a:e0:42:
6d:b7:c4:ec:d1:53:90:ac:78:58:94:78:7b:77:c4:f1:78:b6:
b2:57:9c:d2:6d:4e:10:4c:04:19:6e:8c:9e:33:a2:70:7e:a3:
f3:f9:ff:8e:09:83:be:d7:fc:82:08:af:a1:03:ef:0a:e7:d8:
48:be:d6:99:b2:f9:b1:8e:66:85:14:7a:0b:fc:4d:a6:5c:a6:
34:60:88:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:00:58 2025 by rpki-client