Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32352e302f32342d3234203d3e20343031333632.roa
File: 33312e362e32352e302f32342d3234203d3e20343031333632.roa (raw, json)
Hash identifier: Xrd0X6eBTc71taM+QMG08Rjbsy9MVkHixfAiG6zS/Ro=
Subject key identifier: EE:43:39:85:47:D5:A5:20:97:34:5E:4C:48:57:09:C0:43:F6:69:11
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 330FFC714CA192974B448C0DB70726745CDB1D2D
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32352e302f32342d3234203d3e20343031333632.roa
Signing time: Tue 15 Sep 2026 11:15:03 +0000
ROA not before: Tue 15 Sep 2026 11:10:03 +0000
ROA not after: Tue 14 Sep 2027 11:15:03 +0000
asID: 401362
IP address blocks: 31.6.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:0f:fc:71:4c:a1:92:97:4b:44:8c:0d:b7:07:26:74:5c:db:1d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 15 11:10:03 2026 GMT
Not After : Sep 14 11:15:03 2027 GMT
Subject: CN=EE43398547D5A52097345E4C485709C043F66911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c0:d2:42:70:cc:c0:03:5a:b9:48:83:f5:9f:
c8:9c:ca:6b:dc:1b:a7:01:b4:48:12:1f:90:86:6a:
de:81:7a:ce:a8:a5:b3:ff:1d:10:85:46:f6:dd:6a:
2c:8e:af:a7:d2:e7:e8:1f:04:cf:3a:c4:9d:af:75:
61:8e:d1:03:72:30:7a:aa:c7:96:4d:95:c5:33:cb:
01:c0:66:98:c5:e2:cb:00:54:cc:6d:63:55:e8:e2:
fe:a4:19:2e:27:f6:d8:37:84:2a:31:10:4b:cf:70:
2f:e0:50:05:15:46:62:a5:76:8c:b7:41:fb:50:cc:
b5:90:09:85:f8:b3:d0:10:23:e4:9d:27:9c:d8:90:
b1:fd:e5:bd:e5:79:c6:d1:73:da:36:c5:45:ab:31:
32:83:2e:c9:44:26:c1:1e:20:2f:a3:a4:62:7d:51:
04:39:3d:d3:2b:ec:39:cf:05:3a:db:19:0b:ba:64:
e9:87:a9:a8:2f:22:f4:c3:98:5a:c7:71:28:3a:2e:
22:1b:6f:4c:26:b8:48:9e:2b:27:9f:3f:cf:7f:34:
f9:95:ef:fe:7f:af:44:47:b6:b8:40:10:df:32:73:
d2:53:75:ca:67:a7:01:22:bc:9c:1a:08:49:fa:79:
07:e7:04:9f:ca:32:55:b5:5b:95:48:6a:e4:e7:bc:
8a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:43:39:85:47:D5:A5:20:97:34:5E:4C:48:57:09:C0:43:F6:69:11
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32352e302f32342d3234203d3e20343031333632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.25.0/24
Signature Algorithm: sha256WithRSAEncryption
55:00:9c:bc:a3:95:96:20:3f:16:69:47:72:4b:14:4e:f8:92:
19:4b:6a:c6:62:5b:49:f7:a6:6d:ed:9b:b1:05:f9:19:34:c7:
cc:61:4c:95:b2:cd:c2:d3:da:6d:4d:62:9c:76:b2:0d:5f:8f:
38:e4:6f:f2:ed:77:c0:8b:30:f7:cc:1b:99:75:38:9d:3b:a7:
97:fb:9f:07:f3:30:1c:99:6c:a3:9b:96:a8:c3:0a:17:e0:be:
41:e4:38:57:6f:f2:12:8f:2f:69:c6:33:ac:d0:4f:87:4a:e1:
ed:26:21:e7:c2:fe:d1:da:06:8d:57:fc:bb:bb:ae:a7:8f:57:
9f:8a:a9:94:4e:f5:f0:2b:9f:d2:d8:f8:f7:45:71:46:42:3f:
75:f7:0e:49:82:77:d3:a0:3e:7b:01:d5:7c:92:63:e5:20:36:
f3:b7:ad:c3:71:4f:2e:f5:23:46:af:fd:17:dd:5e:f6:7f:02:
95:15:2d:6e:dd:d2:a5:47:19:ea:49:d8:8c:5e:a5:7d:52:ec:
fa:8b:2b:c2:c0:ab:10:dc:35:5d:a5:bc:d4:60:6b:e3:d8:87:
25:92:28:a6:68:92:c2:2d:7d:77:f1:be:ac:ca:60:b5:c6:07:
60:b8:8b:eb:e8:75:98:27:86:04:08:c9:f8:ed:ef:48:22:64:
59:b4:e7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:19:38 2026 by rpki-client