Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32362e302f32342d3234203d3e203230343733.roa
File: 33312e362e32362e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: 1IbUm8GDL/+qxhu+YAZ7jKvBv457DcFTWzffaC+kESs=
Subject key identifier: 47:3B:C6:BC:6D:1C:A5:2D:0B:E4:30:B5:60:E7:E2:A7:F7:B1:77:53
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 7E2F9EF36691754B5D56AEAF15F8D7316B421322
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32362e302f32342d3234203d3e203230343733.roa
Signing time: Thu 17 Sep 2026 17:49:35 +0000
ROA not before: Thu 17 Sep 2026 17:44:35 +0000
ROA not after: Thu 16 Sep 2027 17:49:35 +0000
asID: 20473
IP address blocks: 31.6.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:2f:9e:f3:66:91:75:4b:5d:56:ae:af:15:f8:d7:31:6b:42:13:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 17 17:44:35 2026 GMT
Not After : Sep 16 17:49:35 2027 GMT
Subject: CN=473BC6BC6D1CA52D0BE430B560E7E2A7F7B17753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a3:4d:49:46:09:68:c4:c4:49:76:b6:9d:07:
cc:54:de:f6:62:8e:b5:6c:2a:1b:d3:53:f3:17:03:
34:3a:62:87:9e:5f:82:fb:52:9d:00:a0:98:dd:57:
f5:3b:a4:13:a1:e1:f5:0c:a7:cd:48:4a:33:12:53:
24:71:4e:e3:29:f9:9d:08:9a:2c:4b:d4:51:95:92:
11:93:a6:22:24:38:e8:22:8f:03:00:94:c7:60:82:
1e:c2:ea:1a:6b:c4:5a:21:bc:2e:cf:01:c0:bb:ed:
77:fa:bf:30:a3:b2:09:48:76:89:34:e8:53:e9:ae:
eb:74:12:4b:25:25:9e:33:ec:9e:03:70:ac:d5:3c:
d3:b1:3a:5c:d8:8f:89:a9:e1:85:ea:48:77:c5:34:
19:4d:5b:05:c5:cf:e5:6e:30:6f:31:56:ba:7a:ac:
cf:43:e0:9b:f6:43:71:93:9b:38:7e:39:e0:53:44:
99:ab:d7:35:46:d3:bd:ec:92:09:db:05:21:71:1e:
ff:6f:0b:7b:e7:4d:31:c4:fc:bc:fa:f2:f2:c9:42:
6f:d6:a5:c5:f6:42:49:89:70:64:dc:01:87:38:43:
c3:ab:24:80:79:5c:31:fc:67:62:78:20:74:cf:62:
b2:9f:f7:d9:6a:66:a7:10:24:ba:b6:25:15:91:bb:
09:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3B:C6:BC:6D:1C:A5:2D:0B:E4:30:B5:60:E7:E2:A7:F7:B1:77:53
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32362e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.26.0/24
Signature Algorithm: sha256WithRSAEncryption
21:6d:cd:0e:1e:2d:ee:cd:24:bb:7c:ee:f3:d6:13:71:54:66:
e2:c7:8c:7c:8f:da:d0:02:39:db:f0:2f:67:31:ec:df:18:4e:
b4:82:71:70:d5:9f:c3:c9:fa:94:01:5e:50:a3:ed:61:a2:62:
af:07:e5:16:4b:05:08:be:6f:98:b6:d1:b9:eb:f2:21:ab:74:
2f:8e:ec:0f:8d:d2:25:4f:9b:54:cc:1c:61:8e:f8:1b:f8:26:
f5:40:0d:0c:40:7a:14:5f:8b:f8:cc:b2:b5:38:4c:14:a0:f6:
fc:f7:5d:33:72:72:ee:d1:05:9a:49:a8:92:e8:4d:3a:e0:46:
2e:51:b4:4c:6e:04:a5:bd:5f:49:d9:05:d9:12:a3:a0:e7:46:
a3:55:40:9f:b8:d4:3a:25:47:69:ad:7d:33:bf:1f:7e:2b:8e:
f5:c4:15:d1:5b:a7:0f:87:b4:17:fc:4d:6f:5e:ce:3e:5f:fe:
a8:68:9e:7c:e2:41:b9:a3:f6:5e:a4:4d:6d:93:75:b0:68:8e:
83:93:93:b1:c1:fe:ab:8e:14:ed:5a:f6:53:20:83:cf:74:5f:
73:8b:bc:57:31:f7:b5:90:d3:cc:af:5a:6b:5d:61:ee:8a:ec:
36:fc:bf:78:23:9d:b6:3a:8e:18:94:53:71:1b:5c:b0:7c:6d:
51:e3:7f:53
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUfi+e82aRdUtdVq6vFfjXMWtCEyIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNjA5MTcxNzQ0MzVaFw0yNzA5MTYxNzQ5MzVaMDMxMTAvBgNV
BAMTKDQ3M0JDNkJDNkQxQ0E1MkQwQkU0MzBCNTYwRTdFMkE3RjdCMTc3NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeo01JRgloxMRJdradB8xU3vZi
jrVsKhvTU/MXAzQ6YoeeX4L7Up0AoJjdV/U7pBOh4fUMp81ISjMSUyRxTuMp+Z0I
mixL1FGVkhGTpiIkOOgijwMAlMdggh7C6hprxFohvC7PAcC77Xf6vzCjsglIdok0
6FPprut0EkslJZ4z7J4DcKzVPNOxOlzYj4mp4YXqSHfFNBlNWwXFz+VuMG8xVrp6
rM9D4Jv2Q3GTmzh+OeBTRJmr1zVG073skgnbBSFxHv9vC3vnTTHE/Lz68vLJQm/W
pcX2QkmJcGTcAYc4Q8OrJIB5XDH8Z2J4IHTPYrKf99lqZqcQJLq2JRWRuwnFAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQURzvGvG0cpS0L5DC1YOfip/exd1MwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTMyMzYyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzQzNzMzLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHwYaMA0G
CSqGSIb3DQEBCwUAA4IBAQAhbc0OHi3uzSS7fO7z1hNxVGbix4x8j9rQAjnb8C9n
MezfGE60gnFw1Z/DyfqUAV5Qo+1homKvB+UWSwUIvm+YttG56/Ihq3QvjuwPjdIl
T5tUzBxhjvgb+Cb1QA0MQHoUX4v4zLK1OEwUoPb8910zcnLu0QWaSaiS6E064EYu
UbRMbgSlvV9J2QXZEqOg50ajVUCfuNQ6JUdprX0zvx9+K471xBXRW6cPh7QX/E1v
Xs4+X/6oaJ584kG5o/ZepE1tk3WwaI6Dk5Oxwf6rjhTtWvZTIIPPdF9zi7xXMfe1
kNPMr1prXWHuiuw2/L94I522Oo4YlFNxG1ywfG1R439T
-----END CERTIFICATE-----
Generated at Tue Sep 22 09:05:01 2026 by rpki-client