Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32372e302f32342d3234203d3e20343032383636.roa
File: 33312e362e32372e302f32342d3234203d3e20343032383636.roa (raw, json)
Hash identifier: BNjh/7gH6Pd0UR9/d+lUQLsZT4MPI9f5cDOqL3eVX+k=
Subject key identifier: A1:B1:EF:D1:A5:28:81:5A:81:D1:D8:46:47:B6:64:C9:13:5E:C5:60
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 3AF12C48714F9E915E878FB5527C12ECE065D161
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32372e302f32342d3234203d3e20343032383636.roa
Signing time: Wed 16 Sep 2026 20:57:37 +0000
ROA not before: Wed 16 Sep 2026 20:52:37 +0000
ROA not after: Wed 15 Sep 2027 20:57:37 +0000
asID: 402866
IP address blocks: 31.6.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:f1:2c:48:71:4f:9e:91:5e:87:8f:b5:52:7c:12:ec:e0:65:d1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 16 20:52:37 2026 GMT
Not After : Sep 15 20:57:37 2027 GMT
Subject: CN=A1B1EFD1A528815A81D1D84647B664C9135EC560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:58:af:0b:19:d2:e6:47:0e:cc:8d:84:b3:
a7:0f:e1:ea:50:40:80:8d:4a:d4:5c:cd:9e:d3:10:
ec:4c:05:3b:43:ff:c9:37:5c:95:70:3b:5a:9f:4d:
6a:55:7a:59:dc:5e:10:6c:f2:76:85:10:65:01:b7:
40:6b:d8:11:8f:10:3a:0e:75:b8:64:8f:00:20:7c:
5a:09:96:d3:bf:3e:bd:1a:22:dc:8b:ef:2e:e7:28:
64:0b:d2:bb:73:ea:d9:aa:1c:ce:72:a0:d8:6b:81:
c4:ac:89:4d:96:98:c8:ed:86:bf:de:95:d1:a6:eb:
bc:2d:a8:2e:9e:cb:56:9a:cc:0b:bc:2b:14:2b:9f:
15:0d:1c:fd:0d:44:b6:25:2d:df:e5:66:87:ad:d8:
f3:b2:b3:27:6d:62:69:50:02:4a:9d:d0:5b:9f:5c:
a9:56:08:db:20:af:b7:21:d2:3a:2e:80:40:dd:58:
ec:7d:a4:88:c2:a5:c7:5a:27:e7:17:df:29:7d:be:
3a:df:a2:88:7c:30:8b:fa:4e:f2:fb:72:c1:30:87:
91:fa:20:98:54:0e:1b:e2:51:28:39:12:14:ff:a0:
56:a8:bb:ae:3a:aa:4b:44:a1:b1:b9:c9:2d:be:9d:
41:d2:36:e7:3e:f1:73:e2:27:4a:ec:37:c4:7c:36:
17:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B1:EF:D1:A5:28:81:5A:81:D1:D8:46:47:B6:64:C9:13:5E:C5:60
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32372e302f32342d3234203d3e20343032383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.27.0/24
Signature Algorithm: sha256WithRSAEncryption
36:a3:ca:e1:0f:40:94:63:d2:43:31:e7:cc:b6:24:54:11:d7:
7d:cb:48:33:08:2a:9a:4e:ee:1a:33:3e:85:bb:d5:2d:2a:87:
29:9a:3f:d2:c2:0c:39:8c:24:85:bd:30:9f:26:a4:98:c0:0d:
19:26:58:06:4a:d8:52:e6:31:15:00:cc:ff:5b:f3:d9:6d:d9:
b6:6e:6c:b7:6c:56:fe:9d:17:41:5c:56:92:f7:4d:2d:a7:6e:
05:68:0e:b4:36:67:21:01:f8:cc:35:f2:9e:32:b1:65:46:80:
b9:47:c8:fe:9e:a6:8c:c2:cf:54:73:88:dd:ef:ba:2c:07:2e:
10:0e:f6:87:37:cc:a6:b9:a2:93:22:36:40:b3:1c:37:b0:62:
01:57:98:a4:4d:6e:73:77:68:f2:b6:f4:a2:37:df:d8:fc:55:
7d:47:f1:74:24:ed:42:62:5c:a4:d8:f5:30:71:f1:90:81:8e:
90:28:33:13:56:b0:91:5f:33:75:ed:04:3d:36:35:7d:39:a6:
e1:a5:2a:bd:12:89:7e:72:97:d4:20:94:c0:48:b2:26:11:de:
c0:ae:47:78:eb:39:cd:1f:38:83:14:a7:ac:8c:76:72:31:9c:
02:bc:6a:57:67:9d:db:43:0e:19:e3:23:4f:ce:02:32:77:b8:
b4:b1:c5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:11:31 2026 by rpki-client