Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33392e302f32342d3234203d3e20323033303534.roa
File: 33312e362e33392e302f32342d3234203d3e20323033303534.roa (raw, json)
Hash identifier: ukqaM0T5Io3uNx1VquMe1s3Nvf++danL9v5IrRyXXMg=
Subject key identifier: 49:41:B0:7A:67:EB:5F:1B:99:41:61:48:29:DF:BB:F2:9D:E8:E5:86
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 6F987CFFF5BC9F012AADEEFDC7DFD46518C30CDC
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33392e302f32342d3234203d3e20323033303534.roa
Signing time: Sat 28 Mar 2026 13:19:25 +0000
ROA not before: Sat 28 Mar 2026 13:14:25 +0000
ROA not after: Sat 27 Mar 2027 13:19:25 +0000
asID: 203054
IP address blocks: 31.6.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:98:7c:ff:f5:bc:9f:01:2a:ad:ee:fd:c7:df:d4:65:18:c3:0c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Mar 28 13:14:25 2026 GMT
Not After : Mar 27 13:19:25 2027 GMT
Subject: CN=4941B07A67EB5F1B9941614829DFBBF29DE8E586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e3:69:93:a8:1a:51:be:6c:8e:63:a7:88:f4:
ce:57:17:b5:fe:8f:68:89:21:ac:20:97:00:1b:45:
80:71:e1:07:65:d1:4e:7d:dc:7a:18:ae:5a:fb:5e:
ad:72:e0:06:90:5d:85:36:1a:4f:a9:48:d8:92:27:
de:d8:38:02:b6:b7:7f:fa:c3:19:bd:4e:8a:28:bc:
d8:0f:a8:5b:e0:07:c3:a3:d4:00:7e:44:ac:d6:13:
24:aa:3b:6f:f6:de:f5:51:ce:08:f7:27:34:02:3f:
5d:73:d9:d4:64:55:36:6c:f5:c6:e0:95:a3:85:37:
56:5d:f2:a5:be:37:a7:86:90:61:1e:bd:0f:3e:08:
7d:d6:e6:c5:00:c3:a6:fd:38:c2:e8:5d:a8:97:d9:
76:79:26:0c:e0:ad:d6:bb:ed:6f:fc:08:2c:18:e2:
8d:86:64:c7:85:46:71:f2:a5:df:b7:e9:44:5d:14:
52:2b:07:35:1a:9f:1b:2a:b8:5f:10:08:5f:51:cc:
7b:5e:73:1a:b9:7d:03:df:fc:9f:f8:6a:68:a3:89:
93:8b:94:45:f7:8f:97:fa:11:8d:5d:12:ed:a5:9a:
7a:c2:f8:4c:48:69:66:87:f4:8d:51:2a:ad:e6:ee:
57:a0:f2:74:78:ac:b4:d9:33:f0:fa:7a:98:fc:58:
19:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:41:B0:7A:67:EB:5F:1B:99:41:61:48:29:DF:BB:F2:9D:E8:E5:86
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33392e302f32342d3234203d3e20323033303534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.39.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:8b:ca:ab:f6:76:d2:f3:df:d8:03:92:27:10:62:a1:20:b0:
3b:9b:87:65:76:7a:e9:74:a3:8d:54:c6:23:3a:76:d9:a8:4a:
82:ab:bf:5e:4d:67:34:44:5d:79:a5:fd:eb:f5:af:1e:28:e6:
97:95:ae:b3:bc:0a:2d:40:3a:ee:d5:1f:86:bf:ee:79:41:9b:
37:3e:94:e4:3b:a2:b4:70:27:31:e1:a6:1c:fa:52:60:52:90:
b3:5b:66:5f:6e:cd:6f:7e:bd:d1:80:3d:3a:b9:31:72:01:f1:
4c:fe:9b:14:69:2e:40:8a:ea:c7:1a:88:72:33:94:c3:80:af:
1b:06:55:f2:2e:c0:d5:75:5f:00:b9:e7:aa:2c:61:44:07:4d:
ba:a6:3e:00:11:d3:af:a6:8c:1f:e4:30:72:52:76:21:f8:69:
5d:0b:a0:b0:0c:a7:15:c8:5a:9c:5e:08:bc:d6:11:f0:f2:55:
b9:2e:f9:b5:0e:7b:7e:94:29:d1:2e:78:aa:81:68:4b:f0:c9:
dc:d7:74:95:ee:18:40:16:44:99:dd:ac:4d:21:44:f1:f2:8c:
1a:64:99:36:5b:a4:c6:e3:07:ba:9b:a0:5d:89:00:e5:5c:d9:
49:86:c3:b7:23:cd:b4:f8:0e:e8:90:63:c8:29:88:eb:50:8f:
36:23:4a:df
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUb5h8//W8nwEqre79x9/UZRjDDNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNjAzMjgxMzE0MjVaFw0yNzAzMjcxMzE5MjVaMDMxMTAvBgNV
BAMTKDQ5NDFCMDdBNjdFQjVGMUI5OTQxNjE0ODI5REZCQkYyOURFOEU1ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq42mTqBpRvmyOY6eI9M5XF7X+
j2iJIawglwAbRYBx4Qdl0U593HoYrlr7Xq1y4AaQXYU2Gk+pSNiSJ97YOAK2t3/6
wxm9TooovNgPqFvgB8Oj1AB+RKzWEySqO2/23vVRzgj3JzQCP11z2dRkVTZs9cbg
laOFN1Zd8qW+N6eGkGEevQ8+CH3W5sUAw6b9OMLoXaiX2XZ5Jgzgrda77W/8CCwY
4o2GZMeFRnHypd+36URdFFIrBzUanxsquF8QCF9RzHtecxq5fQPf/J/4amijiZOL
lEX3j5f6EY1dEu2lmnrC+ExIaWaH9I1RKq3m7leg8nR4rLTZM/D6epj8WBmfAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUSUGwemfrXxuZQWFIKd+78p3o5YYwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTMzMzkyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzMzMDM1MzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBicw
DQYJKoZIhvcNAQELBQADggEBAHyLyqv2dtLz39gDkicQYqEgsDubh2V2eul0o41U
xiM6dtmoSoKrv15NZzREXXml/ev1rx4o5peVrrO8Ci1AOu7VH4a/7nlBmzc+lOQ7
orRwJzHhphz6UmBSkLNbZl9uzW9+vdGAPTq5MXIB8Uz+mxRpLkCK6scaiHIzlMOA
rxsGVfIuwNV1XwC556osYUQHTbqmPgAR06+mjB/kMHJSdiH4aV0LoLAMpxXIWpxe
CLzWEfDyVbku+bUOe36UKdEueKqBaEvwydzXdJXuGEAWRJndrE0hRPHyjBpkmTZb
pMbjB7qboF2JAOVc2UmGw7cjzbT4DuiQY8gpiOtQjzYjSt8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:43:18 2026 by rpki-client