Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34372e302f32342d3234203d3e20343032383537.roa
File: 33312e362e34372e302f32342d3234203d3e20343032383537.roa (raw, json)
Hash identifier: xXm3ahDWJAxK+0yZiM8OgN3EhFHJ5n+Kzq+8O/BUUOw=
Subject key identifier: A8:67:85:76:19:AB:80:21:03:FB:C6:17:A8:04:D7:86:F3:0C:80:FE
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 037C245D142EC9FC5E21AFEACE0F535B99A40C53
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34372e302f32342d3234203d3e20343032383537.roa
Signing time: Wed 16 Sep 2026 13:27:18 +0000
ROA not before: Wed 16 Sep 2026 13:22:18 +0000
ROA not after: Wed 15 Sep 2027 13:27:18 +0000
asID: 402857
IP address blocks: 31.6.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 02:04:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:7c:24:5d:14:2e:c9:fc:5e:21:af:ea:ce:0f:53:5b:99:a4:0c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 16 13:22:18 2026 GMT
Not After : Sep 15 13:27:18 2027 GMT
Subject: CN=A867857619AB802103FBC617A804D786F30C80FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8f:d3:19:ff:16:d7:c5:b5:a3:e5:bf:09:31:
b9:6f:70:c6:a0:c8:f1:42:d8:5f:b8:a3:24:b8:60:
c6:06:64:9b:c6:e9:eb:ce:90:68:51:e9:bd:32:02:
cb:9e:9f:4e:bc:1a:74:6c:cd:ef:6a:70:e6:3c:8b:
94:46:96:66:29:ef:cc:55:87:29:fe:6b:df:59:d6:
a7:40:59:fc:2e:e5:c8:1c:0c:a7:fe:d3:50:86:9c:
b3:4d:b6:bd:3e:e4:2a:21:ce:b2:5f:6c:92:ba:84:
30:a0:6c:dd:b3:b6:04:6b:3b:6a:a5:3a:e5:e2:3f:
28:61:2a:cb:1b:49:5a:cc:be:66:ca:a4:ec:ce:8e:
86:f9:48:96:c6:b8:18:f4:b3:53:df:91:df:90:5c:
bb:3e:37:7c:d6:13:f1:8b:45:f3:67:f0:7f:fe:ab:
84:a4:f6:0e:a2:ac:04:90:b4:81:0c:3e:7f:85:2b:
c5:cd:9e:33:70:43:05:1e:53:f7:e4:b2:39:f7:5f:
69:6d:dd:1b:fc:eb:d7:92:92:a5:b3:4d:ea:9e:72:
a6:ee:74:a4:7f:5a:d2:51:e5:10:21:e3:fa:c7:ad:
aa:b5:08:23:77:0f:78:ce:ed:e7:c8:8e:57:c6:28:
ad:c8:08:c0:93:0c:86:3e:c2:3b:eb:ab:21:ea:43:
3f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:67:85:76:19:AB:80:21:03:FB:C6:17:A8:04:D7:86:F3:0C:80:FE
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34372e302f32342d3234203d3e20343032383537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.47.0/24
Signature Algorithm: sha256WithRSAEncryption
38:b3:28:f9:be:0b:1d:22:46:f7:3a:74:a7:e3:f1:14:19:25:
44:a5:09:0a:2f:48:47:bf:b0:07:3d:b5:3f:c6:10:60:45:a5:
29:45:7d:a8:fb:b6:a0:ec:3e:8c:ef:13:04:fe:0e:86:10:d6:
68:02:f8:cd:1f:90:fc:8f:15:23:c5:97:46:85:99:77:a0:af:
85:9e:46:17:2a:39:37:7f:2a:47:40:ee:c3:f1:55:31:44:42:
fb:a7:3f:b9:47:ab:43:9a:6f:50:24:32:1e:b7:af:df:0b:45:
e0:f8:c5:32:0d:11:51:cd:81:1a:5b:2e:21:f0:f8:d9:31:8c:
bc:2a:ac:55:c4:f5:79:d8:a5:02:99:84:9b:5c:c0:14:3a:46:
0f:a5:31:bc:83:c5:6e:41:bd:4b:03:24:08:79:eb:46:24:b3:
3a:ca:74:7c:02:4b:35:d4:ef:0c:97:3f:6f:53:64:81:eb:cc:
06:59:c0:ce:71:85:77:d1:30:cd:53:51:46:74:30:f6:8a:b0:
66:7f:79:eb:28:05:91:f0:12:f6:d4:4f:d5:09:f1:5e:e8:46:
4a:51:17:0a:d2:78:87:a5:75:89:cf:12:7b:d7:1e:ea:e8:a7:
40:6a:2e:bc:dc:a2:9e:e2:01:16:15:88:a0:13:a6:14:b2:fd:
65:e0:ef:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:48:18 2026 by rpki-client