Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363363a626162303a3a2f34342d3438203d3e20323034353335.roa
File: 326130663a316363363a626162303a3a2f34342d3438203d3e20323034353335.roa (raw, json)
Hash identifier: 6dRR39fwOlH0pD9Jf8oNQddk3YgAIZ53Frf0pImValI=
Subject key identifier: D4:AD:2E:D4:D1:27:6E:5D:87:24:72:78:DE:F2:91:DA:40:0E:AD:CF
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 25B4D4E545A4B94156CB55CE9E9CEB4E80DAE036
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363363a626162303a3a2f34342d3438203d3e20323034353335.roa
Signing time: Fri 09 Oct 2026 02:48:00 +0000
ROA not before: Fri 09 Oct 2026 02:43:00 +0000
ROA not after: Fri 08 Oct 2027 02:48:00 +0000
asID: 204535
IP address blocks: 2a0f:1cc6:bab0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:b4:d4:e5:45:a4:b9:41:56:cb:55:ce:9e:9c:eb:4e:80:da:e0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Oct 9 02:43:00 2026 GMT
Not After : Oct 8 02:48:00 2027 GMT
Subject: CN=D4AD2ED4D1276E5D87247278DEF291DA400EADCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2f:68:f0:92:63:bc:51:0f:ba:7f:20:3c:32:
54:70:af:16:6b:a0:c0:e3:06:f8:51:f4:d4:7b:ac:
ee:07:ec:97:b0:4b:b1:a7:85:6b:c5:df:7c:84:ec:
8e:f0:81:38:64:aa:53:3d:1e:55:12:d6:21:00:2e:
8d:07:63:dc:f7:e7:ee:07:73:94:bc:d6:1f:ff:7a:
20:b5:45:e9:40:c4:cc:23:62:2f:8d:f4:89:84:99:
d5:59:7f:99:1a:dc:8a:4e:5f:8a:06:73:45:c9:2a:
51:78:a2:26:19:91:41:55:75:7a:81:f0:dc:e3:fd:
61:49:92:91:a3:30:a3:72:96:e0:d2:3f:f7:30:ff:
4e:c1:80:84:f5:eb:e4:36:d3:0f:8f:9a:6d:33:4f:
9f:dc:0e:e8:1c:96:74:41:7b:42:28:86:93:58:19:
87:6f:62:92:fc:13:1a:93:60:ff:02:27:d9:8a:37:
2d:e8:9a:c4:10:d2:d4:dd:8b:56:44:92:55:4c:b4:
5c:e9:cb:f1:c7:d6:f9:8b:06:e8:c0:92:a0:75:c5:
ed:f2:ae:27:ec:d2:bf:86:b4:9d:e5:33:12:d8:44:
12:27:db:bc:b2:cc:3a:b4:ae:b5:e8:55:48:af:0f:
da:df:c3:98:67:98:43:00:69:d2:57:61:55:0e:df:
cb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AD:2E:D4:D1:27:6E:5D:87:24:72:78:DE:F2:91:DA:40:0E:AD:CF
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363363a626162303a3a2f34342d3438203d3e20323034353335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc6:bab0::/44
Signature Algorithm: sha256WithRSAEncryption
00:ba:15:b3:33:4d:4e:44:78:43:12:3a:8e:7b:d5:f3:36:3e:
b1:05:ff:fb:f1:80:a5:a1:be:c9:5f:8c:ec:66:71:83:72:c4:
ed:42:bd:a8:5b:d5:78:5c:ee:3b:df:15:26:4c:68:40:b9:3d:
a5:5d:99:11:8c:89:53:36:7a:d3:3e:8e:84:c6:c9:22:d6:8b:
f2:25:e0:c2:29:7a:0a:16:62:db:b2:92:21:e6:78:a5:15:46:
41:2c:d7:dd:6c:23:b5:88:d2:f3:1e:a9:12:6e:70:99:58:82:
e9:89:b3:85:c6:6b:d3:7a:b8:dc:d6:0d:05:af:ad:47:f5:02:
69:b3:28:1b:66:e9:a3:cf:63:30:81:48:24:40:33:f2:63:9f:
e4:8a:89:09:cb:89:2c:92:d8:1a:7f:a8:9f:0d:49:64:0f:76:
d4:30:c3:2c:7c:3f:9c:d3:a6:26:71:24:8b:2f:04:17:14:91:
55:13:07:c9:0c:7e:eb:9d:5f:12:87:e7:da:d2:c4:b0:db:d3:
37:01:65:ab:fb:f1:ec:21:9f:80:60:36:69:ab:05:b5:89:e6:
52:dd:e9:b0:8e:e5:1b:ff:64:50:3a:f7:40:c4:85:6b:bc:91:
cd:88:03:9a:38:ab:0e:9c:21:9f:f8:4b:b9:03:e2:b7:21:3b:
fc:e4:16:40
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUJbTU5UWkuUFWy1XOnpzrToDa4DYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWJlMjQwMDIxYTI4N2YyOTg5NzNkOWVhMjhkZmM4MDcz
NWZkNTgwMDAeFw0yNjEwMDkwMjQzMDBaFw0yNzEwMDgwMjQ4MDBaMDMxMTAvBgNV
BAMTKEQ0QUQyRUQ0RDEyNzZFNUQ4NzI0NzI3OERFRjI5MURBNDAwRUFEQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLL2jwkmO8UQ+6fyA8MlRwrxZr
oMDjBvhR9NR7rO4H7JewS7GnhWvF33yE7I7wgThkqlM9HlUS1iEALo0HY9z35+4H
c5S81h//eiC1RelAxMwjYi+N9ImEmdVZf5ka3IpOX4oGc0XJKlF4oiYZkUFVdXqB
8Nzj/WFJkpGjMKNyluDSP/cw/07BgIT16+Q20w+Pmm0zT5/cDugclnRBe0IohpNY
GYdvYpL8ExqTYP8CJ9mKNy3omsQQ0tTdi1ZEklVMtFzpy/HH1vmLBujAkqB1xe3y
rifs0r+GtJ3lMxLYRBIn27yyzDq0rrXoVUivD9rfw5hnmEMAadJXYVUO38uNAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQU1K0u1NEnbl2HJHJ43vKR2kAOrc8wHwYDVR0j
BBgwFoAUG+JAAhoofymJc9nqKN/IBzX9WAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0
ZjBlLzAvMUJFMjQwMDIxQTI4N0YyOTg5NzNEOUVBMjhERkM4MDczNUZENTgwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ctSkFBaG9vZnltSmM5bnFLTl9JQnpY
OVdBQS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt
M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzM2
M2E2MjYxNjIzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMyMzAzNDM1MzMzNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHBCoPHMa6sDANBgkqhkiG9w0BAQsFAAOCAQEAALoVszNNTkR4QxI6
jnvV8zY+sQX/+/GApaG+yV+M7GZxg3LE7UK9qFvVeFzuO98VJkxoQLk9pV2ZEYyJ
UzZ60z6OhMbJItaL8iXgwil6ChZi27KSIeZ4pRVGQSzX3WwjtYjS8x6pEm5wmViC
6YmzhcZr03q43NYNBa+tR/UCabMoG2bpo89jMIFIJEAz8mOf5IqJCcuJLJLYGn+o
nw1JZA921DDDLHw/nNOmJnEkiy8EFxSRVRMHyQx+651fEofn2tLEsNvTNwFlq/vx
7CGfgGA2aasFtYnmUt3psI7lG/9kUDr3QMSFa7yRzYgDmjirDpwhn/hLuQPityE7
/OQWQA==
-----END CERTIFICATE-----
Generated at Sun Oct 18 16:33:26 2026 by rpki-client