Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363373a666630323a3a2f34382d3438203d3e20323034353335.roa
File: 326130663a316363373a666630323a3a2f34382d3438203d3e20323034353335.roa (raw, json)
Hash identifier: OekAIxb1dJq3/WSiPjSrEPtqNF+VgyqpEHz1h6H+0W0=
Subject key identifier: 3E:C0:3E:E2:61:36:AD:F0:E2:FF:8D:22:4B:63:E5:0A:EB:7F:A6:3E
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 0343D5EEF6445F8549BA6D2EEB1245D7B8127C6B
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363373a666630323a3a2f34382d3438203d3e20323034353335.roa
Signing time: Fri 09 Oct 2026 02:50:35 +0000
ROA not before: Fri 09 Oct 2026 02:45:35 +0000
ROA not after: Fri 08 Oct 2027 02:50:35 +0000
asID: 204535
IP address blocks: 2a0f:1cc7:ff02::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 07:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:43:d5:ee:f6:44:5f:85:49:ba:6d:2e:eb:12:45:d7:b8:12:7c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Oct 9 02:45:35 2026 GMT
Not After : Oct 8 02:50:35 2027 GMT
Subject: CN=3EC03EE26136ADF0E2FF8D224B63E50AEB7FA63E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f6:8b:87:cb:89:4b:20:c6:e8:e4:47:0a:21:
18:97:5e:a3:9e:f0:b3:18:b5:09:bb:1e:e1:cd:0b:
d1:b4:44:ab:6f:56:39:b2:d7:4a:ce:ac:c2:7b:f3:
6c:65:fc:21:39:cd:4d:d1:42:48:3f:8a:62:ee:78:
fd:ab:86:d9:ae:99:b6:c6:5d:b8:39:eb:37:9b:c9:
d2:84:12:42:90:7a:63:2b:b7:1a:b4:56:79:05:b6:
59:18:3c:01:8f:22:22:34:97:6e:90:49:7b:23:0a:
23:42:0f:c2:16:04:1a:ec:07:88:1b:67:37:6b:fe:
d4:83:a4:70:b4:5c:14:5a:0e:76:e4:58:1a:dc:54:
33:80:d6:8f:f7:36:d2:44:a8:1e:b2:82:06:bf:9d:
6a:27:31:8c:43:79:10:0c:b1:9e:9b:d2:e8:53:25:
65:fd:8b:a9:14:a6:9d:03:ff:51:0b:fc:fa:46:a8:
01:47:b3:28:1b:ec:13:68:c8:27:dc:37:c6:21:b2:
2e:8f:ef:92:33:29:2f:2c:fe:b7:f1:6f:76:aa:e4:
b3:e1:4d:2f:4c:aa:46:b9:c4:52:80:e4:4d:76:fa:
b4:4e:38:90:07:80:8d:cc:a1:44:56:8e:df:e5:00:
ca:ae:5b:82:d2:c3:47:7d:85:14:51:48:4c:53:70:
00:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C0:3E:E2:61:36:AD:F0:E2:FF:8D:22:4B:63:E5:0A:EB:7F:A6:3E
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363373a666630323a3a2f34382d3438203d3e20323034353335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc7:ff02::/48
Signature Algorithm: sha256WithRSAEncryption
66:4d:bc:29:1c:95:32:5a:90:bc:0d:b5:f6:28:0b:8f:79:be:
67:84:e8:ab:e6:b8:d3:fa:0a:9e:42:07:c2:7b:65:2c:96:76:
c8:96:37:52:60:e9:8f:77:f9:7b:1f:b5:f6:a1:08:82:64:8c:
fb:05:54:0f:35:9e:d7:f1:2a:5d:1d:73:e5:93:f9:d2:c1:92:
64:a0:e9:aa:17:55:a2:44:e3:26:dd:8d:45:34:a6:74:17:c0:
79:d1:a2:8d:96:d2:e2:13:64:ad:dd:8d:88:31:94:06:64:03:
92:9f:4a:a5:7d:ab:59:03:34:bc:c8:c6:1a:0b:b3:0e:ee:39:
37:ee:b2:df:db:ff:c9:7d:7e:19:e9:ac:80:f6:68:70:b4:55:
ef:af:ba:1e:22:99:d6:14:0d:45:07:7f:87:dc:f0:00:fb:b8:
18:3a:da:00:df:c7:c8:27:a3:74:fc:4e:75:e6:47:1c:d7:83:
d8:f0:6b:4a:25:eb:19:da:3a:6e:a3:ca:5c:c3:86:3f:75:9a:
c0:f8:5c:00:5c:db:4e:c9:40:64:65:94:e1:88:cf:49:de:2f:
0e:d8:53:25:75:23:c7:08:5d:dd:6e:39:09:82:74:ae:26:f0:
84:92:ac:af:2f:43:4f:4a:86:5b:7a:ef:f1:e0:0a:94:a9:af:
34:b6:5a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 18:27:52 2026 by rpki-client