Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/326130393a313430303a3a2f32392d3438203d3e203432343233.roa
File: 326130393a313430303a3a2f32392d3438203d3e203432343233.roa (raw, json)
Hash identifier: 9TLvBT89XYTM1SMeWU6N5e98PNzLKc6ko0JmiliPkp8=
Subject key identifier: 29:CF:C0:7E:3C:FD:2E:4F:3C:6B:2D:82:0B:63:E5:6B:EE:9E:0C:33
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 79F531344ADDBAF398AC583ED1969B034BDEE5DF
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/326130393a313430303a3a2f32392d3438203d3e203432343233.roa
Signing time: Wed 30 Sep 2026 08:50:33 +0000
ROA not before: Wed 30 Sep 2026 08:45:33 +0000
ROA not after: Wed 29 Sep 2027 08:50:33 +0000
asID: 42423
IP address blocks: 2a09:1400::/29 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 18:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:f5:31:34:4a:dd:ba:f3:98:ac:58:3e:d1:96:9b:03:4b:de:e5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Sep 30 08:45:33 2026 GMT
Not After : Sep 29 08:50:33 2027 GMT
Subject: CN=29CFC07E3CFD2E4F3C6B2D820B63E56BEE9E0C33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:f7:b2:46:b0:18:46:73:e1:be:34:1d:6a:
ce:63:33:49:60:4e:0c:0a:66:29:53:4f:ca:9b:b2:
85:40:9b:83:2d:0f:fb:be:b2:d8:a1:f2:b7:41:8a:
fe:1d:46:5b:4e:01:fd:32:a1:3e:4f:88:ab:b5:9b:
d3:6e:87:1d:79:b0:06:6a:28:9d:53:e5:3e:17:cf:
aa:e0:a3:60:8e:51:f7:10:c0:49:f1:40:0d:21:34:
65:96:83:0c:a3:f6:a5:12:7c:9c:65:20:8f:6d:21:
73:ca:ae:eb:70:b8:7b:0a:6b:9c:5b:fa:bb:33:d2:
05:f2:37:db:e1:10:72:96:4a:b0:6c:56:c7:30:ba:
06:f5:c6:cb:30:65:69:1b:1d:88:e0:94:68:36:b4:
a1:5d:20:98:dc:23:a1:45:cc:9e:20:45:09:d5:64:
9e:12:31:6f:74:e8:db:97:84:80:89:11:b4:b4:3b:
c8:a0:d2:fb:a3:84:9b:6b:4e:dd:75:16:1d:c8:07:
a3:27:9e:6a:5b:5e:23:4a:91:45:8e:00:38:e4:76:
b9:84:01:fd:c8:74:71:7f:bb:2b:b9:dd:98:b0:62:
52:c1:96:22:44:1d:7f:81:33:b9:f5:5c:34:fa:12:
3c:f9:23:98:c7:9f:f1:ad:88:f9:23:22:06:a8:f7:
fd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CF:C0:7E:3C:FD:2E:4F:3C:6B:2D:82:0B:63:E5:6B:EE:9E:0C:33
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/326130393a313430303a3a2f32392d3438203d3e203432343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:1400::/29
Signature Algorithm: sha256WithRSAEncryption
be:3b:b4:6d:60:c4:70:d5:d6:a8:a5:81:67:79:54:7d:eb:c9:
76:1a:8a:1d:84:50:d7:64:c9:5a:87:41:92:72:78:25:9a:bb:
32:af:8f:ae:c2:2f:a6:f2:a7:74:1d:1b:80:41:71:c6:7d:90:
8a:d6:c0:5e:6f:de:3d:46:af:42:c0:8f:0c:33:83:ad:f4:59:
f1:78:28:54:13:dd:2c:87:c0:e6:ee:b1:49:08:44:35:53:f9:
c7:22:1e:78:40:dc:ab:b0:ef:34:7b:fc:da:a8:19:db:2b:ec:
94:3b:ea:ee:c6:63:cb:39:86:6d:3d:3f:40:8c:9b:f6:fb:d0:
8f:84:3f:66:6e:24:0c:dd:97:f8:90:fa:92:81:07:6a:1c:10:
1b:bc:81:8f:ed:d1:a4:66:20:8c:ac:fa:b0:d0:3f:85:05:54:
36:b1:18:5f:e3:e8:96:19:f9:8d:25:da:29:93:39:7f:05:ad:
ab:19:4f:67:a0:50:10:3b:0c:64:b5:f7:3c:65:2f:85:60:70:
3b:75:6b:44:89:17:af:04:19:ec:01:45:f6:3f:23:13:e8:b5:
9f:0b:d7:01:58:45:1f:09:63:fa:dd:97:c5:20:b1:5c:6d:f5:
be:35:77:d5:79:20:d2:4a:e3:d8:25:69:84:70:93:7a:3c:ba:
62:69:05:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:29:33 2026 by rpki-client