Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/326130303a656163303a3a2f33322d3332203d3e203230393135.roa
File: 326130303a656163303a3a2f33322d3332203d3e203230393135.roa (raw, json)
Hash identifier: B/4WVaX1/RQfize8nvUY5uFmIYzrRdgUSdd1VX+7rB4=
Subject key identifier: 87:37:2D:BE:A0:23:12:83:96:42:8E:39:AA:91:D2:DC:C9:14:79:F1
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 481CE52D5337FF394052D8111F5DCDD19E5927D6
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/326130303a656163303a3a2f33322d3332203d3e203230393135.roa
Signing time: Mon 02 Mar 2026 11:38:36 +0000
ROA not before: Mon 02 Mar 2026 11:33:36 +0000
ROA not after: Mon 01 Mar 2027 11:38:36 +0000
asID: 20915
IP address blocks: 2a00:eac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:1c:e5:2d:53:37:ff:39:40:52:d8:11:1f:5d:cd:d1:9e:59:27:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Mar 2 11:33:36 2026 GMT
Not After : Mar 1 11:38:36 2027 GMT
Subject: CN=87372DBEA023128396428E39AA91D2DCC91479F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:60:a9:f0:a0:80:0f:9b:24:8a:07:e7:17:ab:
a0:5c:cc:c4:ee:2d:b5:8a:2d:81:8c:a4:80:2d:3d:
3a:91:b2:17:05:64:d0:50:7b:f3:12:e2:0c:06:84:
9b:65:59:b5:4b:3e:d9:8d:4c:2a:cc:ee:d4:9a:8b:
bf:66:c2:d2:f8:17:87:bb:de:92:11:6d:38:67:3c:
c6:aa:24:d5:f6:80:f1:2b:93:25:71:94:c8:56:77:
68:a4:d2:49:66:c0:30:9d:28:f4:a9:5a:56:74:d7:
ea:19:c8:db:f3:4e:4e:70:4a:e2:4a:98:d9:4e:39:
3b:5f:e0:bf:97:63:f2:a5:54:39:37:03:d6:6e:6a:
49:91:26:81:68:6b:dd:3a:99:98:e5:cc:5a:17:04:
81:39:d7:65:09:b7:21:f0:6c:08:07:d4:ef:7b:17:
0e:9c:ca:3d:66:12:96:50:13:8a:bc:3a:6a:d1:f3:
f4:d9:ad:5b:1a:06:70:76:98:26:02:a1:68:8a:22:
a6:f9:a8:05:09:e6:1c:92:96:b9:23:a9:d6:29:71:
0e:e6:cf:72:4f:68:4f:4f:7b:ae:a2:a2:00:01:1f:
2e:51:af:d5:3d:57:b7:89:5f:d3:55:13:01:4b:69:
bc:40:be:d4:32:ae:5c:1a:3b:7b:d6:e8:cf:24:b3:
a0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:37:2D:BE:A0:23:12:83:96:42:8E:39:AA:91:D2:DC:C9:14:79:F1
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/326130303a656163303a3a2f33322d3332203d3e203230393135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:eac0::/32
Signature Algorithm: sha256WithRSAEncryption
29:a0:f6:b8:2d:68:5a:b7:0a:ea:f5:1c:58:e3:fe:b8:2e:64:
df:1b:53:39:6f:7c:ea:31:59:b0:fe:29:cf:3c:4f:6e:9a:a7:
2c:a2:b4:ea:a5:8b:55:ba:44:1b:df:c0:ae:90:6a:eb:24:76:
a8:03:96:73:48:9d:77:42:fd:49:7d:2b:a0:91:28:00:a1:4d:
67:7a:92:58:cd:74:9e:c9:60:95:67:69:ad:46:a3:72:f6:7b:
45:a6:04:92:ce:91:55:7b:9d:6c:6a:03:2b:c8:d3:c9:a2:fc:
04:da:a6:92:bc:69:e5:1b:a3:6a:1b:ee:53:13:e2:d4:ba:ba:
1a:b6:de:b4:c6:ae:f2:ec:8a:52:68:af:57:0c:6e:ba:6e:ba:
36:14:ac:c1:1a:fb:db:7a:73:e6:6f:a2:a8:4f:e9:d4:40:a8:
55:4e:62:1d:80:3d:57:6f:eb:57:0e:4a:83:1a:b5:de:02:b3:
c6:7b:ef:72:f5:99:ab:d8:7a:65:b1:41:11:d8:58:69:e1:47:
74:fc:5f:0a:24:3d:24:6c:6a:ff:36:94:15:f7:ae:3e:13:c6:
57:19:18:0f:30:2f:80:36:1f:94:b4:ea:8d:f7:25:57:b6:70:
d0:cd:e3:d0:16:d6:16:1a:8b:81:fe:2d:a8:ac:09:c1:f3:5f:
52:34:a8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:32:51 2026 by rpki-client