Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/326130653a666434353a326535303a3a2f34382d3438203d3e20323135333730.roa
File: 326130653a666434353a326535303a3a2f34382d3438203d3e20323135333730.roa (raw, json)
Hash identifier: 5NX5oQfTTRwCAtYxY8FoO9Mq2vedKAFx35oGXhbHabg=
Subject key identifier: EB:7B:07:4C:1E:D7:FB:95:98:92:FB:4D:40:45:CB:04:09:43:A1:7D
Certificate issuer: /CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985
Certificate serial: 41D26553ACE83F0093C0A7AD963EEEFBB7C8AE4E
Authority key identifier: 7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/326130653a666434353a326535303a3a2f34382d3438203d3e20323135333730.roa
Signing time: Sat 03 Oct 2026 12:41:57 +0000
ROA not before: Sat 03 Oct 2026 12:36:57 +0000
ROA not after: Sat 02 Oct 2027 12:41:57 +0000
asID: 215370
IP address blocks: 2a0e:fd45:2e50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl
rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft
rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 14:39:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:d2:65:53:ac:e8:3f:00:93:c0:a7:ad:96:3e:ee:fb:b7:c8:ae:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985
Validity
Not Before: Oct 3 12:36:57 2026 GMT
Not After : Oct 2 12:41:57 2027 GMT
Subject: CN=EB7B074C1ED7FB959892FB4D4045CB040943A17D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:d1:57:0e:8a:96:02:35:00:f3:65:53:ec:
d5:93:b0:d3:5c:26:a0:a0:a7:62:ad:95:d6:07:b5:
f8:7f:24:ab:32:58:c5:3f:83:11:54:a4:69:dd:18:
a1:67:f2:c3:91:d7:19:17:01:4b:54:0f:d3:87:bb:
5b:2b:10:fb:1a:ed:66:f4:5e:95:ff:17:0a:2f:78:
8c:23:e3:51:60:09:81:1d:8d:9e:2a:3b:44:48:8f:
c6:cf:dc:c3:f6:30:1c:85:31:83:9f:63:ff:d0:63:
75:6f:2f:b8:da:cd:2e:b7:3e:cb:3b:25:fb:ce:a8:
9f:c8:6d:ec:14:b6:e1:03:2f:f1:76:e1:be:c8:f5:
8e:b4:fc:1f:5b:ce:64:98:80:70:56:c0:32:9d:e4:
1f:14:2a:1f:1c:67:f5:b8:5e:f5:35:51:44:8f:17:
b3:a1:1d:7e:59:7e:15:56:0c:f7:d8:3e:cf:da:2a:
ae:8f:67:98:33:0e:67:35:5f:30:eb:18:e5:4b:95:
3c:40:7b:cf:f3:1e:96:1f:b3:74:95:da:18:32:e8:
e5:51:88:38:12:ab:f8:a6:21:68:a0:0e:03:d5:aa:
8a:dc:a7:37:a2:0b:63:40:54:9b:27:97:0e:07:4f:
f3:ba:43:c1:3a:fe:d4:5b:c1:07:d8:1e:a7:fa:5f:
35:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7B:07:4C:1E:D7:FB:95:98:92:FB:4D:40:45:CB:04:09:43:A1:7D
X509v3 Authority Key Identifier:
keyid:7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/326130653a666434353a326535303a3a2f34382d3438203d3e20323135333730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:fd45:2e50::/48
Signature Algorithm: sha256WithRSAEncryption
52:e7:20:ca:58:82:88:f9:c7:77:0d:8c:7f:df:f0:be:1b:ae:
2a:fd:2d:ea:3a:3b:f0:69:3f:cb:f9:fb:44:31:af:e1:48:3c:
3e:c7:20:f4:47:f1:60:62:61:ad:f8:42:f3:4d:e0:1f:87:22:
06:5e:73:d2:01:38:c5:fe:08:99:90:eb:2a:4e:98:55:68:9d:
d9:f1:1e:5e:06:1f:7e:cd:ec:7b:49:5d:95:0b:13:84:f1:db:
b8:1d:2f:14:27:38:57:be:94:b6:10:36:fc:64:98:41:5c:5e:
6d:4e:44:ae:a0:ec:15:15:b7:44:06:ef:19:f1:7c:eb:01:59:
fb:6b:ec:a0:8c:64:0d:27:9f:34:36:0c:eb:77:15:bb:95:cc:
db:a5:03:5c:2a:48:74:cb:27:d1:77:2b:41:c1:ec:ec:d6:1e:
fc:3f:72:13:5b:7d:d8:bb:76:b4:ee:01:b9:68:46:06:53:be:
ec:d8:63:7f:6d:57:55:43:5f:98:92:10:8e:91:b8:24:6c:94:
1b:ad:77:7d:e2:61:40:cb:45:55:a2:a8:8b:4b:32:ef:1f:23:
15:af:d2:10:64:90:06:72:71:43:50:aa:b3:ba:d7:41:39:9e:
82:1d:e7:71:5f:5b:b3:cd:86:86:51:dd:98:ee:5f:9f:f2:df:
b7:ce:49:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:44:44 2026 by rpki-client