Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/326130653a666434353a326538303a3a2f34382d3438203d3e20323134373233.roa
File: 326130653a666434353a326538303a3a2f34382d3438203d3e20323134373233.roa (raw, json)
Hash identifier: HL7mFBDKDU+iYfATsU33A3w0WGjK39TBLxCkLSeJlhE=
Subject key identifier: 3E:50:8C:99:2A:AA:6C:85:D2:1E:40:14:8B:80:F9:A7:06:F7:63:80
Certificate issuer: /CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985
Certificate serial: 1A11FCD93F5654FD47D5EB6E5F4235EAD2D3A830
Authority key identifier: 7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/326130653a666434353a326538303a3a2f34382d3438203d3e20323134373233.roa
Signing time: Tue 15 Sep 2026 08:41:54 +0000
ROA not before: Tue 15 Sep 2026 08:36:54 +0000
ROA not after: Tue 14 Sep 2027 08:41:54 +0000
asID: 214723
IP address blocks: 2a0e:fd45:2e80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl
rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft
rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 01:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:11:fc:d9:3f:56:54:fd:47:d5:eb:6e:5f:42:35:ea:d2:d3:a8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985
Validity
Not Before: Sep 15 08:36:54 2026 GMT
Not After : Sep 14 08:41:54 2027 GMT
Subject: CN=3E508C992AAA6C85D21E40148B80F9A706F76380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3b:d8:7f:13:8d:79:76:52:04:ec:58:81:11:
21:29:7e:62:99:0e:2d:c5:fa:c9:0c:71:30:f9:be:
2c:5c:d5:45:7a:27:61:35:01:8d:d7:c5:23:3c:15:
9b:c3:c9:5f:26:5b:d1:af:21:6e:3f:39:03:b1:8c:
06:eb:b9:9b:f6:7c:a9:4e:de:f0:69:43:b3:51:f9:
22:18:7b:6e:e6:0d:b4:b3:eb:8a:b1:65:26:11:8f:
0f:b3:5b:91:5d:47:39:c7:f9:1e:b1:21:e3:3a:ca:
a4:1b:38:34:e8:4c:65:a3:27:85:7a:84:10:bd:dd:
57:ee:ad:2a:be:72:42:72:81:b0:44:4b:3a:c5:79:
4c:07:0a:ba:a7:c1:9b:0e:c9:1b:8e:e0:35:dc:e2:
1d:36:88:b9:a3:c0:36:6b:7b:13:41:07:58:44:9e:
e0:96:15:1e:dd:33:f6:fb:00:93:8d:61:5e:da:26:
5a:eb:88:33:b1:0e:89:dd:4c:59:32:56:f8:7c:4e:
b9:2c:4d:8b:e2:7a:c1:4c:03:43:b0:ad:63:ce:4d:
71:b5:8c:5a:05:31:09:cc:4d:e3:1b:00:10:73:87:
0b:99:46:b6:d0:06:ac:6e:8a:77:b3:f2:05:ac:e1:
72:12:21:7c:4e:d2:5e:6e:86:01:26:49:79:82:7b:
20:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:50:8C:99:2A:AA:6C:85:D2:1E:40:14:8B:80:F9:A7:06:F7:63:80
X509v3 Authority Key Identifier:
keyid:7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/326130653a666434353a326538303a3a2f34382d3438203d3e20323134373233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:fd45:2e80::/48
Signature Algorithm: sha256WithRSAEncryption
78:ed:f0:e8:20:3f:8c:74:6b:27:c9:78:9d:62:88:aa:db:7e:
76:6d:4e:ea:e5:db:81:4e:28:96:c7:ea:68:26:c2:54:39:de:
18:ea:21:21:48:99:22:58:49:77:82:67:b5:22:d8:a4:8e:29:
ea:1a:dd:10:e2:e1:73:3f:e9:8e:d5:95:3a:24:27:e4:d3:5d:
3b:71:87:71:1e:da:b7:6e:9e:83:f3:61:fe:e7:67:af:dd:69:
d4:d2:97:75:ec:d9:3a:53:c5:fe:38:bc:f3:95:01:e8:2a:15:
a8:8a:11:67:07:f8:71:5f:1d:b1:48:c6:71:c6:f9:ea:aa:0b:
c4:64:87:ff:4a:8d:37:9a:ce:12:16:ab:ed:47:74:ab:17:bb:
f4:8f:2d:12:1d:83:ca:88:62:67:0f:02:c2:23:e1:e4:cf:4a:
b6:cb:fb:fc:df:c7:f1:c9:28:7e:48:3d:c1:30:51:61:a9:07:
da:5a:ac:a8:25:ce:07:85:da:94:5b:b4:67:83:f8:79:2e:a7:
2f:a5:ee:d6:a0:45:7d:6c:ad:2b:a6:ab:54:70:54:3f:fd:07:
1b:a7:66:9c:88:7c:4b:59:a8:75:f2:1e:2d:c5:c7:19:5d:c6:
d0:5e:0d:69:80:de:21:0c:d5:59:63:db:40:11:a2:c2:55:86:
a5:52:e7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 08:08:28 2026 by rpki-client