Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/326130303a313064383a31303a3a2f34382d3634203d3e203239343035.roa
File: 326130303a313064383a31303a3a2f34382d3634203d3e203239343035.roa (raw, json)
Hash identifier: OaS/OQQXkjX3sJOmUl5zc9tQy3jz0o+bUQUBhd2ZQH0=
Subject key identifier: A8:45:56:AB:82:34:36:87:50:D5:60:CE:56:63:3A:AF:A1:9C:57:56
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 154AB4B666DA7A7D5DE55F91FD711B2D5DFA4AB0
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/326130303a313064383a31303a3a2f34382d3634203d3e203239343035.roa
Signing time: Tue 08 Sep 2026 07:20:11 +0000
ROA not before: Tue 08 Sep 2026 07:15:11 +0000
ROA not after: Tue 07 Sep 2027 07:20:11 +0000
asID: 29405
IP address blocks: 2a00:10d8:10::/48 maxlen: 64
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:4a:b4:b6:66:da:7a:7d:5d:e5:5f:91:fd:71:1b:2d:5d:fa:4a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:15:11 2026 GMT
Not After : Sep 7 07:20:11 2027 GMT
Subject: CN=A84556AB8234368750D560CE56633AAFA19C5756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7a:9a:c7:66:8f:ca:fd:6a:22:21:24:2f:8e:
48:ba:0c:49:71:09:a9:e9:1f:a7:8b:95:a0:f5:72:
f2:d5:bd:da:91:ee:42:a1:7c:d0:d0:2e:99:da:c5:
31:76:e0:c9:c4:6e:e4:55:01:6f:74:df:9b:76:22:
57:d2:0c:7f:a4:1e:a3:78:ea:1a:29:bf:c0:2f:67:
6b:b5:32:b3:92:aa:7a:93:48:3a:95:0c:38:77:b2:
8c:bc:e4:a0:1c:3c:9e:4f:1a:95:21:b7:76:2d:87:
d0:41:32:98:e7:94:1d:de:0a:76:0f:3a:53:6e:0c:
ce:ca:10:e3:2a:39:3a:c2:55:6e:4b:8d:fa:e4:fa:
f3:3a:02:3a:3e:eb:43:2b:69:63:2c:1f:a5:9c:9a:
d0:a0:0a:d3:d9:d7:83:0e:6d:e1:2d:56:77:23:12:
d5:c5:72:83:d4:21:10:9f:24:41:dd:a6:9d:de:b7:
46:2e:b8:16:1c:37:93:c8:a5:be:45:b6:6a:0d:84:
97:b6:72:d2:97:f9:d5:bb:2a:2c:6f:25:c6:e0:ea:
54:98:37:08:46:1f:19:00:1a:3a:9d:1a:14:d8:a1:
4a:ba:95:83:09:aa:0a:3a:53:43:fe:34:51:b3:0a:
62:e2:ff:08:18:7f:11:32:9b:b5:f7:87:01:e5:ee:
34:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:45:56:AB:82:34:36:87:50:D5:60:CE:56:63:3A:AF:A1:9C:57:56
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/326130303a313064383a31303a3a2f34382d3634203d3e203239343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:10d8:10::/48
Signature Algorithm: sha256WithRSAEncryption
67:50:a1:f3:f6:7c:f8:b9:5a:67:1e:4e:de:64:b8:b5:c0:2f:
0c:70:21:73:9c:66:8f:ef:d7:15:6c:b1:b5:33:6b:fb:9b:f6:
35:93:36:ea:b8:1c:0a:31:8d:38:07:82:6c:8c:7a:a5:58:91:
46:28:d1:72:d1:1b:38:ec:16:08:40:bb:dc:38:32:a0:30:1c:
99:0a:f8:3d:8a:85:81:f8:7e:4c:3b:c4:59:03:9f:ac:1a:b5:
80:c2:64:64:22:4d:7b:d7:0d:9e:9e:2e:74:f6:85:32:5a:73:
95:d8:72:b3:26:1f:ca:f9:f9:a5:fb:66:d2:58:18:ce:3c:15:
a9:7b:34:08:59:71:e2:b2:ad:98:70:f1:59:a4:5f:b3:1f:e5:
95:90:77:05:36:b4:8c:22:74:f1:a1:48:4d:1a:da:e6:d7:a0:
d7:56:ae:2a:e7:a6:13:1b:37:6e:0e:22:59:4f:ee:bb:67:71:
2c:39:52:b7:b2:05:89:e0:7b:f7:fa:e2:ea:ce:db:b4:41:23:
4f:a2:e8:f0:0b:78:c9:6d:c7:ae:96:bf:de:60:81:16:41:b6:
23:75:64:2d:92:df:de:fb:87:76:25:8e:e8:23:b4:2e:df:7a:
ab:21:ea:e1:5c:bc:89:96:b1:30:e2:7f:9e:c6:5f:7e:d4:c5:
4e:6d:64:70
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 10 13:01:24 2026 by rpki-client