Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/326130303a313064383a3a2f33322d3634203d3e203239343035.roa
File: 326130303a313064383a3a2f33322d3634203d3e203239343035.roa (raw, json)
Hash identifier: SjPp4clvAHy+KAtZ7R25YFosiP+RM2Ku5fULo9nmZMA=
Subject key identifier: B1:BC:AB:0A:57:13:61:B3:69:A3:10:AC:85:DD:90:82:BD:73:FA:14
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 0134F6BE8DA376AB9B9BED1ABBCA4AFEEC565930
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/326130303a313064383a3a2f33322d3634203d3e203239343035.roa
Signing time: Tue 08 Sep 2026 07:20:33 +0000
ROA not before: Tue 08 Sep 2026 07:15:33 +0000
ROA not after: Tue 07 Sep 2027 07:20:33 +0000
asID: 29405
IP address blocks: 2a00:10d8::/32 maxlen: 64
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:34:f6:be:8d:a3:76:ab:9b:9b:ed:1a:bb:ca:4a:fe:ec:56:59:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:15:33 2026 GMT
Not After : Sep 7 07:20:33 2027 GMT
Subject: CN=B1BCAB0A571361B369A310AC85DD9082BD73FA14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3e:43:f8:47:fd:62:4c:62:0d:a1:9a:1d:f7:
58:4b:bd:f3:fb:0a:f2:09:21:5f:51:b6:92:d3:ad:
09:1b:70:0f:c9:e8:88:2b:b7:d2:15:c1:46:f8:59:
d3:5c:88:3d:27:ba:be:e7:0e:bd:88:26:91:4f:26:
9b:b5:20:e3:b3:4b:c6:db:3b:b2:44:d2:4e:89:e8:
a0:92:4e:0b:4b:96:02:c5:ed:69:67:77:26:92:80:
6c:ef:49:ae:a8:5a:3f:1d:7c:6a:41:a8:cc:f8:67:
2b:44:27:35:b2:7d:16:94:6f:cb:35:8f:e4:21:ac:
a7:fa:82:62:a9:7d:dc:7f:fe:4a:cc:4f:ab:8c:f4:
34:f7:4f:3d:de:07:4e:e4:bb:91:5e:fc:4d:5d:91:
08:6e:14:a7:92:78:0e:e1:29:72:91:8a:3a:60:43:
01:ae:87:95:19:f3:63:34:19:90:f5:44:bf:be:80:
0d:12:c6:e5:a7:6d:f7:22:59:41:89:d1:96:a0:b8:
1d:db:af:09:44:d8:aa:3b:20:2c:42:e6:4b:5b:ee:
ae:74:a8:70:ac:66:6d:df:56:f7:86:2d:c6:8e:70:
10:bf:40:4d:4b:93:f3:d4:a8:5b:8d:b5:12:14:86:
35:9a:0f:ba:24:bd:57:33:63:1d:72:5d:39:94:fd:
69:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BC:AB:0A:57:13:61:B3:69:A3:10:AC:85:DD:90:82:BD:73:FA:14
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/326130303a313064383a3a2f33322d3634203d3e203239343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:10d8::/32
Signature Algorithm: sha256WithRSAEncryption
24:4f:4b:b1:96:70:a8:56:b0:16:86:b5:6d:a4:9c:48:48:16:
b2:b7:de:4e:49:7f:f7:37:4f:cc:4b:a6:9e:e4:71:00:71:8f:
10:96:08:03:92:d0:4d:33:56:34:7a:3a:ed:25:10:bd:1f:1c:
0f:45:91:0b:41:73:14:3c:4e:6e:4a:4c:44:e6:26:4f:e7:97:
11:3c:b8:10:66:83:c8:50:ff:af:23:8b:28:8c:be:ea:4c:66:
c7:65:5d:0f:68:84:ca:85:94:fb:c1:42:a9:7f:7b:2d:20:9c:
d9:22:72:ba:cf:1c:d2:ff:e1:c0:e7:81:df:f6:af:75:8a:4e:
8b:4e:18:9b:a9:f6:32:81:0b:df:27:12:db:a1:23:74:41:16:
cf:f7:10:2c:c6:ff:3e:f4:86:b4:6f:1c:2f:de:73:aa:5b:82:
89:34:6b:f7:92:cc:10:e9:cd:57:a8:b8:d0:20:3f:60:98:dd:
e4:79:58:5c:4d:ff:d6:30:56:8b:52:f1:24:4b:87:98:73:29:
65:31:3c:65:f8:59:f6:20:be:9a:6c:7e:f1:e1:96:4e:ed:61:
5f:cd:de:f2:cd:af:27:2b:b7:bd:10:4c:a0:84:15:77:7c:5c:
cb:96:b9:1f:b1:4b:9e:df:4b:39:0a:ae:95:5a:d8:2a:51:26:
39:46:e7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:01:12 2026 by rpki-client