Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/326130313a3339303a3a2f33322d3634203d3e203239343035.roa
File: 326130313a3339303a3a2f33322d3634203d3e203239343035.roa (raw, json)
Hash identifier: EkahyzLSm2/v6AdCA2RLCahqupgwq6ocXbGbYPrCVpQ=
Subject key identifier: 4F:E4:3B:B5:87:F3:39:B9:79:A6:DE:D1:6B:AB:E9:2F:39:A1:0C:40
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 0F824D83809595E56882B1532B27723E1E88F9CB
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/326130313a3339303a3a2f33322d3634203d3e203239343035.roa
Signing time: Tue 08 Sep 2026 07:20:17 +0000
ROA not before: Tue 08 Sep 2026 07:15:17 +0000
ROA not after: Tue 07 Sep 2027 07:20:17 +0000
asID: 29405
IP address blocks: 2a01:390::/32 maxlen: 64
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:82:4d:83:80:95:95:e5:68:82:b1:53:2b:27:72:3e:1e:88:f9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:15:17 2026 GMT
Not After : Sep 7 07:20:17 2027 GMT
Subject: CN=4FE43BB587F339B979A6DED16BABE92F39A10C40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a8:02:07:bb:fc:13:16:8a:e0:d3:7b:fe:50:
b5:fa:08:5c:7c:f7:ce:2c:21:f1:ab:28:e6:d9:88:
6d:26:28:dd:f5:f6:48:ff:71:63:8c:c0:eb:56:88:
5a:bc:4c:6b:c9:f7:7c:6f:28:f5:6f:4b:38:61:99:
dd:9c:76:c4:ac:e9:d6:b5:77:c6:28:06:ac:1b:c1:
1b:0f:0c:d3:19:37:7d:1a:4a:77:1c:b4:0a:09:ce:
d3:85:d6:f9:15:f3:83:23:c0:9f:fd:60:07:b4:ee:
97:95:f8:fd:20:fd:90:f5:06:16:a2:11:3d:ba:7a:
25:5c:d4:af:e8:41:a5:ec:03:28:12:0b:04:0c:ca:
fe:f0:a5:b8:30:dc:65:f6:42:2a:66:2e:55:89:d4:
49:5a:1b:c8:be:c8:c0:76:70:99:f2:0b:11:17:15:
80:5d:cc:d7:13:4d:94:f8:f7:80:40:9f:1d:55:69:
f5:5e:93:49:af:cc:13:02:a5:a7:17:74:a9:1a:0a:
66:b2:35:74:d1:20:a3:c9:40:aa:31:25:fa:11:ce:
6b:18:e6:06:77:ea:3b:ed:a9:eb:aa:ac:db:6a:71:
30:00:0a:05:c0:0e:86:26:ba:1e:e5:d0:6b:b9:fb:
d2:ed:ea:1b:19:56:29:7e:ee:95:7b:4e:d8:4d:02:
d1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E4:3B:B5:87:F3:39:B9:79:A6:DE:D1:6B:AB:E9:2F:39:A1:0C:40
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/326130313a3339303a3a2f33322d3634203d3e203239343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:390::/32
Signature Algorithm: sha256WithRSAEncryption
49:35:07:c9:32:b9:78:ef:ca:cc:a5:bf:d8:4f:9e:df:59:39:
a0:a9:6f:8f:19:b5:6b:e9:2b:c6:e8:14:41:6d:d0:db:61:bd:
61:47:2b:34:09:e9:34:94:59:c5:52:cd:a4:99:70:85:04:58:
89:6c:5c:fa:c4:fe:ca:d5:81:b4:85:3e:55:19:75:86:a7:5d:
ad:d9:7b:5d:ef:01:81:70:03:45:ba:9e:6d:75:93:c1:4b:36:
3f:8e:ab:0a:53:95:9d:b3:3e:ac:17:ce:80:22:ce:41:53:2f:
d5:95:46:19:94:78:0a:3a:a0:c0:88:7d:10:37:d9:a6:2d:1c:
f5:97:f0:60:7e:0c:d9:b8:7a:2f:83:2f:c6:65:b7:56:70:17:
a0:8c:e0:0d:10:3c:3e:52:5e:e1:3c:0d:30:60:ce:72:a5:43:
9e:fe:87:90:ac:82:d7:6d:8d:42:cc:36:f9:93:7f:56:38:71:
79:7b:bb:1d:94:00:73:87:df:3d:da:59:05:f6:a6:b1:a9:6e:
92:37:13:77:f4:6f:80:26:3f:b2:91:f1:5d:10:aa:f1:1c:35:
58:f7:f2:5e:54:26:79:f3:a6:0e:37:93:cf:9e:8a:ca:cf:5a:
79:3b:48:19:08:2c:e1:79:97:8f:4f:06:ce:3d:3d:99:c8:1f:
88:58:72:5a
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUD4JNg4CVleVogrFTKydyPh6I+cswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWMwY2UzZTZhOWRiY2ZhMjUxZTU2ZTUwMDJlYzRiYmJj
YjA1Yjg2NjAeFw0yNjA5MDgwNzE1MTdaFw0yNzA5MDcwNzIwMTdaMDMxMTAvBgNV
BAMTKDRGRTQzQkI1ODdGMzM5Qjk3OUE2REVEMTZCQUJFOTJGMzlBMTBDNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqqAIHu/wTForg03v+ULX6CFx8
984sIfGrKObZiG0mKN319kj/cWOMwOtWiFq8TGvJ93xvKPVvSzhhmd2cdsSs6da1
d8YoBqwbwRsPDNMZN30aSncctAoJztOF1vkV84MjwJ/9YAe07peV+P0g/ZD1Bhai
ET26eiVc1K/oQaXsAygSCwQMyv7wpbgw3GX2QipmLlWJ1ElaG8i+yMB2cJnyCxEX
FYBdzNcTTZT494BAnx1VafVek0mvzBMCpacXdKkaCmayNXTRIKPJQKoxJfoRzmsY
5gZ36jvtqeuqrNtqcTAACgXADoYmuh7l0Gu5+9Lt6hsZVil+7pV7TthNAtHpAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUT+Q7tYfzObl5pt7Ra6vpLzmhDEAwHwYDVR0j
BBgwFoAUrAzj5qnbz6JR5W5QAuxLu8sFuGYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzVhMGVmZjItYjQ1Yy00MjlmLTkwMDEtMjM0MWQ0NmI2
M2UwLzAvQUMwQ0UzRTZBOURCQ0ZBMjUxRTU2RTUwMDJFQzRCQkJDQjA1Qjg2Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JBemo1cW5iejZKUjVXNVFBdXhMdThz
RnVHWS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzVhMGVmZjIt
YjQ1Yy00MjlmLTkwMDEtMjM0MWQ0NmI2M2UwLzAvMzI2MTMwMzEzYTMzMzkzMDNh
M2EyZjMzMzIyZDM2MzQyMDNkM2UyMDMyMzkzNDMwMzUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAqAQOQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBJNQfJMrl478rMpb/YT57fWTmgqW+PGbVr6SvG
6BRBbdDbYb1hRys0Cek0lFnFUs2kmXCFBFiJbFz6xP7K1YG0hT5VGXWGp12t2Xtd
7wGBcANFup5tdZPBSzY/jqsKU5Wdsz6sF86AIs5BUy/VlUYZlHgKOqDAiH0QN9mm
LRz1l/BgfgzZuHovgy/GZbdWcBegjOANEDw+Ul7hPA0wYM5ypUOe/oeQrILXbY1C
zDb5k39WOHF5e7sdlABzh9892lkF9qaxqW6SNxN39G+AJj+ykfFdEKrxHDVY9/Je
VCZ586YON5PPnorKz1p5O0gZCCzheZePTwbOPT2ZyB+IWHJa
-----END CERTIFICATE-----
Generated at Thu Sep 10 13:00:55 2026 by rpki-client