Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/64c0f781-751d-4eef-bd2d-7bba70e04831/0/326130393a646438303a3a2f33322d3438203d3e20323039383636.roa
File: 326130393a646438303a3a2f33322d3438203d3e20323039383636.roa (raw, json)
Hash identifier: XUMCzia5n6bhU7/RAQLBWxlweY2JCcEmQbxvxt1Uxj4=
Subject key identifier: 64:F5:D3:63:50:21:3D:E8:FF:33:5F:F7:95:65:47:C9:4E:72:5C:05
Certificate issuer: /CN=55922b591eb7b4993b927edd420825bcd8b40a76
Certificate serial: 754EE424D3B0D794028C52BCC481F5EA9829A083
Authority key identifier: 55:92:2B:59:1E:B7:B4:99:3B:92:7E:DD:42:08:25:BC:D8:B4:0A:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZIrWR63tJk7kn7dQgglvNi0CnY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/64c0f781-751d-4eef-bd2d-7bba70e04831/0/326130393a646438303a3a2f33322d3438203d3e20323039383636.roa
Signing time: Tue 04 Aug 2026 04:25:02 +0000
ROA not before: Tue 04 Aug 2026 04:20:02 +0000
ROA not after: Tue 03 Aug 2027 04:25:02 +0000
asID: 209866
IP address blocks: 2a09:dd80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/64c0f781-751d-4eef-bd2d-7bba70e04831/0/55922B591EB7B4993B927EDD420825BCD8B40A76.crl
rsync://rsync.paas.rpki.ripe.net/repository/64c0f781-751d-4eef-bd2d-7bba70e04831/0/55922B591EB7B4993B927EDD420825BCD8B40A76.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZIrWR63tJk7kn7dQgglvNi0CnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:4e:e4:24:d3:b0:d7:94:02:8c:52:bc:c4:81:f5:ea:98:29:a0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55922b591eb7b4993b927edd420825bcd8b40a76
Validity
Not Before: Aug 4 04:20:02 2026 GMT
Not After : Aug 3 04:25:02 2027 GMT
Subject: CN=64F5D36350213DE8FF335FF7956547C94E725C05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:08:49:13:0c:25:bd:fe:fa:2b:bd:42:d8:
7e:11:cc:64:33:d7:bb:51:c7:fb:9f:2c:1d:f7:f8:
54:6a:53:40:c5:ec:71:23:5f:05:3f:5b:e3:2e:36:
2d:36:b3:19:e4:2c:45:d7:fd:ea:3b:ea:17:49:26:
b5:d8:35:9a:f3:5f:be:5c:17:65:c0:0c:55:52:17:
66:fd:0c:9b:93:64:7d:fa:3a:cf:f8:57:5e:37:27:
bb:a7:10:35:77:7b:55:a2:57:91:e8:5c:76:2e:89:
a5:46:b6:76:37:8d:f4:1c:75:ca:2a:b7:b6:d7:d0:
25:0c:bb:06:4d:86:61:e5:16:eb:79:17:40:fb:71:
9b:40:1f:cb:f2:b4:54:3c:46:b4:0c:93:fd:b8:d5:
e7:8b:90:19:70:3c:ce:56:d8:18:d0:39:5c:10:a2:
22:f9:8a:9d:28:51:da:0f:c5:6e:8f:ed:d5:a8:75:
6f:30:ae:61:1a:ff:a5:ba:02:32:35:5d:7d:5d:73:
97:09:60:6f:5c:e4:c4:d7:a1:0b:e5:dd:5d:76:de:
61:24:fc:0d:11:4e:13:e4:d8:73:e1:05:9c:f5:d2:
0f:c2:36:92:eb:93:e2:0a:f9:d2:22:99:b8:39:0f:
b5:65:75:9e:f3:6f:ae:d2:8d:3b:6a:cb:6a:84:31:
eb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F5:D3:63:50:21:3D:E8:FF:33:5F:F7:95:65:47:C9:4E:72:5C:05
X509v3 Authority Key Identifier:
keyid:55:92:2B:59:1E:B7:B4:99:3B:92:7E:DD:42:08:25:BC:D8:B4:0A:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/64c0f781-751d-4eef-bd2d-7bba70e04831/0/55922B591EB7B4993B927EDD420825BCD8B40A76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZIrWR63tJk7kn7dQgglvNi0CnY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/64c0f781-751d-4eef-bd2d-7bba70e04831/0/326130393a646438303a3a2f33322d3438203d3e20323039383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:dd80::/32
Signature Algorithm: sha256WithRSAEncryption
57:11:c8:14:88:a4:7f:cc:36:25:70:3f:e5:28:03:b8:93:45:
62:75:c2:7a:d7:6c:7b:06:1d:40:55:f3:cb:7c:98:0c:84:41:
2c:ac:41:f8:e4:62:4f:2e:95:ca:de:36:ad:37:37:68:f0:93:
c3:b8:53:e0:82:91:7c:51:54:66:3e:18:b5:15:46:a9:1e:16:
32:75:7e:b5:e6:9f:d1:3b:bf:66:9b:8f:9c:42:a9:f0:20:c4:
76:88:e8:08:d1:5b:59:30:44:05:10:3d:ca:74:b5:eb:85:f2:
1b:6f:4f:0e:ec:01:e2:45:49:b0:ec:58:45:8f:8d:ec:51:e9:
f5:03:a2:69:32:f0:03:33:79:ae:34:ff:1e:16:e0:03:bd:16:
44:b2:09:82:f4:ca:43:e1:4e:67:52:f7:10:32:5d:3d:41:ef:
fc:37:40:bb:9a:0d:93:c6:da:52:86:68:d4:8c:f6:4e:d9:c5:
74:3a:ad:75:20:2e:34:a4:27:7c:c7:63:32:6c:d3:e5:38:b4:
d7:28:50:c0:01:dc:b2:89:b4:af:e3:13:86:b4:b2:3c:1f:59:
ef:7f:c5:1d:58:c4:5d:54:26:1c:15:c1:f5:7d:0d:0d:43:00:
38:22:b5:a3:db:11:f9:76:ce:20:d4:0c:75:13:41:09:f7:48:
bc:65:d0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:53 2026 by rpki-client