Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/326131333a633863333a636634313a3a2f34382d3438203d3e20323133393030.roa
File: 326131333a633863333a636634313a3a2f34382d3438203d3e20323133393030.roa (raw, json)
Hash identifier: 5OYk9XuG5n0XPHmm6ASOMtybJfwu8B+Lomx1528IouI=
Subject key identifier: 35:9F:F9:7E:99:16:13:C7:84:34:0F:17:13:E5:85:C2:A9:07:F3:B2
Certificate issuer: /CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3
Certificate serial: 7AA8E601B54B782089CD5120B74C6D1C8E36F43B
Authority key identifier: AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/326131333a633863333a636634313a3a2f34382d3438203d3e20323133393030.roa
Signing time: Thu 06 Aug 2026 11:30:23 +0000
ROA not before: Thu 06 Aug 2026 11:25:23 +0000
ROA not after: Thu 05 Aug 2027 11:30:23 +0000
asID: 213900
IP address blocks: 2a13:c8c3:cf41::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:a8:e6:01:b5:4b:78:20:89:cd:51:20:b7:4c:6d:1c:8e:36:f4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3
Validity
Not Before: Aug 6 11:25:23 2026 GMT
Not After : Aug 5 11:30:23 2027 GMT
Subject: CN=359FF97E991613C784340F1713E585C2A907F3B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:71:ae:82:ed:1f:16:05:aa:8d:14:93:33:c2:
48:43:75:9d:db:9b:b2:c8:5b:b4:19:3c:23:0f:e1:
96:19:73:e3:2d:25:e3:e0:b5:2e:da:90:a8:ab:9d:
ba:42:2b:07:6b:b9:d4:9f:65:4d:9b:ae:02:05:ca:
d0:69:71:2a:cb:30:92:51:66:a5:e8:d0:b2:3d:9e:
11:39:43:3a:01:4c:07:28:25:ca:b6:a4:3d:0e:e6:
53:33:df:b3:08:22:90:64:8a:ed:f8:79:62:dd:d9:
2b:f5:fa:10:d9:a9:fc:83:b1:61:74:17:fc:bc:d5:
f3:9d:02:43:be:8e:60:dd:02:2a:0c:bc:4f:c3:3c:
49:d7:f4:79:b1:e6:ba:da:a5:29:8b:fd:5b:eb:2e:
96:1c:a0:87:89:f9:27:a9:49:0a:73:4f:ed:15:7e:
95:f2:f7:a1:26:86:c8:28:6c:01:bf:42:c9:96:2a:
b3:77:50:84:78:29:f3:8e:e9:f9:6a:1a:57:cb:89:
20:2a:8c:c8:8c:3b:a1:85:ce:ed:8a:51:45:56:ff:
dc:d4:c1:47:83:03:2c:76:30:de:16:a5:d0:77:f3:
06:08:f4:64:17:b5:ea:dd:a4:c8:cd:33:f3:5a:02:
85:f9:b0:f7:fc:5d:4e:ce:5a:4a:e8:a3:59:71:d9:
0a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9F:F9:7E:99:16:13:C7:84:34:0F:17:13:E5:85:C2:A9:07:F3:B2
X509v3 Authority Key Identifier:
keyid:AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/326131333a633863333a636634313a3a2f34382d3438203d3e20323133393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c8c3:cf41::/48
Signature Algorithm: sha256WithRSAEncryption
4f:9f:a9:e8:7b:14:7e:ea:6d:16:5e:8f:f5:88:9b:95:53:cd:
70:53:e4:dc:b8:16:2a:71:a4:fe:8e:80:4c:29:8f:30:12:b3:
fe:6f:5c:7d:e8:a8:17:30:da:c2:37:70:ad:82:c2:65:0b:78:
c2:8a:81:f0:63:3e:cb:38:ff:30:f4:e5:87:bd:b6:4b:01:95:
91:3d:00:f4:00:f7:9f:62:04:ff:f6:f2:20:2e:7b:3d:18:04:
2c:45:7b:2d:1f:7f:1a:1e:68:2b:4e:a2:50:5c:9a:0e:c9:a7:
0d:f8:44:56:ec:ee:22:4c:8e:f8:b0:64:05:48:f6:eb:c8:4e:
df:21:cc:82:b9:ab:53:db:0f:be:96:95:92:50:1f:c1:23:c5:
63:3e:31:c8:4a:55:1e:eb:8d:3a:79:aa:1a:8b:6d:b8:b5:ab:
a7:48:1d:f9:9d:10:c1:c5:e0:48:c2:e1:5f:a1:7b:a9:f1:dd:
cf:c4:43:ff:1d:2e:8f:f2:6b:58:6d:c3:18:4b:33:4e:85:b9:
d4:9d:83:18:d7:b7:55:7b:ae:86:59:65:13:64:f1:57:87:1c:
3f:0b:95:79:a4:37:0d:f2:8a:36:80:f5:6e:71:b2:46:3c:9f:
46:9f:4e:f2:ed:a8:4c:4b:3a:32:23:d3:ea:af:ff:d2:52:b5:
91:1b:f1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:21:47 2026 by rpki-client