Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/326131333a633863333a636634323a3a2f34382d3438203d3e20323133393030.roa
File: 326131333a633863333a636634323a3a2f34382d3438203d3e20323133393030.roa (raw, json)
Hash identifier: d2Yg3Sq5yAX53PDute+UItFgOA8UemswTOjK3Fjeg24=
Subject key identifier: 50:69:FA:BD:32:E2:D8:F8:48:6E:8C:61:C6:6D:90:43:4C:C6:D8:3E
Certificate issuer: /CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3
Certificate serial: 03BEF5C58861841D20A0B77C2452D075C4D7ECC4
Authority key identifier: AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/326131333a633863333a636634323a3a2f34382d3438203d3e20323133393030.roa
Signing time: Thu 06 Aug 2026 11:30:41 +0000
ROA not before: Thu 06 Aug 2026 11:25:41 +0000
ROA not after: Thu 05 Aug 2027 11:30:41 +0000
asID: 213900
IP address blocks: 2a13:c8c3:cf42::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:be:f5:c5:88:61:84:1d:20:a0:b7:7c:24:52:d0:75:c4:d7:ec:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3
Validity
Not Before: Aug 6 11:25:41 2026 GMT
Not After : Aug 5 11:30:41 2027 GMT
Subject: CN=5069FABD32E2D8F8486E8C61C66D90434CC6D83E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:df:b3:7d:d5:80:bd:93:06:f9:dd:28:ee:
52:72:9e:57:7a:9f:5b:2a:3c:ac:e6:36:8f:9e:27:
20:4a:37:c2:9f:89:c9:c4:ab:8d:c6:c9:d0:5b:93:
ee:5e:06:67:8c:47:f6:3e:4c:e1:28:04:46:7c:fa:
32:4d:49:49:2d:9c:9c:e5:0a:e5:39:11:45:56:c8:
c6:ac:b6:0e:75:ac:80:b1:48:1b:37:50:1e:38:50:
33:fa:81:09:7b:78:3c:7e:96:8e:b6:70:26:95:2f:
86:67:27:99:8c:e8:42:32:89:77:8c:24:f4:38:26:
fa:32:bd:58:87:88:6b:57:d7:ea:95:37:2e:7c:a8:
5a:7e:aa:1a:ba:81:82:78:cc:16:e3:c3:e7:91:84:
a8:48:9e:33:be:f4:3c:90:6e:00:a3:ed:f8:aa:8f:
cf:af:27:65:64:51:c9:96:14:fe:10:4b:fb:bf:3d:
c4:3e:e2:22:c4:e0:bd:ea:bb:79:ca:36:44:d9:3e:
a0:b5:4c:b5:29:57:94:8e:5a:a2:e1:df:46:8a:99:
c3:75:f1:c3:fa:76:9d:79:56:60:ab:c6:bd:6c:0c:
54:f7:db:b9:16:81:ee:2c:e2:bb:da:f2:05:31:fc:
64:9d:da:0a:79:9b:cd:f9:64:af:11:38:39:f8:62:
bc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:69:FA:BD:32:E2:D8:F8:48:6E:8C:61:C6:6D:90:43:4C:C6:D8:3E
X509v3 Authority Key Identifier:
keyid:AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/326131333a633863333a636634323a3a2f34382d3438203d3e20323133393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c8c3:cf42::/48
Signature Algorithm: sha256WithRSAEncryption
46:b4:e5:84:05:84:fe:b0:b2:d8:5a:8c:30:ad:0e:f3:68:64:
dd:07:1c:76:ae:86:62:5a:4b:ab:5d:26:bf:c1:00:3a:80:29:
29:8e:4a:96:3e:85:23:cb:33:e2:8e:4f:9b:5b:86:2b:80:61:
b3:2f:c0:10:b3:00:18:55:22:24:f3:05:b1:38:c1:96:0e:3c:
4d:e7:4f:07:7d:89:3a:2a:db:58:25:3c:35:b1:7d:a6:c7:59:
a7:38:4a:bf:a9:b6:90:3f:17:8d:c5:1b:de:25:cc:87:bd:0c:
50:b6:2b:61:67:39:3b:8f:63:da:2f:18:2b:f6:5d:ac:95:f5:
88:97:52:8e:4d:d3:23:02:a0:c7:da:a8:a0:1b:1b:b4:39:d2:
1a:26:75:55:35:ce:ec:a0:18:8f:de:bf:d7:b3:3d:ff:d9:aa:
6b:98:9d:13:7a:c7:b0:63:8f:f1:49:b2:6a:3a:98:08:fe:47:
77:75:0b:cd:8f:29:a1:49:bb:0e:f8:95:db:34:5c:24:90:c2:
6b:d3:0a:2a:cd:8a:4d:e1:53:81:d8:0d:ab:6c:71:ab:f2:e9:
65:1e:58:b1:d3:06:f9:e2:5e:3f:94:5f:5e:f4:66:a2:1d:ef:
95:7e:39:0c:85:97:79:a6:bf:7f:70:e6:91:7a:d3:a6:e2:49:
c1:6c:1a:68
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUA771xYhhhB0goLd8JFLQdcTX7MQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWNiNWRmZjhhNDVkZjVjZGFmYTJhOTVjNzE1ZjEwYzVm
ZTVmOTFhMzAeFw0yNjA4MDYxMTI1NDFaFw0yNzA4MDUxMTMwNDFaMDMxMTAvBgNV
BAMTKDUwNjlGQUJEMzJFMkQ4Rjg0ODZFOEM2MUM2NkQ5MDQzNENDNkQ4M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3LN+zfdWAvZMG+d0o7lJynld6
n1sqPKzmNo+eJyBKN8KficnEq43GydBbk+5eBmeMR/Y+TOEoBEZ8+jJNSUktnJzl
CuU5EUVWyMastg51rICxSBs3UB44UDP6gQl7eDx+lo62cCaVL4ZnJ5mM6EIyiXeM
JPQ4JvoyvViHiGtX1+qVNy58qFp+qhq6gYJ4zBbjw+eRhKhInjO+9DyQbgCj7fiq
j8+vJ2VkUcmWFP4QS/u/PcQ+4iLE4L3qu3nKNkTZPqC1TLUpV5SOWqLh30aKmcN1
8cP6dp15VmCrxr1sDFT327kWge4s4rva8gUx/GSd2gp5m835ZK8RODn4YryNAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUUGn6vTLi2PhIboxhxm2QQ0zG2D4wHwYDVR0j
BBgwFoAUrLXf+KRd9c2voqlccV8Qxf5fkaMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi
MzRiLzQvQUNCNURGRjhBNDVERjVDREFGQTJBOTVDNzE1RjEwQzVGRTVGOTFBMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JMWGYtS1JkOWMydm9xbGNjVjhReGY1
ZmthTS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYt
N2QxMy00ODk1LTk1OWQtNDE5YjlhNmViMzRiLzQvMzI2MTMxMzMzYTYzMzg2MzMz
M2E2MzY2MzQzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzMzM5MzAzMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoTyMPPQjANBgkqhkiG9w0BAQsFAAOCAQEARrTlhAWE/rCy2FqM
MK0O82hk3Qccdq6GYlpLq10mv8EAOoApKY5Klj6FI8sz4o5Pm1uGK4Bhsy/AELMA
GFUiJPMFsTjBlg48TedPB32JOirbWCU8NbF9psdZpzhKv6m2kD8XjcUb3iXMh70M
ULYrYWc5O49j2i8YK/ZdrJX1iJdSjk3TIwKgx9qooBsbtDnSGiZ1VTXO7KAYj96/
17M9/9mqa5idE3rHsGOP8UmyajqYCP5Hd3ULzY8poUm7DviV2zRcJJDCa9MKKs2K
TeFTgdgNq2xxq/LpZR5YsdMG+eJeP5RfXvRmoh3vlX45DIWXeaa/f3DmkXrTpuJJ
wWwaaA==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:21:49 2026 by rpki-client