Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/326131333a633863333a636634333a3a2f34382d3438203d3e20323133393030.roa
File: 326131333a633863333a636634333a3a2f34382d3438203d3e20323133393030.roa (raw, json)
Hash identifier: Wb7V6a2gWKghvPXm+g51HScY4CWk014Mgj5mRtuKWWs=
Subject key identifier: 86:7C:7C:DB:CE:C8:7E:A8:04:A7:03:70:4C:E0:85:2D:75:7B:52:8B
Certificate issuer: /CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3
Certificate serial: 57A5ABB9C71C4E3E02A0022DFC336D1B1F12B949
Authority key identifier: AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/326131333a633863333a636634333a3a2f34382d3438203d3e20323133393030.roa
Signing time: Thu 06 Aug 2026 11:31:02 +0000
ROA not before: Thu 06 Aug 2026 11:26:02 +0000
ROA not after: Thu 05 Aug 2027 11:31:02 +0000
asID: 213900
IP address blocks: 2a13:c8c3:cf43::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:a5:ab:b9:c7:1c:4e:3e:02:a0:02:2d:fc:33:6d:1b:1f:12:b9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3
Validity
Not Before: Aug 6 11:26:02 2026 GMT
Not After : Aug 5 11:31:02 2027 GMT
Subject: CN=867C7CDBCEC87EA804A703704CE0852D757B528B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:1f:43:98:ad:6d:fe:ae:38:25:32:95:95:
99:f9:44:9f:77:e8:f9:38:98:86:36:5d:0f:69:0e:
88:14:a1:45:3d:33:e7:95:7c:e9:8f:85:58:dc:00:
07:0a:85:2f:21:c4:39:58:c2:50:ed:f5:54:5f:69:
5c:6d:50:85:ae:e0:90:7b:49:c3:80:5a:9c:cd:b4:
d5:a7:9c:21:f6:de:90:56:d3:3b:84:2e:f2:20:6b:
2f:92:a8:03:e1:c7:c7:90:44:21:6d:d0:aa:48:39:
33:88:fd:b7:ec:08:74:0b:67:d3:02:ea:07:00:07:
54:1b:ce:b8:b8:21:06:21:cb:32:92:9e:3b:c4:cb:
73:93:43:97:df:57:3d:ba:83:b2:5e:ae:8c:87:6b:
09:e3:12:3a:ec:05:66:f0:c5:23:f5:9e:6b:dd:39:
9b:4e:4c:80:a8:38:a3:11:51:9a:a5:eb:00:33:12:
31:9e:5a:8d:ac:51:84:72:74:2e:b1:a0:f3:e0:e5:
14:a8:b3:a0:06:26:b4:18:41:91:50:5c:d3:28:e8:
60:f3:4e:fe:f9:49:05:04:bb:82:53:04:fa:3d:7e:
44:f1:7c:40:50:62:80:1e:8b:18:5d:23:37:e4:cf:
41:42:89:d2:c3:3e:49:4b:12:20:75:4d:b1:ce:b8:
75:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7C:7C:DB:CE:C8:7E:A8:04:A7:03:70:4C:E0:85:2D:75:7B:52:8B
X509v3 Authority Key Identifier:
keyid:AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/326131333a633863333a636634333a3a2f34382d3438203d3e20323133393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c8c3:cf43::/48
Signature Algorithm: sha256WithRSAEncryption
0e:ad:87:6c:c1:ba:fb:88:cc:51:b9:00:08:7c:3d:63:27:29:
60:9f:4d:1a:d1:df:67:38:86:e0:e5:61:07:a3:bc:db:3b:ba:
6e:13:90:47:df:c9:96:0e:81:97:b1:e8:db:fb:0e:c0:8c:0b:
c0:de:cb:50:5d:5b:f1:0c:6a:ed:3e:4a:6a:67:51:44:9f:69:
46:a9:5a:f2:53:89:7e:0f:50:25:82:24:0b:11:90:7b:c5:65:
de:13:36:ed:96:b6:22:d3:26:ca:cf:26:86:f2:41:ec:98:be:
dc:8f:19:82:36:9c:b9:53:d2:cb:5d:12:c7:de:3d:09:11:31:
31:15:83:03:16:e0:03:82:b5:a3:c3:54:0d:e2:d2:6d:90:04:
4c:56:da:0b:3b:70:f5:4d:79:aa:fb:1c:b6:52:db:cc:43:7d:
2f:bf:06:2e:d6:c2:b8:80:47:91:40:e4:0d:e9:e9:78:09:59:
a8:d2:36:2a:74:c0:ac:97:eb:ed:1e:72:4b:0f:3f:80:24:6c:
fd:b7:98:46:05:68:4c:fc:a8:ad:f5:24:1a:cb:74:a8:11:b8:
1a:c1:c6:ac:a7:16:88:ce:18:c6:ae:a7:1f:93:12:fb:61:5c:
bc:d2:1d:90:f8:93:59:40:47:d2:78:a1:27:fc:24:0a:b3:1d:
42:de:ba:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:21:46 2026 by rpki-client