Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/326131333a633863333a636634343a3a2f34382d3438203d3e20323133393030.roa
File: 326131333a633863333a636634343a3a2f34382d3438203d3e20323133393030.roa (raw, json)
Hash identifier: 3GXa+2XIK7stJdY1SqQiakywDCAlEMshv57Bp3q+wsA=
Subject key identifier: A5:C1:61:80:21:D2:D3:29:0B:60:8C:55:4A:2D:CB:80:C6:70:B0:4A
Certificate issuer: /CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3
Certificate serial: 2DD7D677CE665FDD20A1B041CBBCC960F2F29997
Authority key identifier: AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/326131333a633863333a636634343a3a2f34382d3438203d3e20323133393030.roa
Signing time: Thu 06 Aug 2026 11:31:18 +0000
ROA not before: Thu 06 Aug 2026 11:26:18 +0000
ROA not after: Thu 05 Aug 2027 11:31:18 +0000
asID: 213900
IP address blocks: 2a13:c8c3:cf44::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:d7:d6:77:ce:66:5f:dd:20:a1:b0:41:cb:bc:c9:60:f2:f2:99:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3
Validity
Not Before: Aug 6 11:26:18 2026 GMT
Not After : Aug 5 11:31:18 2027 GMT
Subject: CN=A5C1618021D2D3290B608C554A2DCB80C670B04A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4a:5a:f3:8c:87:62:9f:c0:22:1f:7a:a9:29:
90:f4:5c:e2:7e:fd:7a:8e:e2:d5:d7:24:a2:47:a2:
ff:1e:9f:a5:2c:c1:aa:f6:db:69:af:7a:4f:f6:76:
2a:e1:4b:d0:4a:7e:28:2d:2d:bd:f8:6f:c5:bf:9c:
7b:c0:4f:3c:44:28:2f:2f:1f:08:dc:9c:1a:54:cb:
8e:11:46:d3:21:be:e3:e3:19:82:ed:95:15:18:e4:
b6:09:ce:75:05:8b:d5:de:dd:07:fe:6f:5b:d1:c9:
5f:a7:43:30:f0:85:66:87:f0:f3:d1:5c:c9:ae:3a:
a5:0b:ed:af:fe:ce:2d:ea:4e:fe:0d:17:f7:a0:91:
df:19:85:a6:12:75:72:98:36:16:fe:3e:ca:14:3e:
be:b3:dc:6e:43:b4:1c:c0:33:81:7a:ce:ca:16:81:
ce:09:d5:13:2f:f0:c0:17:b8:7d:12:b8:b3:f0:bf:
2c:8f:5e:88:a1:03:8f:38:9d:91:93:0a:4e:13:3e:
76:17:b8:54:0b:39:4b:31:c1:22:93:e3:24:1c:82:
b2:fa:54:a4:8a:7e:b6:3a:18:d2:02:3c:89:7f:1e:
a0:f0:55:81:37:e9:67:c9:af:54:00:ef:fc:e6:5a:
0c:75:15:7c:ea:6a:1a:d3:a7:d3:4d:0b:73:b0:a2:
50:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C1:61:80:21:D2:D3:29:0B:60:8C:55:4A:2D:CB:80:C6:70:B0:4A
X509v3 Authority Key Identifier:
keyid:AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/326131333a633863333a636634343a3a2f34382d3438203d3e20323133393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c8c3:cf44::/48
Signature Algorithm: sha256WithRSAEncryption
b5:2c:ea:0c:bb:33:8d:b8:88:c6:72:1e:a0:3a:23:1d:6d:04:
c7:ec:82:8b:cb:11:ec:2d:94:64:58:45:13:9e:55:af:5d:04:
4f:fe:12:51:b8:4c:b8:08:ea:15:d1:9c:be:34:e6:1e:8d:11:
13:8e:80:ec:24:a3:d4:81:2d:5d:dd:4c:29:9b:28:34:3c:de:
53:2a:f1:e5:fb:1e:06:33:f1:30:3e:ba:1d:46:fe:f2:fe:b7:
ec:32:9f:cc:80:23:0c:23:db:62:48:c1:27:97:16:0b:16:27:
56:0d:92:9e:62:ad:06:d4:ca:71:3d:36:6f:7e:07:c2:87:2d:
81:80:03:d2:26:a2:e1:43:cd:04:b5:2e:de:64:67:9a:41:ec:
5e:9a:9b:6b:3d:de:28:22:a6:3d:29:86:54:5e:0b:3b:40:32:
e4:39:39:c6:31:aa:4b:89:42:35:15:ec:4d:e2:85:72:2e:d1:
e1:fd:a4:35:de:91:5e:30:4c:59:cd:1f:d3:c8:92:08:4d:c4:
f1:eb:6b:1a:ac:b5:75:57:68:6f:0a:e6:c1:ba:81:37:45:f2:
a1:9e:3b:e7:0a:1b:d5:6b:c7:12:e3:3f:64:56:9a:ef:d4:16:
69:c5:59:0a:5a:67:e5:6c:82:fb:d8:f5:9b:3e:b0:75:b1:6b:
97:65:84:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:21:47 2026 by rpki-client