Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/326130623a346530343a33623a3a2f34382d3438203d3e20323032333031.roa
File: 326130623a346530343a33623a3a2f34382d3438203d3e20323032333031.roa (raw, json)
Hash identifier: /T7WczgnoPSjI//jnXYULT7F08gKxrzvE+poPqlF4Do=
Subject key identifier: 31:BD:DA:B7:7B:4A:9C:CD:30:42:E3:14:7A:58:CC:C2:95:E3:BB:59
Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057
Certificate serial: 144A488F34E8B7482725FAF0A62293F8CB87653A
Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/326130623a346530343a33623a3a2f34382d3438203d3e20323032333031.roa
Signing time: Fri 22 May 2026 02:41:29 +0000
ROA not before: Fri 22 May 2026 02:36:29 +0000
ROA not after: Fri 21 May 2027 02:41:29 +0000
asID: 202301
IP address blocks: 2a0b:4e04:3b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:4a:48:8f:34:e8:b7:48:27:25:fa:f0:a6:22:93:f8:cb:87:65:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057
Validity
Not Before: May 22 02:36:29 2026 GMT
Not After : May 21 02:41:29 2027 GMT
Subject: CN=31BDDAB77B4A9CCD3042E3147A58CCC295E3BB59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e5:35:47:bb:79:12:4d:88:a1:15:52:e8:ac:
29:cc:44:11:ba:f2:88:0e:c9:3d:78:81:97:66:e3:
8b:82:aa:68:12:55:25:63:a6:f4:75:a1:75:8e:68:
8f:22:68:7f:61:bb:b1:6b:7e:a2:b8:db:1d:9b:58:
16:a5:84:70:00:36:dd:b0:eb:05:39:06:0f:89:50:
80:73:d6:e8:15:b4:42:fb:c9:26:fa:3b:62:45:bc:
3b:92:1f:70:c3:f5:8e:11:dc:37:17:57:67:36:f6:
6e:44:71:e5:47:4d:45:9d:6f:42:a3:ba:5d:44:c6:
92:7c:55:a8:87:3c:53:5e:f9:5d:de:60:ac:48:98:
3d:08:1b:3a:51:f0:59:0c:5d:5e:d1:21:fe:f0:db:
65:f5:b8:70:d4:f1:10:ab:1c:c4:2a:a1:7d:55:ef:
c6:39:1a:51:61:b5:42:00:c6:ea:7c:3e:44:00:7c:
5e:a2:73:d2:42:35:69:e6:2f:88:b8:ff:92:14:a6:
7b:be:74:88:ea:04:ac:92:d0:38:92:2a:dd:36:17:
b4:cd:36:24:2e:56:f0:98:e3:28:51:8b:3a:ad:23:
f7:29:85:28:3e:fc:ed:56:36:f5:76:7f:45:10:7b:
03:8a:91:10:59:0c:ec:dd:e3:4f:a2:b0:ee:c1:ec:
46:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BD:DA:B7:7B:4A:9C:CD:30:42:E3:14:7A:58:CC:C2:95:E3:BB:59
X509v3 Authority Key Identifier:
keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/326130623a346530343a33623a3a2f34382d3438203d3e20323032333031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e04:3b::/48
Signature Algorithm: sha256WithRSAEncryption
27:d9:fc:6f:f9:25:93:03:f1:05:cc:3e:f2:af:1b:d3:44:96:
ac:4a:16:38:f5:42:95:90:41:5e:30:98:1e:56:87:2e:a7:39:
2d:84:ab:be:6c:0c:60:ff:9c:83:8c:3c:2a:95:7b:a7:fe:b9:
4d:fb:0b:11:7c:b3:58:2b:12:86:34:89:46:44:1a:fe:cc:31:
8d:f7:8f:06:14:1e:37:44:9f:cd:05:eb:90:fa:04:9e:a1:0b:
3c:5e:2b:c6:a3:32:8b:b5:c5:b3:97:e4:04:fa:9a:48:62:0f:
92:85:6a:2c:a9:2a:c3:a5:f3:7d:e6:7b:63:99:c1:b0:3b:93:
3f:a7:9d:d6:b8:bd:13:d6:ae:56:4d:1e:91:a5:19:8d:31:e6:
df:06:47:bf:f4:04:fc:93:48:26:d0:41:0b:26:ee:6f:76:28:
d3:4a:4d:19:0b:df:af:8a:2f:7a:30:c3:03:96:b5:be:ca:c5:
54:9e:d2:e8:bf:fc:a4:a0:b6:7f:9f:87:d6:48:fa:e7:bd:ca:
77:ee:e7:1c:37:d2:0a:a6:1f:76:76:99:b7:71:d7:4c:d9:59:
9b:c5:e4:a1:53:5d:0b:b5:48:bd:bd:92:6b:86:f8:61:da:bd:
fa:79:4c:bd:67:95:ca:8f:87:0c:fc:bf:48:d9:ac:3e:ea:5a:
b4:55:64:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:28:58 2026 by rpki-client