Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/326130623a346530343a343966353a3a2f34382d3438203d3e20343032353336.roa
File: 326130623a346530343a343966353a3a2f34382d3438203d3e20343032353336.roa (raw, json)
Hash identifier: pWY9PAU1e4HYq/0yecEeibEgLvdjkG+Q4SYrRpaltss=
Subject key identifier: 46:D9:5F:69:77:61:E5:EB:13:2C:89:EA:2C:48:F2:F6:B5:EB:28:3E
Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057
Certificate serial: 57BC3233353C1B249DD21A3C497232C1817B63E7
Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/326130623a346530343a343966353a3a2f34382d3438203d3e20343032353336.roa
Signing time: Wed 20 May 2026 07:01:05 +0000
ROA not before: Wed 20 May 2026 06:56:05 +0000
ROA not after: Wed 19 May 2027 07:01:05 +0000
asID: 402536
IP address blocks: 2a0b:4e04:49f5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:bc:32:33:35:3c:1b:24:9d:d2:1a:3c:49:72:32:c1:81:7b:63:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057
Validity
Not Before: May 20 06:56:05 2026 GMT
Not After : May 19 07:01:05 2027 GMT
Subject: CN=46D95F697761E5EB132C89EA2C48F2F6B5EB283E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:08:83:95:75:7c:7a:3b:41:47:5f:ae:45:
d1:a3:63:13:d8:94:ed:7c:06:9b:af:0c:fb:64:1c:
1a:ea:84:17:d2:52:f9:38:e7:a8:98:2a:5f:1e:54:
65:55:2e:ac:f4:c5:aa:20:c6:d3:22:58:78:aa:57:
4b:f4:c8:89:7a:2d:bd:61:39:e4:78:0f:9d:c3:be:
1d:76:87:db:25:9d:56:9f:9c:b4:df:b1:44:ab:69:
f1:12:08:f8:a4:94:a3:b8:eb:b9:c7:f7:b5:3c:92:
f9:9e:c3:fc:f6:51:90:4b:72:72:8a:d0:dc:9a:e8:
d2:70:c2:70:31:31:47:ef:a4:5b:70:37:45:c9:06:
9a:e7:dd:57:be:44:72:67:10:2d:12:55:68:12:c9:
eb:a6:60:8b:a0:96:d1:3f:f2:24:e8:39:ed:74:32:
0f:46:b3:a9:d6:ca:23:20:ce:31:7e:b5:d7:14:7d:
16:83:d2:39:46:6c:a4:75:26:25:d9:bb:f0:8d:f8:
36:35:f3:4d:ec:47:17:21:53:97:b2:ee:0d:9c:8e:
eb:a1:04:35:77:e0:e6:63:0d:36:a9:99:b1:b9:6e:
b1:84:cc:9e:25:83:48:05:28:e8:d3:77:1e:3c:aa:
a4:1b:ea:b2:c2:9e:56:83:2c:5a:4f:20:ba:12:29:
f5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D9:5F:69:77:61:E5:EB:13:2C:89:EA:2C:48:F2:F6:B5:EB:28:3E
X509v3 Authority Key Identifier:
keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/326130623a346530343a343966353a3a2f34382d3438203d3e20343032353336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e04:49f5::/48
Signature Algorithm: sha256WithRSAEncryption
22:16:cd:84:a5:4f:85:c4:44:b0:c0:67:a0:fe:70:02:79:38:
59:f0:31:de:7c:fa:40:d7:2c:0c:a9:ed:75:11:c5:3c:a6:53:
e0:38:1f:91:5c:8b:86:ca:29:5a:17:5d:3b:e8:dd:72:ca:de:
db:58:10:bf:af:29:07:19:70:8a:fc:6e:3d:97:17:e4:87:45:
37:a8:26:e7:5f:67:52:17:af:b4:16:61:a4:3f:ad:e4:c1:be:
71:3c:eb:99:3f:26:0b:ea:aa:3e:55:85:d4:a9:1e:3e:58:16:
c7:7b:7a:b9:65:60:71:94:01:91:7a:8c:65:9d:8a:10:67:5a:
af:9d:3a:af:38:34:4b:c3:a3:7a:6b:0b:24:a4:65:55:7c:b4:
3e:fd:b5:31:83:9f:42:ae:10:94:7f:1a:50:a2:2b:20:40:44:
0c:55:7b:65:ba:04:f4:3d:34:eb:df:cc:fe:5c:e8:31:30:6d:
39:77:b2:68:45:cb:a7:50:81:99:d8:33:ab:c4:b0:54:52:4a:
dc:ae:37:3c:61:dc:9e:8a:e1:f1:1f:76:d9:aa:b0:fa:14:22:
c6:60:c6:c5:aa:81:b9:79:58:e2:20:f9:3b:14:8a:06:b5:4a:
07:05:c4:81:3b:4c:3b:b1:7a:79:f2:ea:5d:52:e0:57:87:0a:
5b:fc:67:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:28:58 2026 by rpki-client