Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/326130623a346530373a6234333a3a2f34382d3438203d3e20313937333234.roa
File: 326130623a346530373a6234333a3a2f34382d3438203d3e20313937333234.roa (raw, json)
Hash identifier: /NicVI9ZA6HI/WOoAhhTorEr85yfvxle9J9tMstWWS8=
Subject key identifier: 4B:45:00:BB:28:AE:51:68:F5:C8:77:3F:C9:2B:AB:6C:66:48:0D:0F
Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057
Certificate serial: 32C679AB368E2F7EB31A9D58AD879D9A0ECC3370
Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/326130623a346530373a6234333a3a2f34382d3438203d3e20313937333234.roa
Signing time: Thu 28 May 2026 11:40:47 +0000
ROA not before: Thu 28 May 2026 11:35:47 +0000
ROA not after: Thu 27 May 2027 11:40:47 +0000
asID: 197324
IP address blocks: 2a0b:4e07:b43::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:c6:79:ab:36:8e:2f:7e:b3:1a:9d:58:ad:87:9d:9a:0e:cc:33:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057
Validity
Not Before: May 28 11:35:47 2026 GMT
Not After : May 27 11:40:47 2027 GMT
Subject: CN=4B4500BB28AE5168F5C8773FC92BAB6C66480D0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4f:65:c1:e2:83:c9:b2:62:da:cc:50:a5:e1:
8c:26:1c:7a:d7:84:21:16:f7:75:07:f7:e0:b8:40:
ae:e9:29:d8:66:26:7e:c2:9f:41:08:27:c5:8f:bd:
24:10:38:1a:27:85:85:10:9c:d5:6c:65:0c:3f:7d:
02:5b:14:3c:88:50:04:60:28:93:48:a8:87:ff:bb:
f4:29:cc:96:48:0c:8c:a3:a3:d4:22:e3:1d:3b:1d:
39:ba:e9:5a:3a:9d:4b:7c:b5:29:59:31:a2:45:76:
af:5b:d4:c8:db:96:0f:17:3c:eb:10:94:d3:39:0c:
31:2b:3b:bd:dc:67:d1:ab:1f:b2:36:b0:c9:ca:6a:
fb:a8:a2:ee:ca:f6:4b:44:54:a3:52:80:76:6a:86:
95:63:a7:50:7d:f1:02:c4:c2:97:23:e5:46:34:e9:
1f:fa:fc:19:37:e3:ac:df:e2:f7:3c:11:09:8c:e5:
8b:6d:65:a1:46:68:54:69:67:bd:4b:17:df:77:e9:
e2:8c:a9:55:9f:a1:d3:9b:f1:7d:f4:27:33:8c:96:
8c:b9:de:de:e3:d2:85:26:9d:2b:eb:00:5f:83:4b:
42:c8:4a:e2:96:fb:8b:57:ef:eb:16:5f:27:98:da:
d6:45:e8:f9:3e:26:31:82:95:eb:27:cd:dd:31:68:
fc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:45:00:BB:28:AE:51:68:F5:C8:77:3F:C9:2B:AB:6C:66:48:0D:0F
X509v3 Authority Key Identifier:
keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/326130623a346530373a6234333a3a2f34382d3438203d3e20313937333234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:b43::/48
Signature Algorithm: sha256WithRSAEncryption
07:f6:73:d8:cc:c0:c8:74:13:96:f7:ba:4e:80:87:a6:b9:7d:
ba:31:3d:fa:8b:92:61:95:72:9f:bf:d2:d2:64:77:b1:22:a9:
69:76:86:31:0d:a3:a7:ea:a0:7e:4d:f7:28:8b:36:ad:10:9f:
81:85:e8:13:f0:3b:9f:81:b8:0d:0d:7d:11:46:1e:aa:f9:ef:
2d:4c:b9:3e:54:74:7c:b6:54:88:4e:5e:e1:6a:97:54:e6:1d:
18:d6:5a:de:91:1c:34:62:1a:98:4f:ce:08:d1:27:ff:79:71:
7a:1c:31:d4:30:81:9d:fd:43:73:79:94:0b:6d:2d:b9:e0:8d:
96:90:01:a3:d3:16:d8:6e:5d:ca:8f:67:d1:75:14:81:ac:d2:
d3:f5:72:1b:24:21:b9:5a:ae:05:e7:ba:ad:6a:a4:34:d8:6f:
3e:57:3b:db:30:4e:1e:41:48:61:dd:20:54:ab:c3:bc:d5:f0:
1f:58:d0:bf:82:a4:ba:81:08:23:d3:dc:44:43:e0:0a:d6:f8:
f3:f4:74:3c:b9:6f:fb:05:3d:8c:21:7b:07:3e:ee:ee:fa:59:
5c:90:8e:f0:45:54:87:90:c5:0e:fb:b7:57:ce:ef:7a:49:6b:
7f:e7:71:73:bc:cc:8b:68:13:c7:f8:b3:9d:6c:34:d4:0f:c1:
b4:70:b8:2b
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUMsZ5qzaOL36zGp1YrYedmg7MM3AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi
ZjNhODA1NzAeFw0yNjA1MjgxMTM1NDdaFw0yNzA1MjcxMTQwNDdaMDMxMTAvBgNV
BAMTKDRCNDUwMEJCMjhBRTUxNjhGNUM4NzczRkM5MkJBQjZDNjY0ODBEMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWT2XB4oPJsmLazFCl4YwmHHrX
hCEW93UH9+C4QK7pKdhmJn7Cn0EIJ8WPvSQQOBonhYUQnNVsZQw/fQJbFDyIUARg
KJNIqIf/u/QpzJZIDIyjo9Qi4x07HTm66Vo6nUt8tSlZMaJFdq9b1Mjblg8XPOsQ
lNM5DDErO73cZ9GrH7I2sMnKavuoou7K9ktEVKNSgHZqhpVjp1B98QLEwpcj5UY0
6R/6/Bk346zf4vc8EQmM5YttZaFGaFRpZ71LF9936eKMqVWfodOb8X30JzOMloy5
3t7j0oUmnSvrAF+DS0LISuKW+4tX7+sWXyeY2tZF6Pk+JjGClesnzd0xaPxbAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUS0UAuyiuUWj1yHc/ySurbGZIDQ8wHwYDVR0j
BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx
NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4
NmdGYy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEt
OGJhNS00NzlmLWEyMjktMGFiNzBlNDgxNWJiLzAvMzI2MTMwNjIzYTM0NjUzMDM3
M2E2MjM0MzMzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM5MzczMzMyMzQucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqC04HC0MwDQYJKoZIhvcNAQELBQADggEBAAf2c9jMwMh0E5b3uk6A
h6a5fboxPfqLkmGVcp+/0tJkd7EiqWl2hjENo6fqoH5N9yiLNq0Qn4GF6BPwO5+B
uA0NfRFGHqr57y1MuT5UdHy2VIhOXuFql1TmHRjWWt6RHDRiGphPzgjRJ/95cXoc
MdQwgZ39Q3N5lAttLbngjZaQAaPTFthuXcqPZ9F1FIGs0tP1chskIblargXnuq1q
pDTYbz5XO9swTh5BSGHdIFSrw7zV8B9Y0L+CpLqBCCPT3ERD4ArW+PP0dDy5b/sF
PYwhewc+7u76WVyQjvBFVIeQxQ77t1fO73pJa3/ncXO8zItoE8f4s51sNNQPwbRw
uCs=
-----END CERTIFICATE-----
Generated at Sat Jun 6 02:29:38 2026 by rpki-client