Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/326130343a623563303a3a2f32392d3239203d3e2032363131.roa
File: 326130343a623563303a3a2f32392d3239203d3e2032363131.roa (raw, json)
Hash identifier: g6fQ6U8AL1x2srkUduI+cy2ZPN9tO2YQFmWnMt20uDY=
Subject key identifier: FF:57:48:FF:65:A5:C0:AB:6A:98:BD:09:DC:23:97:DE:C5:A2:B6:90
Certificate issuer: /CN=87167c38252ee930526e913bd0f8b73561b56ee3
Certificate serial: 7788A78F14604A8EA1D58CA459031565567A473E
Authority key identifier: 87:16:7C:38:25:2E:E9:30:52:6E:91:3B:D0:F8:B7:35:61:B5:6E:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxZ8OCUu6TBSbpE70Pi3NWG1buM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/326130343a623563303a3a2f32392d3239203d3e2032363131.roa
Signing time: Fri 23 Oct 2026 08:16:07 +0000
ROA not before: Fri 23 Oct 2026 08:11:07 +0000
ROA not after: Fri 22 Oct 2027 08:16:07 +0000
asID: 2611
IP address blocks: 2a04:b5c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/87167C38252EE930526E913BD0F8B73561B56EE3.crl
rsync://rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/87167C38252EE930526E913BD0F8B73561B56EE3.mft
rsync://rpki.ripe.net/repository/DEFAULT/hxZ8OCUu6TBSbpE70Pi3NWG1buM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 14:55:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:88:a7:8f:14:60:4a:8e:a1:d5:8c:a4:59:03:15:65:56:7a:47:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87167c38252ee930526e913bd0f8b73561b56ee3
Validity
Not Before: Oct 23 08:11:07 2026 GMT
Not After : Oct 22 08:16:07 2027 GMT
Subject: CN=FF5748FF65A5C0AB6A98BD09DC2397DEC5A2B690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f1:cf:25:55:9d:94:d3:07:01:d0:db:e9:91:
9a:6a:ae:52:27:b9:eb:59:0e:bc:9d:6a:c4:c3:76:
c7:de:5d:e4:f4:e1:dc:80:87:7f:e5:da:93:05:f3:
56:2b:41:39:42:b2:1e:b1:2c:a7:94:a0:5d:c1:46:
7d:5b:c4:d6:1a:4e:7c:53:47:c2:eb:3d:57:43:36:
ce:da:cc:fd:6d:da:54:75:46:e1:c4:33:01:87:61:
54:fe:7b:8e:6f:93:a0:26:33:93:58:ee:48:fe:26:
c1:c3:47:3d:6f:aa:6f:5d:dc:59:09:00:58:cf:a7:
6d:8c:01:7e:9f:02:90:93:0a:92:82:9d:27:61:fa:
45:68:a2:70:72:34:1c:f9:16:e7:21:d7:14:ea:43:
27:eb:50:90:65:61:55:11:8f:05:b2:0d:ed:6e:24:
45:65:03:dd:51:82:36:5e:28:f2:30:9d:4e:13:76:
a0:d7:5f:2e:08:dd:c1:42:44:24:cc:ce:a1:08:dd:
ed:34:62:06:26:a4:a2:38:a8:59:bd:ca:52:08:f0:
8a:37:6f:e2:63:9e:df:68:59:f9:10:71:9b:b8:36:
23:42:fe:0c:f6:c8:a3:6c:de:3b:8e:a6:36:55:6a:
cf:f7:f6:13:31:36:ca:d5:3d:f6:eb:92:d8:9e:35:
04:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:57:48:FF:65:A5:C0:AB:6A:98:BD:09:DC:23:97:DE:C5:A2:B6:90
X509v3 Authority Key Identifier:
keyid:87:16:7C:38:25:2E:E9:30:52:6E:91:3B:D0:F8:B7:35:61:B5:6E:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/87167C38252EE930526E913BD0F8B73561B56EE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxZ8OCUu6TBSbpE70Pi3NWG1buM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/326130343a623563303a3a2f32392d3239203d3e2032363131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b5c0::/29
Signature Algorithm: sha256WithRSAEncryption
78:c7:5b:44:54:1f:b7:eb:4f:f4:c6:84:3c:e8:63:21:27:c2:
a2:67:ab:92:ac:c2:ba:ce:d6:75:a4:38:ff:88:e6:07:0d:4b:
6c:4f:b1:62:c6:3b:9d:00:c7:e3:3f:b5:62:51:1d:e4:73:2c:
0c:d7:58:c6:b7:a9:f4:02:ea:d0:4e:48:44:7c:d2:04:58:63:
4d:77:04:a9:67:f3:29:c2:46:25:21:1b:9a:d3:91:77:88:c4:
5d:7b:f7:78:b2:af:44:c6:13:04:5f:c9:83:7a:8e:9e:05:6f:
36:44:8e:53:1f:cf:de:9a:02:0a:16:be:30:4d:aa:1e:6a:a4:
13:44:35:d5:5d:7a:9b:a3:fe:43:00:c1:0e:bc:fd:aa:9b:e6:
4b:2c:04:fd:9a:bb:16:c4:2d:58:8d:4b:9d:ed:7f:7b:01:b3:
d5:38:cd:e7:45:96:84:e0:2c:7f:96:2e:32:ad:51:60:be:e8:
10:98:20:fd:99:56:ab:a1:17:49:67:eb:71:08:6c:95:48:dd:
75:35:3a:90:31:91:7f:45:9b:37:45:a1:a9:c1:46:c2:42:95:
94:20:af:9e:be:32:c2:6a:e5:c4:7a:22:0a:e5:7a:3e:df:f3:
88:74:67:9f:0c:59:69:db:f6:f5:ff:dd:93:57:fd:22:5c:78:
12:da:c3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:00:09 2026 by rpki-client