Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/326131343a623430303a3a2f33322d3332203d3e20323133323739.roa
File: 326131343a623430303a3a2f33322d3332203d3e20323133323739.roa (raw, json)
Hash identifier: rT8I95NhPW9Za7rv+7019qgMOggIgHAYWlE3AUdlN/w=
Subject key identifier: D2:8C:D9:9D:AF:B0:C0:F8:88:3D:D5:1E:0C:20:4D:9A:5C:C7:40:C6
Certificate issuer: /CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e
Certificate serial: 2D42F2B26A7D134822403EFC2148F6B4D16F74D0
Authority key identifier: 2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/326131343a623430303a3a2f33322d3332203d3e20323133323739.roa
Signing time: Sun 04 Jan 2026 10:41:15 +0000
ROA not before: Sun 04 Jan 2026 10:36:15 +0000
ROA not after: Sun 03 Jan 2027 10:41:15 +0000
asID: 213279
IP address blocks: 2a14:b400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl
rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 17:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:42:f2:b2:6a:7d:13:48:22:40:3e:fc:21:48:f6:b4:d1:6f:74:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e
Validity
Not Before: Jan 4 10:36:15 2026 GMT
Not After : Jan 3 10:41:15 2027 GMT
Subject: CN=D28CD99DAFB0C0F8883DD51E0C204D9A5CC740C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a3:76:ea:09:67:bb:98:47:66:08:b7:3c:75:
2f:8e:3f:eb:7d:fd:ed:9c:9c:23:b8:8b:da:9a:c2:
b6:31:48:fc:15:72:9d:66:21:dc:83:aa:ef:5a:7b:
2b:66:ae:c0:ee:c6:8c:38:c2:f1:97:d1:7f:e7:0d:
f0:7d:a8:1e:40:1c:1a:52:51:e7:08:ad:77:99:f1:
1b:79:39:9e:e9:fb:db:13:35:bb:63:d1:73:86:2a:
8f:14:48:0c:47:f8:0f:9a:f3:72:b9:a7:e5:65:62:
05:ce:57:9a:5f:e9:d8:16:8f:0b:21:d1:76:fc:bc:
ae:12:c8:73:f7:e3:b2:7f:43:f3:89:9b:64:41:d5:
bd:5c:c9:62:30:5f:c6:e6:04:a0:e3:2a:c7:36:98:
e7:d4:3a:9d:49:e2:41:86:2d:30:2d:d2:ac:f8:df:
64:6b:08:4a:86:7a:1f:13:ca:3a:97:ff:6d:bc:7a:
5e:8d:c3:88:39:28:06:2b:3d:a1:3b:30:5b:71:51:
73:b1:20:16:9f:38:06:e7:ab:70:ba:7d:cb:61:12:
3c:71:c4:08:b7:b3:ab:10:ab:12:ee:51:8c:88:e4:
e1:6e:0f:f2:b6:f3:bc:ff:d9:65:ed:dc:9f:7b:de:
40:c7:ed:d0:8d:a3:dc:e1:62:71:52:a2:3e:43:54:
50:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8C:D9:9D:AF:B0:C0:F8:88:3D:D5:1E:0C:20:4D:9A:5C:C7:40:C6
X509v3 Authority Key Identifier:
keyid:2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/326131343a623430303a3a2f33322d3332203d3e20323133323739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:b400::/32
Signature Algorithm: sha256WithRSAEncryption
aa:15:d6:42:7d:4e:3c:c9:01:39:11:e5:1c:0a:af:46:dc:32:
f1:5b:3a:ba:2c:48:62:39:09:d6:3e:13:2b:b9:6d:29:b7:0f:
fc:11:cc:0b:63:1b:b7:5b:50:ce:6b:17:35:46:95:23:5f:8b:
71:74:89:26:65:66:2b:24:38:eb:ae:8f:11:e7:e4:d8:58:18:
05:63:14:fe:48:05:06:e8:50:46:9d:30:ea:21:b5:b4:31:0a:
9a:a3:c0:d5:ad:bf:2e:dd:20:5e:bf:b7:28:04:3b:a0:0d:73:
90:18:66:ea:38:75:45:01:02:2c:cb:56:9d:6c:e4:17:44:13:
be:c2:0c:bd:ba:64:99:12:39:84:9c:52:ae:67:c3:ac:05:2c:
7b:c8:f3:c2:05:a6:f7:13:4a:56:40:c7:b6:03:96:46:ab:49:
28:4f:6a:fe:a6:2a:50:41:99:60:db:ce:65:76:bd:9b:8b:ad:
e6:e4:79:ed:48:ca:61:c6:82:61:06:72:c5:fe:bd:12:88:bf:
15:4b:05:27:7c:aa:f9:af:74:08:a2:7b:37:4c:02:60:35:9e:
1f:a9:70:49:c8:ee:48:5c:cb:d7:4f:55:f2:86:36:7b:ab:75:
18:eb:74:3d:f5:a8:ac:29:7a:d5:37:05:0c:bd:f6:c1:45:23:
08:e1:06:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 06:27:44 2026 by rpki-client