Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: MWbY0tqaudQhC76aQFq2sYmNSWSk/Q+9/BXWncxa9FE=
Subject key identifier: 98:25:1A:84:D6:3A:37:0D:32:41:14:1E:37:0F:6A:05:D6:47:9B:60
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6C26BE682A3C2F64D17D9691165A3E88C7079071
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS0.roa
Signing time: Fri 09 Oct 2026 18:09:17 +0000
ROA not before: Fri 09 Oct 2026 18:04:17 +0000
ROA not after: Fri 08 Oct 2027 18:09:17 +0000
asID: 0
IP address blocks: 2a0f:85c1:295::/48 maxlen: 48
2a0f:85c1:340::/48 maxlen: 48
2a0f:85c1:343::/48 maxlen: 48
2a0f:85c1:354::/48 maxlen: 48
2a0f:85c1:35a::/48 maxlen: 48
2a0f:85c1:362::/48 maxlen: 48
2a0f:85c1:396::/48 maxlen: 48
2a0f:85c1:399::/48 maxlen: 48
2a0f:85c1:39a::/48 maxlen: 48
2a0f:85c1:3a0::/48 maxlen: 48
2a0f:85c1:3a1::/48 maxlen: 48
2a0f:85c1:3a7::/48 maxlen: 48
2a0f:85c1:3af::/48 maxlen: 48
2a0f:85c1:3b2::/48 maxlen: 48
2a0f:85c1:3b3::/48 maxlen: 48
2a0f:85c1:3bb::/48 maxlen: 48
2a0f:85c1:3c8::/48 maxlen: 48
2a0f:85c1:3d0::/48 maxlen: 48
2a0f:85c1:3f3::/48 maxlen: 48
2a0f:85c1:834::/48 maxlen: 48
2a0f:85c1:885::/48 maxlen: 48
2a0f:85c1:bfa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:26:be:68:2a:3c:2f:64:d1:7d:96:91:16:5a:3e:88:c7:07:90:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 9 18:04:17 2026 GMT
Not After : Oct 8 18:09:17 2027 GMT
Subject: CN=98251A84D63A370D3241141E370F6A05D6479B60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fa:a2:73:bb:6d:1b:5a:49:ba:d5:4a:f5:58:
06:8d:c9:78:64:f1:5d:6f:7f:1f:b6:fe:11:1b:c4:
e9:f0:b5:2d:8a:75:db:3c:05:36:18:41:02:b4:42:
e0:95:de:6e:a2:6c:b7:6f:35:62:2d:4c:c3:ac:24:
43:5a:64:05:17:fc:19:60:bd:84:b1:79:ea:f4:2b:
e4:59:25:57:15:1e:7f:55:5b:50:e3:7f:d3:a9:8c:
39:85:b2:bc:d1:50:e7:5d:f9:9d:5a:0b:56:cc:d4:
79:78:97:cd:d4:37:db:5f:34:fd:3f:f8:c5:3b:ad:
80:b9:11:93:93:38:80:3d:66:02:52:16:72:6f:1d:
9e:85:24:5b:c7:6a:7e:3e:0d:9f:63:b7:4b:e2:7b:
26:35:dc:e0:1a:da:b0:b5:9e:3f:c2:20:52:98:25:
2f:00:05:30:b0:fd:b7:4d:f9:7c:75:4d:cf:99:b0:
ad:78:cf:0c:1f:0a:f4:76:e4:c9:ec:c4:12:c7:b1:
20:bb:df:d6:61:00:49:42:46:67:0e:23:61:f9:0e:
60:35:62:f9:9b:44:f2:af:17:6a:7b:2f:71:09:be:
8a:38:a7:27:0c:20:a4:e5:f6:e8:8f:3a:4f:31:be:
5e:25:f8:85:bb:c5:ba:86:91:f4:52:e8:03:be:85:
c4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:25:1A:84:D6:3A:37:0D:32:41:14:1E:37:0F:6A:05:D6:47:9B:60
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:295::/48
2a0f:85c1:340::/48
2a0f:85c1:343::/48
2a0f:85c1:354::/48
2a0f:85c1:35a::/48
2a0f:85c1:362::/48
2a0f:85c1:396::/48
2a0f:85c1:399::-2a0f:85c1:39a:ffff:ffff:ffff:ffff:ffff
2a0f:85c1:3a0::/47
2a0f:85c1:3a7::/48
2a0f:85c1:3af::/48
2a0f:85c1:3b2::/47
2a0f:85c1:3bb::/48
2a0f:85c1:3c8::/48
2a0f:85c1:3d0::/48
2a0f:85c1:3f3::/48
2a0f:85c1:834::/48
2a0f:85c1:885::/48
2a0f:85c1:bfa::/48
Signature Algorithm: sha256WithRSAEncryption
ec:6d:bc:db:a8:2b:1b:f6:28:06:9a:74:be:db:43:5c:b9:dc:
66:9b:e4:dc:38:30:36:0e:5e:b5:d1:05:e2:f4:03:50:77:c4:
92:7f:35:22:33:b4:01:eb:98:5d:9e:0d:05:04:7d:67:9e:43:
14:11:ff:c6:84:4c:f1:43:da:de:55:86:d1:14:de:fd:f5:3d:
f3:e2:76:cb:59:2f:31:75:c8:70:48:ef:51:d8:f3:03:43:49:
e5:d6:57:cd:1f:45:47:c3:8f:7a:2c:f9:6e:c0:a5:fa:5f:8d:
e5:f0:e0:ca:dd:05:d0:e2:b6:11:e1:85:b8:e0:34:53:87:6b:
f9:c1:e3:c5:3c:e7:e1:d0:a1:18:db:87:3d:d8:41:e4:99:85:
f7:e2:0d:7c:45:50:da:a1:a7:9b:d4:6f:41:34:53:81:a7:d5:
40:c9:7b:05:f2:3b:fd:0b:e5:27:d9:d2:fa:20:a8:1d:2e:94:
ff:f5:fc:0b:77:e4:ac:c0:1d:b7:59:24:6c:37:7f:c2:d3:95:
7b:f9:44:62:1f:07:d2:17:1c:13:61:35:d0:2e:c4:1c:2d:72:
ac:00:dd:93:46:69:75:a0:f6:b8:36:2f:05:e8:23:ac:b6:c3:
69:43:68:f2:7c:2b:5a:72:83:ce:7f:a3:26:e4:f5:22:a8:fa:
52:68:aa:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 14:50:20 2026 by rpki-client