Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/323030313a346365383a3a2f32392d3239203d3e203539373136.roa
File: 323030313a346365383a3a2f32392d3239203d3e203539373136.roa (raw, json)
Hash identifier: kWLECgVV1VftZUfr9I58+oOD7uIghr725IwWATJehFU=
Subject key identifier: A2:58:D7:B1:70:2A:52:2D:AD:9C:5A:B4:F9:50:FD:08:5B:6F:9A:E7
Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724
Certificate serial: 5331666FA70912DE02B296C11E12B0250639B314
Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/323030313a346365383a3a2f32392d3239203d3e203539373136.roa
Signing time: Fri 31 Jul 2026 08:49:16 +0000
ROA not before: Fri 31 Jul 2026 08:44:16 +0000
ROA not after: Fri 30 Jul 2027 08:49:16 +0000
asID: 59716
IP address blocks: 2001:4ce8::/29 maxlen: 29
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 18:46:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:31:66:6f:a7:09:12:de:02:b2:96:c1:1e:12:b0:25:06:39:b3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724
Validity
Not Before: Jul 31 08:44:16 2026 GMT
Not After : Jul 30 08:49:16 2027 GMT
Subject: CN=A258D7B1702A522DAD9C5AB4F950FD085B6F9AE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:39:cb:98:98:78:19:aa:50:a7:da:87:67:
36:52:aa:11:58:e4:90:1c:b4:e3:5c:c9:d1:d0:49:
9d:8f:87:8f:c3:12:7b:57:6b:2b:cb:42:2f:f1:dc:
69:d6:3a:b6:6d:ac:99:3f:e1:7f:93:d5:7e:d8:90:
c5:2b:9b:89:f1:eb:95:9d:0a:3e:1e:87:4f:0f:95:
47:30:0a:ae:c4:37:ba:58:59:9b:d2:a1:af:fc:20:
02:16:79:a3:6c:f1:2d:cd:28:d0:98:12:db:c8:10:
ec:40:67:e7:8e:18:af:e9:6f:3d:d7:9f:26:6b:b0:
b4:27:b8:81:33:d2:db:d6:68:cc:07:c6:77:e8:fe:
3b:de:61:21:e3:57:ba:05:a0:c4:04:c3:01:90:df:
d6:5f:5c:70:a7:de:b4:8f:11:cd:03:3c:37:98:33:
28:40:8e:35:df:b9:79:a6:f1:7f:c6:fc:27:5a:2e:
b2:cd:d6:31:6a:0c:32:68:8f:27:2a:cd:62:ba:9e:
0a:22:72:77:f0:42:7c:3e:a6:98:0c:fb:42:76:fe:
e3:90:b5:ad:c6:3d:d9:4d:3d:9a:67:ef:9e:01:29:
b7:1e:02:3b:0a:bf:21:79:c9:99:1d:49:d0:94:51:
0c:52:8e:cb:2f:b8:f9:73:b8:1d:40:62:85:e3:3f:
76:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:58:D7:B1:70:2A:52:2D:AD:9C:5A:B4:F9:50:FD:08:5B:6F:9A:E7
X509v3 Authority Key Identifier:
keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/323030313a346365383a3a2f32392d3239203d3e203539373136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4ce8::/29
Signature Algorithm: sha256WithRSAEncryption
b8:90:0b:da:51:c7:a7:d6:89:62:df:b4:5c:b3:4a:51:74:95:
fe:03:df:0e:d4:32:86:a2:ef:58:0b:45:ae:ba:23:e9:c3:28:
d6:6a:61:78:d1:07:6d:53:02:00:e3:b9:74:df:12:86:30:e2:
ca:e1:53:a6:58:96:70:fc:1f:3e:30:37:9b:0a:ba:b4:d4:96:
06:47:04:8a:9c:ea:7d:d6:89:df:ef:84:29:83:8e:f1:31:f8:
31:fc:df:18:35:b8:20:8d:f2:04:4e:a1:0d:b9:1b:15:e6:f2:
17:9f:93:d3:09:9c:62:6b:13:3b:02:8c:60:09:5f:0e:57:ce:
26:07:5e:16:b3:4b:50:36:d6:cc:70:b1:7b:09:24:b2:be:08:
6f:a2:2e:00:e7:03:60:c6:41:ca:24:22:1f:a0:c9:04:08:d7:
12:f9:a8:60:67:8c:16:09:b4:fd:aa:8c:68:76:de:e6:0f:82:
45:51:0e:e7:21:0d:25:ac:66:60:9a:af:f9:27:64:0e:be:28:
2c:26:2b:f4:6e:13:c0:e7:c8:49:92:5a:db:c7:23:f4:aa:21:
81:5c:4e:fa:e4:bc:6b:3b:e4:53:99:c6:a0:2b:47:96:8f:bd:
0b:d2:7c:c8:c4:e9:24:0d:9c:aa:a9:eb:bc:90:ef:e7:c9:20:
3c:73:76:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 02:49:35 2026 by rpki-client