Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/323030313a346365383a3a2f33322d3332203d3e20323530.roa
File: 323030313a346365383a3a2f33322d3332203d3e20323530.roa (raw, json)
Hash identifier: S6zvsTSnybC5v19XM+wBc97Rf5SG4IRKmCl8ae093X0=
Subject key identifier: 49:92:89:48:5B:41:49:52:8F:25:83:13:77:F7:94:93:BC:BC:9B:CF
Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724
Certificate serial: 04478FE4149F5C058EE4B0A3FAC709663887A840
Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/323030313a346365383a3a2f33322d3332203d3e20323530.roa
Signing time: Fri 31 Jul 2026 08:49:16 +0000
ROA not before: Fri 31 Jul 2026 08:44:16 +0000
ROA not after: Fri 30 Jul 2027 08:49:16 +0000
asID: 250
IP address blocks: 2001:4ce8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 18:46:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:47:8f:e4:14:9f:5c:05:8e:e4:b0:a3:fa:c7:09:66:38:87:a8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724
Validity
Not Before: Jul 31 08:44:16 2026 GMT
Not After : Jul 30 08:49:16 2027 GMT
Subject: CN=499289485B4149528F25831377F79493BCBC9BCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:d3:ee:27:3f:66:76:e5:20:24:44:1a:64:
45:7e:70:19:bc:b1:ac:94:3d:4e:47:ef:67:2a:9a:
18:93:c4:d1:8b:26:4f:0a:c3:52:35:f4:7c:13:f0:
4c:86:ad:75:7c:f0:94:f3:61:fc:39:a1:a9:d5:b0:
5f:c5:ea:9b:22:ae:ea:b5:28:fb:66:9d:b2:1d:ff:
49:e0:fa:fe:b6:3f:d7:8e:f5:48:1f:ae:b0:26:6e:
0e:28:96:6a:85:df:8f:85:05:04:9f:e6:58:1a:30:
c8:12:86:56:8f:69:c8:5c:63:14:d7:93:a8:8c:5f:
b6:83:b3:9e:e2:7e:b8:34:69:8c:eb:3c:14:a0:31:
62:03:58:4f:7f:0f:b4:72:5e:c4:2d:62:75:83:8e:
6b:4f:6d:f0:32:b8:78:31:51:3a:95:f7:e9:d2:1d:
38:69:9f:d9:65:ca:93:0f:4b:ce:53:d5:ab:cd:64:
9f:ef:8d:8e:d8:f8:dc:ba:2d:45:05:c8:ba:c3:ce:
1d:1c:28:99:91:62:d2:b7:87:f8:d1:c7:3c:0b:a0:
80:1e:75:ff:52:86:77:b4:a1:e8:2d:12:b3:76:9b:
8c:c6:f6:26:44:58:6e:88:d8:32:57:0f:7c:16:7f:
f4:29:95:4a:02:7d:60:ef:7a:5d:75:88:53:69:fa:
42:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:92:89:48:5B:41:49:52:8F:25:83:13:77:F7:94:93:BC:BC:9B:CF
X509v3 Authority Key Identifier:
keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/323030313a346365383a3a2f33322d3332203d3e20323530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4ce8::/32
Signature Algorithm: sha256WithRSAEncryption
6d:96:38:51:3b:53:37:2e:6d:bc:a3:c9:a4:59:41:00:e3:f5:
cf:a6:c2:73:4a:36:70:90:d5:77:b3:85:1f:d4:fb:c7:42:dc:
60:8b:20:1c:3c:2e:56:7f:62:86:19:bd:44:49:8b:63:a3:4d:
44:51:62:97:1c:7d:a0:37:be:a6:30:72:39:2e:cc:48:a3:1f:
69:97:1c:6f:ca:0c:fc:d5:43:71:38:9b:5a:d9:63:88:01:c0:
a1:ac:f5:df:b0:fb:3b:88:9d:d5:e1:dc:45:27:0d:67:77:ee:
dc:16:fc:09:4a:ab:b0:57:da:55:e2:32:47:5f:b9:b8:3c:d7:
bb:5f:7e:8d:da:00:84:4c:a9:8f:a3:20:d0:69:89:2e:3e:fe:
ed:bd:b2:e5:dd:02:1d:1c:65:86:4d:c4:51:af:27:5e:b0:68:
20:9b:87:f4:21:62:37:5a:0f:ff:db:e9:e9:67:ab:33:82:e2:
72:aa:29:fb:7b:2a:89:69:c7:f5:0a:33:1e:39:c8:0d:99:bc:
52:5e:e2:fe:e2:5e:3d:c8:4b:47:44:f3:98:3b:fe:c7:ba:18:
c6:03:d1:83:cf:a1:a9:1a:73:b8:c4:16:8a:48:b6:12:61:f3:
26:d1:e6:e8:16:08:b5:a3:2e:00:ca:dc:b3:4b:d3:58:7e:3a:
ff:79:19:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 02:49:53 2026 by rpki-client