Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363343a3a2f33322d3438203d3e20323134373230.roa
File: 326130663a316363343a3a2f33322d3438203d3e20323134373230.roa (raw, json)
Hash identifier: Kqfy8JUD4ihT2o93Zs14Zi43HlenrEH9TfF+erj8QzQ=
Subject key identifier: A8:8A:F2:46:E2:22:85:72:23:47:11:84:B5:AF:6E:C8:35:C8:58:56
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 34CB795CD591020DFE9B233E25F3F9C92E867FF5
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363343a3a2f33322d3438203d3e20323134373230.roa
Signing time: Tue 02 Jun 2026 12:18:25 +0000
ROA not before: Tue 02 Jun 2026 12:13:25 +0000
ROA not after: Tue 01 Jun 2027 12:18:25 +0000
asID: 214720
IP address blocks: 2a0f:1cc4::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:cb:79:5c:d5:91:02:0d:fe:9b:23:3e:25:f3:f9:c9:2e:86:7f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jun 2 12:13:25 2026 GMT
Not After : Jun 1 12:18:25 2027 GMT
Subject: CN=A88AF246E222857223471184B5AF6EC835C85856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:02:84:da:27:a4:f2:77:40:35:52:6d:79:
e8:e3:20:61:8c:d4:5d:2f:48:66:93:c9:eb:46:21:
96:37:c8:e3:ba:80:ce:2d:86:32:a9:94:7d:05:9f:
bf:e3:4c:2f:3c:9c:e4:4a:e1:7d:22:13:b7:5a:c2:
bb:26:15:c5:70:18:3b:01:eb:6e:d8:2f:ee:fb:ec:
13:82:e9:b3:dc:ce:10:bd:60:b2:d6:5a:bc:2f:b6:
15:35:f6:83:fe:5b:72:17:3f:79:ed:a7:a7:8c:b3:
31:75:43:f9:df:de:6b:99:0e:0f:a6:82:61:37:e6:
fe:8e:92:55:33:39:35:19:4d:52:a2:de:ca:78:90:
44:e1:e7:9f:51:74:8c:50:8e:72:b5:dc:8d:b0:ec:
04:3f:00:83:95:08:c3:39:09:90:d3:4f:e9:55:0c:
db:e5:85:e8:99:c7:52:21:be:ef:4a:ba:9b:e1:27:
8e:16:cb:e1:03:9e:49:12:28:91:4c:fc:96:d3:d0:
8e:11:c9:12:86:88:01:d6:6e:24:44:3c:cd:3b:2a:
9b:9b:c0:74:40:f4:20:bf:43:23:89:7f:80:db:d8:
38:8c:45:e7:59:96:60:a0:34:22:ff:c8:01:5b:97:
8c:38:bf:52:d8:b7:ad:ce:70:2b:41:55:ad:36:31:
78:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8A:F2:46:E2:22:85:72:23:47:11:84:B5:AF:6E:C8:35:C8:58:56
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363343a3a2f33322d3438203d3e20323134373230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc4::/32
Signature Algorithm: sha256WithRSAEncryption
71:90:57:02:d4:af:af:17:a6:4f:28:3b:d2:34:7b:02:e6:18:
a1:b7:f6:a4:b0:66:cd:ef:ba:21:71:54:d6:3e:9d:07:1e:3b:
4a:d9:5f:ae:ed:65:be:a6:8c:70:76:fe:4b:a5:20:9b:52:07:
66:97:f8:0d:0e:6c:1f:88:32:f2:8c:c1:2c:a7:98:e6:d9:d1:
bc:65:c0:b8:72:47:1e:9a:2d:ce:4d:1a:6a:dc:f2:78:1c:77:
4b:a7:11:2e:0b:a2:14:6d:02:4e:2b:d4:5b:e2:40:4d:cb:86:
4d:ba:42:5a:fe:83:58:47:19:67:94:68:12:d5:87:4f:8c:c1:
50:67:76:f4:a1:1f:bd:8e:cf:30:97:f5:ad:41:f9:4b:8d:1b:
ee:d9:30:d4:b5:49:ac:2d:9b:68:86:09:76:90:e4:19:ca:f9:
22:9a:b9:a6:b5:26:6f:10:2c:20:b8:cd:95:b4:63:49:10:eb:
d7:55:47:90:22:2b:82:a3:eb:8c:7e:2c:d5:cf:3f:79:45:61:
ec:64:54:50:96:34:9e:9e:a3:e8:20:1f:cc:6d:dd:54:e1:80:
5b:37:ad:bf:41:35:44:f7:3f:8b:0d:a3:cd:d4:dd:5d:4f:b3:
cd:fa:af:77:5b:01:e6:49:d6:66:f2:be:63:c7:62:6b:e5:43:
6a:d3:13:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:12:07 2026 by rpki-client