Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363343a3a2f33322d3438203d3e20323134373230.roa
File: 326130663a316363343a3a2f33322d3438203d3e20323134373230.roa (raw, json)
Hash identifier: JDRWp+NdbNvZ84G3hsCnyIrFU/ZAqFABlRs675hwI40=
Subject key identifier: A6:94:7A:D6:23:23:B1:5F:82:CC:15:81:DF:97:45:6E:35:C2:AF:04
Certificate issuer: /CN=411e2d411d687bcb4449c3df45beedc041007d94
Certificate serial: 17DCCA3EB61F926BCB244B38D18D59D41CD605E8
Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363343a3a2f33322d3438203d3e20323134373230.roa
Signing time: Mon 20 Apr 2026 03:24:15 +0000
ROA not before: Mon 20 Apr 2026 03:19:15 +0000
ROA not after: Mon 19 Apr 2027 03:24:15 +0000
asID: 214720
IP address blocks: 2a0f:1cc4::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:dc:ca:3e:b6:1f:92:6b:cb:24:4b:38:d1:8d:59:d4:1c:d6:05:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94
Validity
Not Before: Apr 20 03:19:15 2026 GMT
Not After : Apr 19 03:24:15 2027 GMT
Subject: CN=A6947AD62323B15F82CC1581DF97456E35C2AF04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f6:e2:35:39:b2:f4:8f:75:8a:55:80:c0:61:
9a:80:66:c1:ea:61:64:b7:fe:03:91:48:bc:72:b7:
1a:06:4e:3d:16:1c:a7:17:d2:33:00:bb:4a:24:ab:
25:ab:ed:62:28:05:df:7c:7f:26:83:d3:e8:20:4a:
5d:c9:5f:e9:bb:2a:60:9b:bb:15:21:7e:a2:57:85:
ef:4d:8d:23:3c:75:1e:2d:ff:d9:52:2a:10:63:d9:
5a:16:e7:37:5e:b5:ab:d0:26:a2:0f:45:9e:90:aa:
5e:cb:ca:b8:c1:85:a5:96:c7:9b:63:fe:12:2d:60:
ea:6c:99:ad:11:9f:1f:bd:87:89:4c:4c:9f:97:a4:
c3:5c:ba:08:fd:81:69:fd:a2:ff:d7:96:b1:48:0e:
7c:22:6c:e3:a6:87:fe:f0:83:f9:47:a7:8c:78:6e:
49:fc:32:1d:91:e9:e8:25:ae:22:2f:2d:74:36:be:
41:e8:1b:a1:21:78:19:75:13:29:6b:1c:cd:04:7b:
68:2d:26:b5:5c:94:85:3f:2e:f6:9c:8f:7f:b9:c2:
fc:02:7a:76:f0:04:3c:8b:d5:25:e8:7e:ff:97:73:
3f:36:c4:d5:42:77:38:05:63:09:56:a0:89:89:26:
87:55:6a:0f:cb:f8:7a:4a:0a:f3:7a:5b:e6:5c:52:
78:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:94:7A:D6:23:23:B1:5F:82:CC:15:81:DF:97:45:6E:35:C2:AF:04
X509v3 Authority Key Identifier:
keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363343a3a2f33322d3438203d3e20323134373230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc4::/32
Signature Algorithm: sha256WithRSAEncryption
78:39:dc:7b:9c:72:92:ea:f8:ac:a2:52:80:7b:5b:18:b8:ef:
53:e4:74:59:96:b3:98:ad:94:35:6a:57:a6:e7:a3:ed:e5:2c:
01:62:87:b1:41:51:da:37:6b:1a:60:fa:73:87:89:4e:69:26:
3d:01:90:66:4a:f7:a3:e4:8d:2f:62:2c:49:35:3e:1e:a1:33:
ec:9d:e4:dd:5a:e1:ee:19:a1:89:d3:ec:f2:df:3b:1f:bd:b3:
4f:1c:c6:59:fb:b1:08:23:b6:92:ae:60:e0:1c:47:25:6b:8a:
ee:d1:29:09:82:75:b6:0f:ce:10:e8:0c:73:49:82:46:70:d2:
ff:11:11:ea:41:75:5f:11:63:76:02:1b:fc:e0:f9:d8:60:80:
ea:7a:cf:56:1a:6e:61:da:fd:83:51:ed:d9:d6:fc:82:e8:9d:
8b:78:93:ae:6b:6c:26:ae:27:5e:89:2e:eb:68:23:92:62:35:
ec:0e:d5:e0:2e:a1:16:f0:45:9b:8e:ed:8f:1c:c3:6d:5b:f6:
d8:0b:24:74:88:35:3e:bd:2b:e0:41:ac:65:cf:9c:a4:f2:0d:
fd:75:8d:01:b8:28:35:b8:ca:ff:20:85:9a:9a:dc:23:dc:55:
cc:46:6a:f6:38:01:73:bb:db:94:92:52:cb:df:29:8a:99:0f:
b8:1e:17:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:38:18 2026 by rpki-client