Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3130303a3a2f34342d3434203d3e20323033333039.roa
File: 326130663a316363353a3130303a3a2f34342d3434203d3e20323033333039.roa (raw, json)
Hash identifier: rXYQYVVtgmWDfPaUCiM7ipX1LXplc+hwz6qEQDkYT/4=
Subject key identifier: C0:AB:A8:E4:EA:3D:49:68:8E:A4:6E:E9:01:F8:2F:02:3C:02:61:DB
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 27305F56185E65BB28576C1434AF20B1F007616E
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3130303a3a2f34342d3434203d3e20323033333039.roa
Signing time: Tue 18 Aug 2026 04:48:13 +0000
ROA not before: Tue 18 Aug 2026 04:43:13 +0000
ROA not after: Tue 17 Aug 2027 04:48:13 +0000
asID: 203309
IP address blocks: 2a0f:1cc5:100::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:30:5f:56:18:5e:65:bb:28:57:6c:14:34:af:20:b1:f0:07:61:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Aug 18 04:43:13 2026 GMT
Not After : Aug 17 04:48:13 2027 GMT
Subject: CN=C0ABA8E4EA3D49688EA46EE901F82F023C0261DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:80:c9:db:56:b4:0d:ff:60:95:13:c5:81:af:
c2:ac:38:33:66:69:15:4d:9a:ba:5f:76:0f:53:a0:
fc:eb:fc:9e:bb:21:8a:d3:1f:f7:17:48:87:cc:5d:
ad:a7:92:b5:1c:f2:3a:52:40:1c:be:a1:36:be:05:
d9:97:e1:bd:5f:5c:9e:51:40:72:a4:e5:0d:5a:99:
53:1b:27:6d:6d:45:94:bc:27:94:31:78:80:ad:77:
77:f4:97:b6:ef:b7:e3:57:6a:7a:07:a8:87:8e:5a:
94:db:13:cd:36:bb:6f:47:cc:7f:a0:7e:45:e2:1b:
7f:33:3b:6a:18:22:e6:f3:93:bf:ee:4a:ae:b7:a8:
d8:69:e9:f2:89:b0:2a:e9:23:7d:93:7f:d3:1b:8c:
21:30:63:ca:dc:59:ef:8f:74:23:17:d3:a3:69:5e:
63:bf:db:4d:95:f2:4b:87:06:f0:ff:55:ac:f6:6b:
f4:80:bc:4d:ce:1a:fa:41:b4:57:7f:e0:02:66:8d:
85:fa:34:bb:31:24:e7:db:3b:d0:ab:48:3b:a3:e2:
c5:dd:c5:b9:86:95:24:8c:89:96:8c:44:0b:76:b3:
fd:ee:bb:3f:80:ce:f4:88:22:3f:68:b6:f2:4c:6c:
1f:04:99:2d:1b:70:33:05:38:f3:0f:cb:ed:08:9b:
61:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AB:A8:E4:EA:3D:49:68:8E:A4:6E:E9:01:F8:2F:02:3C:02:61:DB
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3130303a3a2f34342d3434203d3e20323033333039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:100::/44
Signature Algorithm: sha256WithRSAEncryption
18:3d:70:c7:2c:5f:30:da:ac:ed:5f:6a:e1:29:b1:6c:20:e4:
ef:41:1f:4a:fb:78:6e:57:8c:95:eb:7c:f6:2f:24:c7:e9:3b:
ce:7d:42:5a:96:ca:a4:87:9b:25:7e:86:5a:14:5c:53:41:b6:
ab:08:d5:05:db:7e:46:51:78:59:97:7c:c7:3b:ff:50:ed:b8:
fd:3d:fc:bc:41:3c:36:49:84:2d:b5:97:30:5a:e1:6b:53:78:
b5:7e:20:45:4d:8c:77:dd:ef:cb:a4:52:a1:22:e6:59:70:4b:
da:dd:06:9d:70:8e:b7:f8:68:3b:e6:03:12:1e:7b:3c:e0:04:
d8:fb:1c:28:58:12:08:fa:f1:b1:d6:44:3a:bf:93:c8:61:c1:
64:14:e1:fa:b1:9f:ac:a0:03:7e:45:8f:b8:88:f4:f7:99:df:
86:f7:69:d6:57:f5:cc:e6:6b:c9:12:f0:66:c6:cc:35:0e:5b:
fd:cf:93:1d:36:91:9c:fc:ff:36:cb:5f:d3:96:68:1c:b1:dc:
8d:c0:18:51:31:bd:bf:4c:f3:58:94:70:be:d4:45:8a:05:a6:
c2:38:8d:61:11:bc:ff:bd:8b:9d:d9:47:1a:b9:b1:cf:85:68:
19:be:4c:dc:d1:b8:8e:93:14:20:ab:4d:74:d7:d6:bd:3a:ab:
38:0f:2c:49
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUJzBfVhheZbsoV2wUNK8gsfAHYW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWJlMjQwMDIxYTI4N2YyOTg5NzNkOWVhMjhkZmM4MDcz
NWZkNTgwMDAeFw0yNjA4MTgwNDQzMTNaFw0yNzA4MTcwNDQ4MTNaMDMxMTAvBgNV
BAMTKEMwQUJBOEU0RUEzRDQ5Njg4RUE0NkVFOTAxRjgyRjAyM0MwMjYxREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCogMnbVrQN/2CVE8WBr8KsODNm
aRVNmrpfdg9ToPzr/J67IYrTH/cXSIfMXa2nkrUc8jpSQBy+oTa+BdmX4b1fXJ5R
QHKk5Q1amVMbJ21tRZS8J5QxeICtd3f0l7bvt+NXanoHqIeOWpTbE802u29HzH+g
fkXiG38zO2oYIubzk7/uSq63qNhp6fKJsCrpI32Tf9MbjCEwY8rcWe+PdCMX06Np
XmO/202V8kuHBvD/Vaz2a/SAvE3OGvpBtFd/4AJmjYX6NLsxJOfbO9CrSDuj4sXd
xbmGlSSMiZaMRAt2s/3uuz+AzvSIIj9otvJMbB8EmS0bcDMFOPMPy+0Im2F3AgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUwKuo5Oo9SWiOpG7pAfgvAjwCYdswHwYDVR0j
BBgwFoAUG+JAAhoofymJc9nqKN/IBzX9WAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0
ZjBlLzAvMUJFMjQwMDIxQTI4N0YyOTg5NzNEOUVBMjhERkM4MDczNUZENTgwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ctSkFBaG9vZnltSmM5bnFLTl9JQnpY
OVdBQS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt
M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzM1
M2EzMTMwMzAzYTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMjMwMzMzMzMwMzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwQqDxzFAQAwDQYJKoZIhvcNAQELBQADggEBABg9cMcsXzDarO1fauEp
sWwg5O9BH0r7eG5XjJXrfPYvJMfpO859QlqWyqSHmyV+hloUXFNBtqsI1QXbfkZR
eFmXfMc7/1DtuP09/LxBPDZJhC21lzBa4WtTeLV+IEVNjHfd78ukUqEi5llwS9rd
Bp1wjrf4aDvmAxIeezzgBNj7HChYEgj68bHWRDq/k8hhwWQU4fqxn6ygA35Fj7iI
9PeZ34b3adZX9czma8kS8GbGzDUOW/3Pkx02kZz8/zbLX9OWaByx3I3AGFExvb9M
81iUcL7URYoFpsI4jWERvP+9i53ZRxq5sc+FaBm+TNzRuI6TFCCrTXTX1r06qzgP
LEk=
-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:35 2026 by rpki-client