Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a313230303a3a2f34302d3438203d3e20323032373334.roa
File: 326130663a316363353a313230303a3a2f34302d3438203d3e20323032373334.roa (raw, json)
Hash identifier: pVqt3lwuwVUgCs4+Ou/gKdcGD3G1AaApEdgRprrI2UE=
Subject key identifier: 6F:8D:92:83:82:5B:1E:1C:36:2F:39:C8:0C:29:43:94:F4:62:FD:3E
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 380FA29F87897200084AFF40BEF5798FBE1765F0
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a313230303a3a2f34302d3438203d3e20323032373334.roa
Signing time: Tue 02 Jun 2026 12:18:20 +0000
ROA not before: Tue 02 Jun 2026 12:13:20 +0000
ROA not after: Tue 01 Jun 2027 12:18:20 +0000
asID: 202734
IP address blocks: 2a0f:1cc5:1200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:0f:a2:9f:87:89:72:00:08:4a:ff:40:be:f5:79:8f:be:17:65:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jun 2 12:13:20 2026 GMT
Not After : Jun 1 12:18:20 2027 GMT
Subject: CN=6F8D9283825B1E1C362F39C80C294394F462FD3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:81:23:3d:50:cc:74:f3:bd:ff:72:fb:75:1e:
f9:69:88:b4:d7:85:9a:e9:3f:47:41:89:67:88:1b:
6d:c6:82:78:e1:43:2f:e3:f6:2e:e9:36:7c:05:a5:
87:29:96:16:b4:04:19:48:c4:c2:09:f1:2f:d3:93:
48:f5:76:c7:57:d4:ee:5b:73:cb:98:90:ff:f8:c6:
c4:65:98:6c:82:23:e1:fc:a0:55:5f:ff:b1:c0:7b:
ad:06:13:cb:36:a8:0a:5b:94:2f:a5:d3:99:37:cd:
d0:f8:47:b1:01:1a:ec:68:2a:4d:22:3b:36:73:40:
28:a5:be:a4:8d:06:4f:7d:83:60:30:8c:b1:52:2c:
c9:d8:42:96:c8:3d:37:14:36:c0:e1:9b:2f:49:7b:
c3:99:67:50:c0:8a:75:d4:c4:32:79:cf:9a:99:fb:
dd:3f:00:94:20:65:99:37:fb:71:e5:58:a2:3a:5e:
79:a8:b9:97:20:74:73:1a:12:c2:e3:c1:dd:09:25:
cc:40:4d:ea:a9:03:42:76:67:5f:00:9b:08:05:af:
fa:fe:a9:12:f8:b7:77:d7:b8:93:a9:96:71:fd:a4:
62:b7:79:ac:47:0c:5e:24:93:be:0c:d5:f2:41:a9:
61:f9:0f:47:33:f5:42:7a:c6:b3:0b:81:cf:55:d9:
73:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8D:92:83:82:5B:1E:1C:36:2F:39:C8:0C:29:43:94:F4:62:FD:3E
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a313230303a3a2f34302d3438203d3e20323032373334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:1200::/40
Signature Algorithm: sha256WithRSAEncryption
57:94:f3:fa:da:44:0d:b0:be:61:a8:71:5b:e8:40:47:63:13:
ed:23:39:14:34:98:d6:9c:87:28:a8:64:ce:86:25:6b:81:dc:
d1:82:69:e0:75:78:fe:12:e8:54:4f:30:a0:71:a4:35:44:8a:
78:56:2c:7c:b5:79:56:35:af:e9:33:5d:ba:dc:80:b8:5d:92:
39:ff:a3:a3:22:50:83:46:ae:27:30:4d:d7:67:1a:59:11:ec:
79:aa:22:cc:10:df:3f:68:d4:97:71:b2:73:77:76:c3:81:1a:
db:57:5d:59:ba:b2:f6:ad:46:af:af:a8:3b:1b:a3:b5:33:cd:
d0:f4:08:9c:49:bc:3b:38:3d:86:4d:b8:81:c9:63:42:8d:05:
3a:17:b9:18:25:c9:74:64:8e:59:71:b6:26:36:59:bf:cb:d6:
a0:dc:ee:22:2d:91:7c:04:e3:5c:27:c4:45:b5:39:ff:0d:f3:
76:ba:99:bf:4a:73:e4:52:7f:dd:78:b3:b7:33:94:4e:00:21:
d7:e3:53:ce:50:7d:09:fb:1c:00:6a:22:48:f4:51:b3:26:0b:
fc:7f:40:e4:07:cd:42:3c:55:ab:a6:da:0e:15:bd:be:6c:b8:
ea:92:b6:96:14:80:2b:8f:bd:56:e2:ab:da:bd:bd:11:cf:94:
cb:fc:bb:c8
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUOA+in4eJcgAISv9AvvV5j74XZfAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWJlMjQwMDIxYTI4N2YyOTg5NzNkOWVhMjhkZmM4MDcz
NWZkNTgwMDAeFw0yNjA2MDIxMjEzMjBaFw0yNzA2MDExMjE4MjBaMDMxMTAvBgNV
BAMTKDZGOEQ5MjgzODI1QjFFMUMzNjJGMzlDODBDMjk0Mzk0RjQ2MkZEM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwgSM9UMx0873/cvt1HvlpiLTX
hZrpP0dBiWeIG23GgnjhQy/j9i7pNnwFpYcplha0BBlIxMIJ8S/Tk0j1dsdX1O5b
c8uYkP/4xsRlmGyCI+H8oFVf/7HAe60GE8s2qApblC+l05k3zdD4R7EBGuxoKk0i
OzZzQCilvqSNBk99g2AwjLFSLMnYQpbIPTcUNsDhmy9Je8OZZ1DAinXUxDJ5z5qZ
+90/AJQgZZk3+3HlWKI6XnmouZcgdHMaEsLjwd0JJcxATeqpA0J2Z18AmwgFr/r+
qRL4t3fXuJOplnH9pGK3eaxHDF4kk74M1fJBqWH5D0cz9UJ6xrMLgc9V2XOxAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUb42Sg4JbHhw2LznIDClDlPRi/T4wHwYDVR0j
BBgwFoAUG+JAAhoofymJc9nqKN/IBzX9WAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0
ZjBlLzAvMUJFMjQwMDIxQTI4N0YyOTg5NzNEOUVBMjhERkM4MDczNUZENTgwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ctSkFBaG9vZnltSmM5bnFLTl9JQnpY
OVdBQS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt
M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzM1
M2EzMTMyMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzMjM3MzMzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoPHMUSMA0GCSqGSIb3DQEBCwUAA4IBAQBXlPP62kQNsL5hqHFb
6EBHYxPtIzkUNJjWnIcoqGTOhiVrgdzRgmngdXj+EuhUTzCgcaQ1RIp4Vix8tXlW
Na/pM1263IC4XZI5/6OjIlCDRq4nME3XZxpZEex5qiLMEN8/aNSXcbJzd3bDgRrb
V11ZurL2rUavr6g7G6O1M83Q9AicSbw7OD2GTbiByWNCjQU6F7kYJcl0ZI5ZcbYm
Nlm/y9ag3O4iLZF8BONcJ8RFtTn/DfN2upm/SnPkUn/deLO3M5ROACHX41POUH0J
+xwAaiJI9FGzJgv8f0DkB81CPFWrptoOFb2+bLjqkraWFIArj71W4qvavb0Rz5TL
/LvI
-----END CERTIFICATE-----
Generated at Thu Jun 4 03:23:43 2026 by rpki-client