Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a316630303a3a2f34302d3438203d3e20323132353332.roa
File: 326130663a316363353a316630303a3a2f34302d3438203d3e20323132353332.roa (raw, json)
Hash identifier: BOl58h5yHtnwjNL+Z2DZaPnlRYa9Q+XsxVD8VDT4f54=
Subject key identifier: EE:A9:28:AC:14:18:4A:5B:B0:20:72:B0:4A:F3:B3:C0:12:64:0C:16
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 5FCBD8AE62D6C7F44FC3412FD50983F4566F7E0A
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a316630303a3a2f34302d3438203d3e20323132353332.roa
Signing time: Tue 02 Jun 2026 12:18:20 +0000
ROA not before: Tue 02 Jun 2026 12:13:20 +0000
ROA not after: Tue 01 Jun 2027 12:18:20 +0000
asID: 212532
IP address blocks: 2a0f:1cc5:1f00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:cb:d8:ae:62:d6:c7:f4:4f:c3:41:2f:d5:09:83:f4:56:6f:7e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jun 2 12:13:20 2026 GMT
Not After : Jun 1 12:18:20 2027 GMT
Subject: CN=EEA928AC14184A5BB02072B04AF3B3C012640C16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1c:b6:d1:f3:4f:d2:1d:ec:8c:98:83:d6:57:
9e:a7:c0:db:51:5d:b5:2f:7a:8e:02:a7:69:ea:73:
41:68:76:3a:64:42:17:73:2b:86:4b:d9:4d:a3:aa:
5e:ee:ee:bb:d0:0f:99:a4:da:ef:65:ff:c1:21:b8:
a2:7e:23:a5:2f:43:85:e2:aa:d0:5a:7c:2a:b3:27:
9d:03:aa:ed:53:ad:da:95:9c:14:85:fb:1f:c3:e2:
df:eb:d4:8a:f2:77:16:ed:59:e6:91:41:9f:1c:64:
14:bf:90:64:73:f9:4c:80:c4:cb:3a:22:b8:d2:cd:
c6:54:14:21:33:ed:55:3b:6f:e9:02:f5:7e:7c:61:
63:cd:13:93:7c:b9:54:68:ba:26:8a:4c:cd:71:6d:
48:47:ac:a2:1e:d1:f1:1a:3d:c3:83:a4:a6:bd:df:
6d:9a:96:b9:c1:03:5e:59:9d:40:4e:1a:47:3b:5b:
21:1b:17:74:dc:59:29:55:7f:42:2e:92:b4:ae:5b:
c6:ed:d7:b0:24:f0:25:3e:31:54:f9:02:3b:48:22:
11:9b:eb:ee:0f:f6:95:6f:3d:25:c2:4e:14:fa:65:
1c:5f:0e:4a:4a:d3:34:ac:bd:ce:7f:c6:5e:43:c0:
d8:fc:86:1b:fd:41:73:d7:fb:38:10:65:66:02:da:
87:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A9:28:AC:14:18:4A:5B:B0:20:72:B0:4A:F3:B3:C0:12:64:0C:16
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a316630303a3a2f34302d3438203d3e20323132353332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:1f00::/40
Signature Algorithm: sha256WithRSAEncryption
6b:03:b5:9f:ed:f0:82:9b:dd:1a:dd:0e:73:e3:fb:08:4d:7c:
d2:0a:03:43:15:6b:25:07:be:58:6c:38:48:3f:0a:28:7c:ae:
21:9f:99:4e:5a:7d:a3:1b:37:d9:92:9d:5c:f4:e6:5d:ad:8b:
ae:15:99:6e:43:43:56:6b:6c:3f:5d:a4:e8:4a:40:a1:ee:07:
90:8e:bb:1c:cf:d9:96:27:af:59:a8:5f:47:58:98:0a:6f:c0:
ac:ab:0a:c7:31:83:83:44:0d:4d:bf:db:e3:2b:0c:bf:7e:33:
9b:fe:8f:35:0a:fb:77:85:20:dc:5c:50:ef:ae:d9:49:da:d4:
75:5e:9b:0f:a3:ef:ae:51:47:d5:f8:7c:2c:a1:00:a0:fa:79:
2a:6c:13:0e:a8:c8:f9:fc:40:8d:a2:a7:68:98:e6:48:e3:12:
f2:b5:ed:46:eb:2e:c6:72:70:04:c8:53:93:44:62:7e:0d:2c:
7f:80:40:42:00:a2:9c:43:6a:8e:07:84:b1:89:05:d1:3f:ae:
dd:30:8f:d1:6d:88:36:66:72:0f:c1:d0:83:63:b7:c5:1c:35:
5f:e8:4c:29:64:71:c5:72:72:cb:9e:cb:2c:66:82:d1:ba:99:
6d:34:ce:c2:42:9c:1f:58:e0:10:fe:1e:a0:56:f1:18:89:07:
37:b3:95:f8
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUX8vYrmLWx/RPw0Ev1QmD9FZvfgowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWJlMjQwMDIxYTI4N2YyOTg5NzNkOWVhMjhkZmM4MDcz
NWZkNTgwMDAeFw0yNjA2MDIxMjEzMjBaFw0yNzA2MDExMjE4MjBaMDMxMTAvBgNV
BAMTKEVFQTkyOEFDMTQxODRBNUJCMDIwNzJCMDRBRjNCM0MwMTI2NDBDMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2HLbR80/SHeyMmIPWV56nwNtR
XbUveo4Cp2nqc0FodjpkQhdzK4ZL2U2jql7u7rvQD5mk2u9l/8EhuKJ+I6UvQ4Xi
qtBafCqzJ50Dqu1TrdqVnBSF+x/D4t/r1IrydxbtWeaRQZ8cZBS/kGRz+UyAxMs6
IrjSzcZUFCEz7VU7b+kC9X58YWPNE5N8uVRouiaKTM1xbUhHrKIe0fEaPcODpKa9
322alrnBA15ZnUBOGkc7WyEbF3TcWSlVf0IukrSuW8bt17Ak8CU+MVT5AjtIIhGb
6+4P9pVvPSXCThT6ZRxfDkpK0zSsvc5/xl5DwNj8hhv9QXPX+zgQZWYC2odbAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQU7qkorBQYSluwIHKwSvOzwBJkDBYwHwYDVR0j
BBgwFoAUG+JAAhoofymJc9nqKN/IBzX9WAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0
ZjBlLzAvMUJFMjQwMDIxQTI4N0YyOTg5NzNEOUVBMjhERkM4MDczNUZENTgwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ctSkFBaG9vZnltSmM5bnFLTl9JQnpY
OVdBQS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt
M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzM1
M2EzMTY2MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzMjM1MzMzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoPHMUfMA0GCSqGSIb3DQEBCwUAA4IBAQBrA7Wf7fCCm90a3Q5z
4/sITXzSCgNDFWslB75YbDhIPwoofK4hn5lOWn2jGzfZkp1c9OZdrYuuFZluQ0NW
a2w/XaToSkCh7geQjrscz9mWJ69ZqF9HWJgKb8CsqwrHMYODRA1Nv9vjKwy/fjOb
/o81Cvt3hSDcXFDvrtlJ2tR1XpsPo++uUUfV+HwsoQCg+nkqbBMOqMj5/ECNoqdo
mOZI4xLyte1G6y7GcnAEyFOTRGJ+DSx/gEBCAKKcQ2qOB4SxiQXRP67dMI/RbYg2
ZnIPwdCDY7fFHDVf6EwpZHHFcnLLnsssZoLRupltNM7CQpwfWOAQ/h6gVvEYiQc3
s5X4
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:46:05 2026 by rpki-client