Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a323030303a3a2f34302d3430203d3e20323133383736.roa
File: 326130663a316363353a323030303a3a2f34302d3430203d3e20323133383736.roa (raw, json)
Hash identifier: U6gxvXpYntPPwbbJxuf0c9j8KOAbAa1GAwKCKHMtbfI=
Subject key identifier: AD:FC:EA:94:10:78:87:04:3B:D6:86:01:E9:D6:40:ED:34:7D:5B:DA
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 2290A8C29DE6B292728BC26327676DB3C806632F
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a323030303a3a2f34302d3430203d3e20323133383736.roa
Signing time: Tue 18 Aug 2026 03:48:50 +0000
ROA not before: Tue 18 Aug 2026 03:43:50 +0000
ROA not after: Tue 17 Aug 2027 03:48:50 +0000
asID: 213876
IP address blocks: 2a0f:1cc5:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:90:a8:c2:9d:e6:b2:92:72:8b:c2:63:27:67:6d:b3:c8:06:63:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Aug 18 03:43:50 2026 GMT
Not After : Aug 17 03:48:50 2027 GMT
Subject: CN=ADFCEA94107887043BD68601E9D640ED347D5BDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:30:c4:34:8a:af:90:1f:97:35:01:4f:55:c0:
2b:e5:ef:a9:ff:d3:87:83:15:b5:11:1b:a9:6c:b6:
63:ea:bd:1c:7f:17:ca:cb:47:ca:b2:7a:5d:ba:11:
f8:8d:2a:b7:e5:29:77:95:e1:f1:1b:4d:b3:4f:04:
3a:6c:05:69:04:57:a7:8f:79:5f:f7:9d:6b:5a:61:
79:1a:77:78:e0:00:5a:3d:bb:39:e2:2f:fc:c6:ba:
42:63:66:51:a7:17:43:70:05:fd:d9:fc:92:f2:ed:
43:90:95:73:89:8e:d3:db:99:ac:71:11:ca:2d:4f:
dd:96:9d:4a:03:5c:8d:3c:39:36:65:66:e6:2d:40:
a7:3b:9b:99:85:62:86:32:1e:3c:2c:bf:80:de:f4:
07:5d:c2:56:29:23:91:15:52:64:6b:34:c5:9d:32:
7a:8b:ef:8c:7d:b0:d8:9e:14:ca:99:83:4e:bf:b2:
58:bc:0e:f1:b1:14:b0:ae:f9:90:f5:7d:76:cf:a4:
fa:b4:4d:ee:dd:1a:74:ba:2e:9b:2e:25:60:bb:03:
f3:06:5b:ca:f6:cc:37:46:68:28:63:9e:10:9a:53:
ab:47:4b:b8:78:a1:67:1e:51:21:45:88:0f:3d:37:
dd:67:fe:d3:23:a9:78:1d:71:27:40:5c:eb:76:04:
92:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FC:EA:94:10:78:87:04:3B:D6:86:01:E9:D6:40:ED:34:7D:5B:DA
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a323030303a3a2f34302d3430203d3e20323133383736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:2000::/40
Signature Algorithm: sha256WithRSAEncryption
68:cb:43:eb:38:e6:fd:ea:7c:08:87:b1:2f:99:c5:eb:71:d3:
4a:ea:09:cf:ae:b0:63:ea:18:76:f7:8a:c6:80:65:a0:1a:51:
4f:63:7c:6a:50:d8:dd:01:04:5b:f4:f1:30:36:05:e3:1a:40:
86:14:2f:da:a4:41:8d:10:21:4f:41:cc:35:cf:35:b2:8f:ce:
30:36:c3:9d:d5:06:20:2b:b4:97:93:9e:e2:79:97:ce:4c:6a:
e2:e5:38:85:09:e9:67:b4:2a:73:8d:87:d6:f7:ac:f0:ef:0b:
b8:ac:a3:8b:e7:55:0c:0e:ab:45:0d:55:a4:89:52:da:57:27:
a6:7d:72:2b:38:0a:e7:74:c6:35:0f:ee:f7:1a:9c:c4:de:b5:
6e:50:54:7d:38:45:e1:3c:e4:40:dc:eb:c9:ab:43:7d:d1:58:
84:42:8c:02:d7:e2:2a:0f:7e:ce:35:03:36:ee:37:03:7c:61:
5a:26:1f:7b:63:a7:27:1d:93:37:1c:03:cf:5f:38:c3:01:c9:
a6:76:11:78:13:76:66:12:65:3d:07:0c:1d:fd:17:90:7f:dd:
66:d2:55:d9:55:12:fc:4e:f4:14:43:c2:d2:c7:00:b8:7c:03:
ec:f1:21:78:a0:d6:12:86:18:eb:cf:ab:91:cf:4d:59:70:ee:
97:d9:39:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:36 2026 by rpki-client