Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a323030303a3a2f34302d3434203d3e20323133383736.roa
File: 326130663a316363353a323030303a3a2f34302d3434203d3e20323133383736.roa (raw, json)
Hash identifier: 0EiTKcgjp2r5bJF7XUt52PxzDw2LYHjXoLHuKQ78RXI=
Subject key identifier: BD:2D:9F:5E:28:A4:DD:9A:52:73:14:3E:68:63:AE:4A:9C:51:56:FE
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 7829E625DDC9F3E9951ED59FC49E34B7B2D2B5F6
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a323030303a3a2f34302d3434203d3e20323133383736.roa
Signing time: Tue 18 Aug 2026 03:59:12 +0000
ROA not before: Tue 18 Aug 2026 03:54:12 +0000
ROA not after: Tue 17 Aug 2027 03:59:12 +0000
asID: 213876
IP address blocks: 2a0f:1cc5:2000::/40 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:29:e6:25:dd:c9:f3:e9:95:1e:d5:9f:c4:9e:34:b7:b2:d2:b5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Aug 18 03:54:12 2026 GMT
Not After : Aug 17 03:59:12 2027 GMT
Subject: CN=BD2D9F5E28A4DD9A5273143E6863AE4A9C5156FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d9:e5:ce:f1:bf:d1:22:9b:24:3f:66:be:5d:
30:96:e6:19:24:5b:2f:f0:83:d2:39:ba:08:e9:d4:
03:81:70:fc:61:a2:2a:e1:66:d8:2a:47:4a:b4:69:
6a:6b:de:cb:af:62:91:7b:80:5c:e9:ef:05:44:aa:
c1:80:b6:00:eb:c3:1a:de:15:f6:25:6b:df:c3:d4:
24:8c:03:8c:3a:7f:ce:e2:b3:93:a4:d1:96:70:26:
cd:ad:90:d5:16:a5:8e:ef:0a:7f:b9:c4:5e:cd:d0:
93:61:65:83:7c:a7:bc:3c:96:c2:0f:1f:8b:ad:54:
f4:4b:31:35:28:04:59:3e:fa:df:a8:a7:1e:1c:55:
ae:cc:52:ec:12:35:bb:3d:30:cd:4a:ed:05:0f:f5:
02:12:35:1a:96:9c:ab:a8:31:9e:eb:54:5e:0a:03:
2d:ed:3b:3f:58:33:6e:83:4b:64:e7:01:4f:c3:3b:
eb:ce:ff:be:3a:88:61:f5:6c:6d:0d:75:1d:a3:fb:
69:87:3d:c5:0a:2c:d9:2c:72:44:9a:08:87:e5:0c:
4d:09:7c:c5:61:c8:59:f3:91:4d:1e:ac:93:71:ee:
59:a1:f2:6b:1d:a0:15:9e:aa:0a:96:7b:b4:52:a1:
e2:4a:b4:4e:75:92:30:50:4e:43:32:de:40:b4:f6:
01:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2D:9F:5E:28:A4:DD:9A:52:73:14:3E:68:63:AE:4A:9C:51:56:FE
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a323030303a3a2f34302d3434203d3e20323133383736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:2000::/40
Signature Algorithm: sha256WithRSAEncryption
80:e9:09:ab:6a:f6:17:d9:23:83:fb:d5:02:dc:56:f0:4f:b8:
57:7a:d5:0b:d3:ca:fb:71:bc:b0:bd:16:9e:48:1b:28:c0:a7:
3b:7e:8a:b2:86:36:36:84:37:34:50:d7:aa:22:42:52:ff:31:
ef:cc:88:bb:ff:75:a8:9b:8c:c4:fe:43:2f:8a:58:9f:2f:63:
0c:7d:cc:f9:23:cd:9b:b2:5f:12:7a:bf:4c:8e:1f:09:41:00:
1e:ab:97:06:3c:72:0d:64:60:48:26:f5:b4:af:5f:56:24:d5:
52:35:e1:cd:86:24:b5:0d:9e:a8:ea:b9:ef:ac:1f:9c:59:28:
d0:86:52:ed:18:5a:bf:f5:a5:d1:66:65:12:71:2a:01:b4:f1:
e5:44:77:03:ac:cf:86:0b:18:01:4a:5a:c2:84:15:40:da:47:
11:70:9e:96:b9:03:59:98:0a:f4:4e:d3:a3:f9:9e:ed:56:00:
4e:80:7a:9d:09:36:4d:de:23:df:85:e3:65:b8:77:32:39:7c:
aa:7c:3d:58:bf:90:d9:0a:9b:10:ec:b1:82:8c:e2:5a:c0:a1:
1c:f7:c0:db:cf:45:9c:a8:ca:60:76:f2:97:ec:9f:d1:82:bf:
78:ef:72:79:c5:35:79:45:7b:a0:39:64:20:38:bb:25:b1:7f:
80:bb:d1:a5
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUeCnmJd3J8+mVHtWfxJ40t7LStfYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWJlMjQwMDIxYTI4N2YyOTg5NzNkOWVhMjhkZmM4MDcz
NWZkNTgwMDAeFw0yNjA4MTgwMzU0MTJaFw0yNzA4MTcwMzU5MTJaMDMxMTAvBgNV
BAMTKEJEMkQ5RjVFMjhBNEREOUE1MjczMTQzRTY4NjNBRTRBOUM1MTU2RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv2eXO8b/RIpskP2a+XTCW5hkk
Wy/wg9I5ugjp1AOBcPxhoirhZtgqR0q0aWpr3suvYpF7gFzp7wVEqsGAtgDrwxre
FfYla9/D1CSMA4w6f87is5Ok0ZZwJs2tkNUWpY7vCn+5xF7N0JNhZYN8p7w8lsIP
H4utVPRLMTUoBFk++t+opx4cVa7MUuwSNbs9MM1K7QUP9QISNRqWnKuoMZ7rVF4K
Ay3tOz9YM26DS2TnAU/DO+vO/746iGH1bG0NdR2j+2mHPcUKLNksckSaCIflDE0J
fMVhyFnzkU0erJNx7lmh8msdoBWeqgqWe7RSoeJKtE51kjBQTkMy3kC09gHrAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUvS2fXiik3ZpScxQ+aGOuSpxRVv4wHwYDVR0j
BBgwFoAUG+JAAhoofymJc9nqKN/IBzX9WAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0
ZjBlLzAvMUJFMjQwMDIxQTI4N0YyOTg5NzNEOUVBMjhERkM4MDczNUZENTgwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ctSkFBaG9vZnltSmM5bnFLTl9JQnpY
OVdBQS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt
M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzM1
M2EzMjMwMzAzMDNhM2EyZjM0MzAyZDM0MzQyMDNkM2UyMDMyMzEzMzM4MzczNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoPHMUgMA0GCSqGSIb3DQEBCwUAA4IBAQCA6QmravYX2SOD+9UC
3FbwT7hXetUL08r7cbywvRaeSBsowKc7foqyhjY2hDc0UNeqIkJS/zHvzIi7/3Wo
m4zE/kMvilifL2MMfcz5I82bsl8Ser9Mjh8JQQAeq5cGPHINZGBIJvW0r19WJNVS
NeHNhiS1DZ6o6rnvrB+cWSjQhlLtGFq/9aXRZmUScSoBtPHlRHcDrM+GCxgBSlrC
hBVA2kcRcJ6WuQNZmAr0TtOj+Z7tVgBOgHqdCTZN3iPfheNluHcyOXyqfD1Yv5DZ
CpsQ7LGCjOJawKEc98Dbz0WcqMpgdvKX7J/Rgr9473J5xTV5RXugOWQgOLslsX+A
u9Gl
-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:39 2026 by rpki-client