Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a323030303a3a2f34302d3438203d3e20323133383736.roa
File: 326130663a316363353a323030303a3a2f34302d3438203d3e20323133383736.roa (raw, json)
Hash identifier: wcHeI5cE/nXJc+e4lkDdV6Atfgz7UbZ9vUTWMQ5BPf8=
Subject key identifier: B1:FE:8E:ED:F6:C0:6C:B8:13:50:F9:6F:FB:D6:EF:8A:67:54:D5:49
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 407AB88A7939A581E85B12F977F31323BBAE41DB
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a323030303a3a2f34302d3438203d3e20323133383736.roa
Signing time: Thu 20 Aug 2026 12:33:32 +0000
ROA not before: Thu 20 Aug 2026 12:28:32 +0000
ROA not after: Thu 19 Aug 2027 12:33:32 +0000
asID: 213876
IP address blocks: 2a0f:1cc5:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:7a:b8:8a:79:39:a5:81:e8:5b:12:f9:77:f3:13:23:bb:ae:41:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Aug 20 12:28:32 2026 GMT
Not After : Aug 19 12:33:32 2027 GMT
Subject: CN=B1FE8EEDF6C06CB81350F96FFBD6EF8A6754D549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ad:85:70:b7:3c:fc:30:6e:2e:dd:7c:9d:a8:
99:63:f6:5d:c8:b8:1f:1d:45:d0:29:0e:8f:d7:6e:
86:97:ba:dd:75:64:b9:ce:46:e5:49:b4:11:57:36:
f9:f7:e4:11:57:18:05:df:34:db:ea:26:42:84:c4:
0e:30:08:96:d6:88:fb:d0:ff:1d:c8:74:a6:e7:0b:
e8:0b:cc:c3:98:ad:d6:8f:a2:70:9f:55:15:b4:a1:
e4:75:87:eb:e3:6c:5d:ff:09:e0:39:c3:b5:1e:5c:
28:d0:36:30:5d:ac:8e:27:6b:e3:db:24:10:45:06:
e4:55:2e:52:49:17:a5:be:27:7e:dd:93:de:a8:d1:
6e:2c:15:85:fb:f4:f0:5c:b9:39:c2:99:7c:83:21:
e7:4e:82:b8:22:5b:ca:6a:db:73:b1:3b:07:7b:39:
b0:0a:3a:09:9f:7d:87:f7:c1:24:bf:16:8a:a8:4b:
38:70:80:4a:9b:71:6d:82:a7:7c:2f:e0:a9:9a:94:
e0:4e:fb:ae:11:57:92:1b:9c:ff:0f:82:ef:82:0c:
64:b2:82:82:cf:20:87:7a:ea:bb:7f:24:3e:6b:3f:
4e:fe:75:b0:1b:b7:51:0e:44:fc:46:91:30:33:46:
07:b9:36:b2:5c:8a:d9:5c:57:b9:2d:f3:38:af:b9:
91:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FE:8E:ED:F6:C0:6C:B8:13:50:F9:6F:FB:D6:EF:8A:67:54:D5:49
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a323030303a3a2f34302d3438203d3e20323133383736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:2000::/40
Signature Algorithm: sha256WithRSAEncryption
5c:6b:39:a6:36:2d:55:41:8d:c3:38:fc:82:ab:56:c3:a7:f2:
58:85:53:30:72:e1:c2:9c:0b:39:a3:6b:c7:19:ab:08:c3:f5:
b3:63:fb:28:ca:0a:79:4a:09:ff:df:6e:fa:48:16:77:b9:60:
07:02:15:86:52:8a:d9:3a:53:54:75:b8:4b:e7:2b:9a:bf:75:
8e:8c:91:eb:6f:f9:d3:ee:e9:e3:a1:61:b3:b1:f8:f5:23:3f:
72:2b:e0:a6:be:a5:78:e4:e9:1e:6a:79:1d:d1:b5:06:bc:b7:
aa:a2:a6:0a:b3:a4:a6:8f:0e:a8:6e:d2:52:ff:89:c0:ab:2e:
06:fe:ad:af:fd:ca:31:92:df:cc:07:99:f0:02:16:df:ee:a2:
df:b0:78:a5:bc:25:58:6a:18:92:90:64:7a:59:25:5d:c1:81:
7d:3c:d0:3e:47:37:72:b5:40:fb:29:1c:88:bd:58:d1:2c:9e:
e0:f9:24:39:9e:4a:64:81:6e:16:8e:73:f7:51:a4:9f:4e:a1:
24:fd:aa:c7:96:08:0e:41:14:97:bb:b8:79:db:49:eb:91:a4:
86:4e:a2:3e:15:58:36:53:8a:8c:85:29:bc:cf:d0:44:a7:9c:
f6:95:93:a4:eb:62:f8:9f:3f:af:26:95:a2:5f:3f:e1:dd:50:
5a:c0:fe:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:40 2026 by rpki-client