Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a323830303a3a2f34302d3438203d3e20323039323934.roa
File: 326130663a316363353a323830303a3a2f34302d3438203d3e20323039323934.roa (raw, json)
Hash identifier: zVyka3rOudGVZwGuSQYVNKHOT1ym6O130u2E3YAc1sA=
Subject key identifier: 3C:5D:AB:5F:B9:F3:8C:E6:06:39:D4:94:3B:73:7A:15:0C:09:C0:2A
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 094C3697D4C2C0D2DB49A67EDFDD31BA003C1488
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a323830303a3a2f34302d3438203d3e20323039323934.roa
Signing time: Tue 29 Sep 2026 12:50:01 +0000
ROA not before: Tue 29 Sep 2026 12:45:01 +0000
ROA not after: Tue 28 Sep 2027 12:50:01 +0000
asID: 209294
IP address blocks: 2a0f:1cc5:2800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:4c:36:97:d4:c2:c0:d2:db:49:a6:7e:df:dd:31:ba:00:3c:14:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Sep 29 12:45:01 2026 GMT
Not After : Sep 28 12:50:01 2027 GMT
Subject: CN=3C5DAB5FB9F38CE60639D4943B737A150C09C02A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9e:2f:e1:48:59:8c:2f:49:a3:de:de:b3:40:
db:e4:1c:81:3f:50:00:ce:9a:aa:8f:70:b8:17:af:
d8:2e:c4:97:ff:b1:b1:99:3e:89:43:dc:99:5e:89:
65:83:06:f7:d3:9a:1b:dc:47:ef:bc:49:9f:0b:bf:
48:ed:ef:8b:8b:e8:95:de:36:79:76:f1:80:07:46:
9f:49:b4:0d:66:e9:20:b9:a1:0b:36:f4:10:5e:44:
a5:42:fc:b7:60:0b:02:a8:51:44:25:5a:c7:09:53:
50:55:5e:18:92:17:f1:a4:42:0b:55:a6:0a:46:02:
23:52:c0:c9:b1:9f:fa:8e:e6:2d:9e:63:c9:9f:a5:
66:ac:7a:59:d7:3a:0b:da:7d:cb:26:0b:56:de:4c:
2d:53:4d:bd:16:9e:25:89:5a:08:d7:e5:3d:84:f5:
89:9b:28:89:79:6d:8d:dd:68:68:61:d3:3f:81:ae:
35:2c:ea:69:c5:ae:f6:51:26:07:cb:b9:7c:57:88:
d0:c5:20:a1:d0:55:fd:71:a2:fe:44:ef:8f:14:38:
bd:55:19:1f:c9:28:52:81:01:a4:03:9e:7e:d9:fe:
14:5a:7d:b9:01:d0:14:f7:02:f9:f9:5e:0e:3e:ed:
f7:a7:fd:9d:de:84:6c:62:31:e4:9f:d5:e5:83:8f:
9a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5D:AB:5F:B9:F3:8C:E6:06:39:D4:94:3B:73:7A:15:0C:09:C0:2A
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a323830303a3a2f34302d3438203d3e20323039323934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:2800::/40
Signature Algorithm: sha256WithRSAEncryption
41:f9:66:70:a7:c2:50:ae:d3:d4:90:df:e6:70:71:f9:ff:d1:
4b:42:16:1c:ea:8b:3e:cb:6c:57:b9:de:8d:21:25:cb:82:f5:
b6:28:5a:5a:e5:68:ac:09:62:25:ca:57:81:2f:45:da:76:75:
d7:b8:15:45:3a:a3:b4:20:c2:3a:af:85:2f:13:b7:13:32:c8:
c2:7f:9b:41:d0:a5:15:95:78:0f:76:d9:4f:8f:71:56:d2:6b:
2c:a8:ab:80:1a:d2:6d:78:21:a3:39:ae:9c:15:3b:4e:67:03:
51:9b:66:19:69:9d:1a:46:3e:4a:2c:ce:82:19:13:0d:9f:b1:
21:3b:a3:b3:d5:12:f0:ef:a1:b1:c6:fb:1b:d7:3b:f6:05:85:
81:a8:0f:5b:5b:f4:89:f0:8d:72:31:dd:40:22:20:2c:93:4c:
1b:73:42:88:d3:25:3f:f9:64:a8:55:b9:bb:42:69:b2:bb:87:
29:f7:c4:23:42:03:5f:f3:e2:92:c7:e4:ae:07:29:ec:4f:68:
b0:12:e2:b5:26:35:6e:da:63:0a:33:8c:d3:a9:1b:ce:e6:a3:
f4:34:ff:14:96:56:e7:f7:eb:68:a1:e2:26:d0:93:b0:b9:d5:
2c:9e:e2:d0:48:b3:95:73:91:68:27:9e:d0:64:4b:87:71:0d:
37:4b:1a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:14:12 2026 by rpki-client