Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a323831303a3a2f34342d3438203d3e203331383938.roa
File: 326130663a316363353a323831303a3a2f34342d3438203d3e203331383938.roa (raw, json)
Hash identifier: NbWcavaoIrZUDM80893nEMZNgefo2glIRvA2ZWyZK2w=
Subject key identifier: B7:73:94:BA:C4:8C:D4:CE:DA:70:19:36:A5:F1:E0:B3:43:FA:69:10
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 58933E3B8130E63FF124BD759F8B228058D0F88A
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a323831303a3a2f34342d3438203d3e203331383938.roa
Signing time: Tue 29 Sep 2026 12:49:35 +0000
ROA not before: Tue 29 Sep 2026 12:44:35 +0000
ROA not after: Tue 28 Sep 2027 12:49:35 +0000
asID: 31898
IP address blocks: 2a0f:1cc5:2810::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 01:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:93:3e:3b:81:30:e6:3f:f1:24:bd:75:9f:8b:22:80:58:d0:f8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Sep 29 12:44:35 2026 GMT
Not After : Sep 28 12:49:35 2027 GMT
Subject: CN=B77394BAC48CD4CEDA701936A5F1E0B343FA6910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:12:c2:1a:a1:09:1e:cf:c8:56:aa:77:87:29:
d8:44:a8:ab:a8:72:2e:c8:36:c7:44:e7:49:39:ef:
a3:93:9a:6a:48:85:03:11:c2:ef:c5:cc:c5:26:8d:
f8:88:f9:79:64:18:4c:4f:4c:f6:b9:88:3c:6a:79:
59:11:ed:a6:ed:77:b6:3c:73:bc:fe:9d:4a:ad:54:
34:ea:af:0b:22:50:b2:13:d3:88:af:33:31:35:44:
85:90:7e:16:67:63:da:5e:78:55:89:a9:f3:47:d9:
ca:fc:7a:eb:e7:9e:b3:2c:00:ca:13:61:dd:1a:23:
05:50:9c:c1:9f:e2:34:ad:7c:a4:89:83:1f:21:66:
c3:a1:08:57:5f:a9:f6:dc:38:ec:c6:07:7b:37:ea:
83:48:91:8f:32:f1:50:a9:76:b4:53:7d:33:0a:90:
3a:1a:36:8f:c1:e0:83:1b:17:1e:cc:a9:0d:ca:c0:
82:d1:e5:fe:18:70:2f:f9:b7:87:cc:21:7e:95:58:
c7:45:24:0c:30:f8:7c:f9:01:d3:68:b9:9a:99:35:
1f:25:ed:88:09:02:bb:87:25:6b:1b:7f:fb:03:f0:
4c:8e:6d:08:f5:8a:a7:31:32:64:9b:59:16:bf:ee:
7d:3d:96:53:be:fc:d8:a2:55:8e:42:b7:29:f6:7f:
ca:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:73:94:BA:C4:8C:D4:CE:DA:70:19:36:A5:F1:E0:B3:43:FA:69:10
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a323831303a3a2f34342d3438203d3e203331383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:2810::/44
Signature Algorithm: sha256WithRSAEncryption
1f:72:e8:76:e4:68:f2:9e:d7:60:f6:2e:d7:1e:a7:c4:a3:fa:
32:24:5a:96:21:f0:4d:d2:95:af:03:ae:ee:95:5f:18:40:8d:
90:1d:ce:89:2c:10:45:0f:7e:b3:9d:a1:0b:66:94:4f:06:95:
2b:aa:8c:8e:1d:de:ed:94:a4:14:b2:de:3f:cf:11:a5:b6:c1:
d7:e3:c7:5b:9f:5c:7d:4f:ad:ee:6f:b3:25:1e:f6:25:5e:67:
42:74:34:62:14:6c:ec:cb:d2:32:b5:21:fc:79:8a:da:53:35:
24:81:2c:fc:59:4e:9d:58:67:ab:11:8e:60:6d:5b:3a:a3:2a:
6f:db:84:56:48:6e:ea:a2:e3:ce:3d:69:98:3a:59:1a:a3:e4:
24:ec:65:1e:a4:d5:b8:1d:7a:ca:ff:fb:92:76:26:ae:ea:5e:
32:53:da:a6:a3:19:74:05:62:5d:32:74:60:8b:17:75:52:f1:
12:5c:18:d4:a7:b0:a8:1a:b1:6e:46:c7:a2:e2:70:c7:1f:f9:
16:72:47:58:b0:ee:03:e9:9b:c3:10:8e:a5:90:72:7a:78:c3:
b9:8c:f8:37:33:a2:3e:ca:6d:91:36:95:b9:60:4a:7c:05:ef:
cd:83:a4:09:cc:13:ea:c1:b7:a3:c7:da:0b:46:05:8e:2a:d2:
e1:8c:3e:e0
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUWJM+O4Ew5j/xJL11n4sigFjQ+IowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWJlMjQwMDIxYTI4N2YyOTg5NzNkOWVhMjhkZmM4MDcz
NWZkNTgwMDAeFw0yNjA5MjkxMjQ0MzVaFw0yNzA5MjgxMjQ5MzVaMDMxMTAvBgNV
BAMTKEI3NzM5NEJBQzQ4Q0Q0Q0VEQTcwMTkzNkE1RjFFMEIzNDNGQTY5MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmEsIaoQkez8hWqneHKdhEqKuo
ci7INsdE50k576OTmmpIhQMRwu/FzMUmjfiI+XlkGExPTPa5iDxqeVkR7abtd7Y8
c7z+nUqtVDTqrwsiULIT04ivMzE1RIWQfhZnY9peeFWJqfNH2cr8euvnnrMsAMoT
Yd0aIwVQnMGf4jStfKSJgx8hZsOhCFdfqfbcOOzGB3s36oNIkY8y8VCpdrRTfTMK
kDoaNo/B4IMbFx7MqQ3KwILR5f4YcC/5t4fMIX6VWMdFJAww+Hz5AdNouZqZNR8l
7YgJAruHJWsbf/sD8EyObQj1iqcxMmSbWRa/7n09llO+/NiiVY5Ctyn2f8rfAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUt3OUusSM1M7acBk2pfHgs0P6aRAwHwYDVR0j
BBgwFoAUG+JAAhoofymJc9nqKN/IBzX9WAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0
ZjBlLzAvMUJFMjQwMDIxQTI4N0YyOTg5NzNEOUVBMjhERkM4MDczNUZENTgwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ctSkFBaG9vZnltSmM5bnFLTl9JQnpY
OVdBQS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt
M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzM1
M2EzMjM4MzEzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMzMzEzODM5Mzgucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwQqDxzFKBAwDQYJKoZIhvcNAQELBQADggEBAB9y6HbkaPKe12D2Ltce
p8Sj+jIkWpYh8E3Sla8Dru6VXxhAjZAdzoksEEUPfrOdoQtmlE8GlSuqjI4d3u2U
pBSy3j/PEaW2wdfjx1ufXH1Pre5vsyUe9iVeZ0J0NGIUbOzL0jK1Ifx5itpTNSSB
LPxZTp1YZ6sRjmBtWzqjKm/bhFZIbuqi4849aZg6WRqj5CTsZR6k1bgdesr/+5J2
Jq7qXjJT2qajGXQFYl0ydGCLF3VS8RJcGNSnsKgasW5Gx6LicMcf+RZyR1iw7gPp
m8MQjqWQcnp4w7mM+Dczoj7KbZE2lblgSnwF782DpAnME+rBt6PH2gtGBY4q0uGM
PuA=
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:47:55 2026 by rpki-client