Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a326230303a3a2f34302d3438203d3e20323131373239.roa
File: 326130663a316363353a326230303a3a2f34302d3438203d3e20323131373239.roa (raw, json)
Hash identifier: p5rgW417yQXdIOadrSgBx8CtQTXZjl0e5b1n1py9L+Q=
Subject key identifier: B5:B2:55:12:94:22:27:49:A0:32:B5:97:C2:AF:61:3C:A0:22:0E:D6
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 51CE7F7AAAB255CD4BD8587CB0F5C87D0CCAB814
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a326230303a3a2f34302d3438203d3e20323131373239.roa
Signing time: Tue 02 Jun 2026 12:18:12 +0000
ROA not before: Tue 02 Jun 2026 12:13:12 +0000
ROA not after: Tue 01 Jun 2027 12:18:12 +0000
asID: 211729
IP address blocks: 2a0f:1cc5:2b00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:ce:7f:7a:aa:b2:55:cd:4b:d8:58:7c:b0:f5:c8:7d:0c:ca:b8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jun 2 12:13:12 2026 GMT
Not After : Jun 1 12:18:12 2027 GMT
Subject: CN=B5B2551294222749A032B597C2AF613CA0220ED6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:57:d5:27:f7:a9:c5:39:2d:d1:d5:e9:52:94:
98:ae:f6:d5:20:b5:16:1d:e8:02:12:1d:b9:c7:dc:
f1:14:3b:45:a9:ea:ef:8d:25:56:40:07:bb:bc:99:
62:dc:c0:18:13:ae:6b:1a:d9:37:57:6e:a1:74:d4:
16:36:b7:4f:26:6b:2b:a3:2e:26:a6:d1:e9:73:54:
02:a0:5d:04:d2:10:3b:36:62:bf:6c:63:5c:ad:5b:
c6:3a:cf:6d:1b:0d:3f:75:fb:99:e6:91:93:ff:53:
4a:0a:43:69:62:39:47:bc:8f:b4:73:65:bd:63:dc:
18:f5:86:b9:f4:e4:dd:47:68:76:2b:50:80:8a:c2:
58:23:89:05:bc:ea:62:4f:3a:e3:f8:60:fd:6e:cf:
8b:9a:86:f7:40:63:e2:a2:1b:b4:53:ed:16:09:c0:
db:aa:a1:74:1e:ab:ef:b9:5a:4a:a7:37:57:a7:93:
2c:f9:66:5b:fe:77:52:94:2b:31:1a:d6:61:c5:2e:
33:a3:28:fc:6c:3b:86:5e:ea:6e:a1:2d:57:35:2f:
78:ff:bf:82:65:3f:56:e9:e7:c1:ef:9f:f0:6c:2f:
a5:b1:de:14:01:b8:e2:db:31:9e:28:7c:09:68:95:
98:bf:b3:42:c8:32:f1:5d:25:d1:58:d5:cd:61:43:
39:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B2:55:12:94:22:27:49:A0:32:B5:97:C2:AF:61:3C:A0:22:0E:D6
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a326230303a3a2f34302d3438203d3e20323131373239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:2b00::/40
Signature Algorithm: sha256WithRSAEncryption
14:1f:58:7e:54:0e:5e:34:fc:67:8f:9b:46:c5:0a:98:76:db:
dc:08:18:21:9f:58:bc:c9:03:8b:b9:9c:88:97:88:20:3e:9d:
ff:bd:f0:77:0e:4e:7f:31:0f:02:52:d7:0e:cc:9d:ce:d2:31:
60:41:73:64:02:ef:10:ba:21:f3:f6:be:48:68:64:5c:64:37:
dd:64:1f:0d:9f:09:c7:e7:dc:0d:df:01:f6:24:cd:7d:fc:f3:
3c:2d:81:67:e7:3c:3c:5f:ec:9a:bd:87:53:71:e4:ea:3f:c6:
23:69:69:6a:68:d7:d9:95:c4:00:79:a7:e6:d4:87:ae:43:cd:
1a:70:9f:ea:0f:bc:a5:21:fa:07:ed:2b:42:01:8c:62:04:bf:
a5:b1:03:b1:36:18:a8:c9:b4:65:97:5c:b4:81:20:7d:1c:66:
73:d4:bb:ef:a6:c1:49:24:e4:e0:70:99:e8:30:75:69:ed:a6:
cf:c5:55:70:73:aa:3a:50:6c:8f:a9:6e:af:1e:65:80:1e:93:
e1:47:11:75:14:c3:75:ae:33:fa:7b:bd:43:12:1d:7d:72:ff:
e8:59:19:de:59:d7:88:4f:97:a3:66:be:0f:de:5f:fc:90:cb:
7e:eb:d2:ef:eb:22:94:0d:ab:2c:90:dd:4c:ae:a3:3e:d7:47:
e7:c2:57:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:20:42 2026 by rpki-client