Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a326330303a3a2f34302d3438203d3e20323132343235.roa
File: 326130663a316363353a326330303a3a2f34302d3438203d3e20323132343235.roa (raw, json)
Hash identifier: T5Vi+2nnfhqfymMw6+dRGZJq4rNYewsZDn2yd4xEuyE=
Subject key identifier: 3F:AB:93:BA:08:7C:89:D0:64:B8:DD:72:47:48:40:56:93:0B:25:4C
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 66D8FAC4E92B7F7F61ED9E108B6EF82CBBEB4A51
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a326330303a3a2f34302d3438203d3e20323132343235.roa
Signing time: Tue 02 Jun 2026 12:18:00 +0000
ROA not before: Tue 02 Jun 2026 12:13:00 +0000
ROA not after: Tue 01 Jun 2027 12:18:00 +0000
asID: 212425
IP address blocks: 2a0f:1cc5:2c00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:d8:fa:c4:e9:2b:7f:7f:61:ed:9e:10:8b:6e:f8:2c:bb:eb:4a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jun 2 12:13:00 2026 GMT
Not After : Jun 1 12:18:00 2027 GMT
Subject: CN=3FAB93BA087C89D064B8DD7247484056930B254C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:f9:93:2c:bd:05:3f:89:0a:f6:6d:f7:62:
c8:e6:ad:f6:16:8f:8e:3b:08:87:35:4a:0b:fb:63:
59:5c:87:b1:cf:ce:02:c6:47:43:05:2f:85:c3:82:
bb:48:8f:a8:c1:a3:29:ae:01:f9:9c:fb:4c:36:c4:
23:98:90:23:91:8c:33:98:a6:62:f4:bf:c1:54:59:
b2:1c:10:bf:be:f4:f2:8f:89:12:cb:38:9c:52:63:
21:61:31:10:12:26:9d:d7:bb:46:00:45:48:55:1c:
41:c8:c5:b6:1b:b3:52:c7:9f:df:f6:ee:bc:2b:71:
9c:7e:8f:24:ac:b1:99:99:e3:8c:a3:a5:e5:6c:12:
01:b5:df:5c:69:47:29:0c:67:ec:27:07:1c:ed:fc:
3b:1f:0f:1d:11:ab:ad:2c:27:90:05:a5:5e:8e:ee:
d1:53:6d:93:d9:5a:77:7d:0f:2a:ce:5e:67:7d:7a:
a4:42:37:0b:13:87:0e:1d:13:a9:8c:9a:ea:49:f1:
c1:22:e0:95:c6:09:50:cb:af:e5:c3:40:98:da:22:
24:75:f3:7c:14:9b:e3:78:d2:33:6a:dd:e1:98:6e:
f5:f7:78:21:8e:a7:95:91:c2:26:76:21:77:5c:6f:
e1:b3:97:09:e2:d0:a2:60:96:86:ff:88:fb:97:cd:
2f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AB:93:BA:08:7C:89:D0:64:B8:DD:72:47:48:40:56:93:0B:25:4C
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a326330303a3a2f34302d3438203d3e20323132343235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:2c00::/40
Signature Algorithm: sha256WithRSAEncryption
49:97:17:2d:60:6c:7d:c2:42:88:89:ea:95:22:a2:c6:38:11:
ae:cd:2b:59:12:a8:ad:48:39:19:10:0b:69:af:39:44:b6:00:
7b:72:88:69:4f:ff:ad:9c:a9:b1:b4:15:e7:7a:f9:fd:9c:c3:
4e:5e:bd:eb:d6:11:05:17:dd:55:8f:49:a7:2a:7e:b9:b0:08:
ab:30:e2:0a:67:a5:d1:ae:70:05:ec:2d:db:8c:f3:30:00:b1:
ec:23:aa:77:68:83:30:e6:04:aa:81:81:77:f6:69:a3:bb:c6:
91:1a:52:68:8f:09:f1:57:9d:65:52:b2:18:14:e2:81:a7:e0:
10:5d:3f:c7:18:25:e7:80:a5:bf:36:63:72:c2:c1:19:30:7a:
25:9e:dc:32:ac:f8:94:86:67:f4:0f:42:58:ae:96:ac:93:03:
2b:cf:6f:83:01:81:7e:2c:fd:f2:46:6e:ee:75:1a:a0:34:b3:
68:ea:cf:2d:2a:69:4b:90:40:34:c5:1f:d6:f3:ae:72:e6:2a:
a7:ce:e3:2a:f7:92:7c:ae:4a:d2:1a:0e:c9:ae:2a:52:56:5c:
03:89:b5:4e:24:7e:3e:23:2c:a8:0e:2f:cf:d0:aa:cf:52:bc:
e6:e9:1e:a3:86:53:fb:3f:08:1b:b8:20:ab:25:01:d1:fd:c1:
2e:24:e4:2b
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUZtj6xOkrf39h7Z4Qi274LLvrSlEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWJlMjQwMDIxYTI4N2YyOTg5NzNkOWVhMjhkZmM4MDcz
NWZkNTgwMDAeFw0yNjA2MDIxMjEzMDBaFw0yNzA2MDExMjE4MDBaMDMxMTAvBgNV
BAMTKDNGQUI5M0JBMDg3Qzg5RDA2NEI4REQ3MjQ3NDg0MDU2OTMwQjI1NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqSPmTLL0FP4kK9m33YsjmrfYW
j447CIc1Sgv7Y1lch7HPzgLGR0MFL4XDgrtIj6jBoymuAfmc+0w2xCOYkCORjDOY
pmL0v8FUWbIcEL++9PKPiRLLOJxSYyFhMRASJp3Xu0YARUhVHEHIxbYbs1LHn9/2
7rwrcZx+jySssZmZ44yjpeVsEgG131xpRykMZ+wnBxzt/DsfDx0Rq60sJ5AFpV6O
7tFTbZPZWnd9DyrOXmd9eqRCNwsThw4dE6mMmupJ8cEi4JXGCVDLr+XDQJjaIiR1
83wUm+N40jNq3eGYbvX3eCGOp5WRwiZ2IXdcb+Gzlwni0KJglob/iPuXzS/lAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUP6uTugh8idBkuN1yR0hAVpMLJUwwHwYDVR0j
BBgwFoAUG+JAAhoofymJc9nqKN/IBzX9WAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0
ZjBlLzAvMUJFMjQwMDIxQTI4N0YyOTg5NzNEOUVBMjhERkM4MDczNUZENTgwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ctSkFBaG9vZnltSmM5bnFLTl9JQnpY
OVdBQS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt
M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzM1
M2EzMjYzMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzMjM0MzIzNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoPHMUsMA0GCSqGSIb3DQEBCwUAA4IBAQBJlxctYGx9wkKIieqV
IqLGOBGuzStZEqitSDkZEAtprzlEtgB7cohpT/+tnKmxtBXnevn9nMNOXr3r1hEF
F91Vj0mnKn65sAirMOIKZ6XRrnAF7C3bjPMwALHsI6p3aIMw5gSqgYF39mmju8aR
GlJojwnxV51lUrIYFOKBp+AQXT/HGCXngKW/NmNywsEZMHolntwyrPiUhmf0D0JY
rpaskwMrz2+DAYF+LP3yRm7udRqgNLNo6s8tKmlLkEA0xR/W865y5iqnzuMq95J8
rkrSGg7JripSVlwDibVOJH4+IyyoDi/P0KrPUrzm6R6jhlP7PwgbuCCrJQHR/cEu
JOQr
-----END CERTIFICATE-----
Generated at Sat Jun 6 06:28:23 2026 by rpki-client