Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a326530303a3a2f34302d3438203d3e20323131373231.roa
File: 326130663a316363353a326530303a3a2f34302d3438203d3e20323131373231.roa (raw, json)
Hash identifier: Hx1TFCEeCbrGdYdt4OP5KkopMTwTurasAvyoPyfOjuw=
Subject key identifier: 1C:3B:EE:DE:25:2E:44:71:99:C6:74:64:3E:26:21:68:86:0D:ED:5A
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 7729C3BB4177D72D7F1E12D17DB49E2610CE60C1
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a326530303a3a2f34302d3438203d3e20323131373231.roa
Signing time: Tue 02 Jun 2026 12:18:14 +0000
ROA not before: Tue 02 Jun 2026 12:13:14 +0000
ROA not after: Tue 01 Jun 2027 12:18:14 +0000
asID: 211721
IP address blocks: 2a0f:1cc5:2e00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Jun 2026 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:29:c3:bb:41:77:d7:2d:7f:1e:12:d1:7d:b4:9e:26:10:ce:60:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jun 2 12:13:14 2026 GMT
Not After : Jun 1 12:18:14 2027 GMT
Subject: CN=1C3BEEDE252E447199C674643E262168860DED5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1c:5d:d1:8f:71:92:39:82:a3:5c:49:42:23:
cf:2f:76:cf:1e:32:7f:14:9b:c1:de:38:3c:11:77:
b5:3e:17:92:ec:21:18:46:ad:bf:34:f3:c5:51:0e:
e9:49:1b:ce:bf:7a:b9:d7:62:7b:15:ff:57:2a:e7:
6d:77:78:df:cf:13:75:46:52:16:49:5b:68:86:df:
3d:13:c4:84:f4:9b:85:23:39:9d:a4:ed:7a:bb:27:
0d:a2:db:62:6c:fb:e4:a0:65:97:10:57:ea:14:a0:
40:0f:a3:aa:13:08:bb:9b:81:c1:86:12:f0:0e:88:
d9:1f:22:49:90:ef:68:32:a2:43:1d:40:92:13:6f:
de:ee:5d:7e:0c:8d:b4:dc:b6:c4:42:b7:a7:87:2b:
e9:0c:ba:d4:ac:4a:41:f7:69:9a:0a:57:16:7c:3f:
c4:92:d9:0f:dd:29:74:cb:0e:8a:eb:5d:bf:9a:54:
0b:3e:5e:42:67:f6:6c:9f:c4:d9:a8:07:b5:3d:23:
90:85:3d:53:30:dd:a5:54:d0:62:f8:4f:6b:9f:46:
e7:ee:dc:5b:62:c4:c7:33:8c:2d:36:42:5f:8f:c0:
15:a5:d5:e2:cf:43:46:87:1a:46:ba:9f:2d:64:83:
b3:a3:15:ea:ca:10:cd:30:7e:e5:a2:31:f7:2e:c5:
80:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3B:EE:DE:25:2E:44:71:99:C6:74:64:3E:26:21:68:86:0D:ED:5A
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a326530303a3a2f34302d3438203d3e20323131373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:2e00::/40
Signature Algorithm: sha256WithRSAEncryption
13:26:f8:b6:91:15:a1:ab:99:69:28:4f:03:7a:d9:25:9a:85:
87:fe:e5:31:4b:e0:0d:fb:e9:a5:09:00:f1:c7:af:f9:5c:58:
c1:2a:1d:07:05:22:3f:93:a0:3b:47:42:55:51:1d:ff:d6:51:
9d:5e:b6:73:a2:11:1a:72:1b:83:4c:14:13:fe:22:15:06:1d:
37:f4:58:cf:28:38:6d:c8:4f:1e:dc:8b:4c:6c:a8:58:70:dd:
d2:d8:d4:69:a0:43:ac:e0:74:ea:b3:70:d4:db:4d:73:f5:95:
9f:23:22:9f:85:f5:c5:36:7b:2a:57:7f:23:52:b7:3e:26:4f:
ca:ac:c4:2c:99:05:13:c6:79:0f:2d:6c:7a:a0:78:ed:45:a5:
fc:0b:ed:39:a1:85:b5:04:d2:78:6a:03:2d:91:23:67:ee:46:
e5:b2:fc:ae:b3:e8:1c:24:83:c9:ba:88:be:7c:b3:bd:fd:e0:
87:42:ec:b9:c4:5e:ba:8d:af:48:34:41:b1:2a:28:4c:74:67:
9b:59:99:30:42:d8:4c:25:71:76:34:77:98:21:cf:f2:3a:8b:
e4:1c:87:36:5e:c4:58:01:69:3d:be:c9:95:a9:3c:9f:f6:b8:
92:a9:8b:f2:94:81:b3:07:68:80:18:92:d5:30:57:33:81:ce:
fa:23:20:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 09:13:59 2026 by rpki-client