Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a333030303a3a2f34302d3430203d3e20313939373637.roa
File: 326130663a316363353a333030303a3a2f34302d3430203d3e20313939373637.roa (raw, json)
Hash identifier: icv76Qe2Or8y51M7CiDv2/iVjhbWh7lujSIs4Ot3vh4=
Subject key identifier: 64:AD:22:B2:2B:93:0C:8F:FD:7C:E9:6B:9D:B9:3F:F9:CB:B8:32:EB
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 12552E1F82D9FFA1CF0EB27A214070734E6A5FC4
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a333030303a3a2f34302d3430203d3e20313939373637.roa
Signing time: Wed 30 Sep 2026 00:30:25 +0000
ROA not before: Wed 30 Sep 2026 00:25:25 +0000
ROA not after: Wed 29 Sep 2027 00:30:25 +0000
asID: 199767
IP address blocks: 2a0f:1cc5:3000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:55:2e:1f:82:d9:ff:a1:cf:0e:b2:7a:21:40:70:73:4e:6a:5f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Sep 30 00:25:25 2026 GMT
Not After : Sep 29 00:30:25 2027 GMT
Subject: CN=64AD22B22B930C8FFD7CE96B9DB93FF9CBB832EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:50:f1:a3:9c:a1:0c:8c:4b:ef:d8:38:b4:
a4:ce:cf:e6:70:32:e8:25:cf:38:5e:67:65:80:b7:
49:4a:a2:0d:1c:92:23:f1:b8:ff:c0:f8:55:06:03:
f9:d7:25:2c:a0:9b:5a:5f:96:b8:0a:b9:e9:eb:10:
c2:42:7f:8c:28:60:32:e5:23:ac:86:66:d7:b4:d6:
95:05:3e:9d:c2:0d:7a:f3:03:39:01:19:68:2b:49:
e5:59:27:d8:6c:b9:b5:f7:4d:36:ba:a4:4f:a3:7b:
58:89:51:74:ef:74:49:71:60:d5:13:c1:53:1e:36:
e4:81:bc:c8:ed:ee:22:43:9b:e0:37:8d:ba:82:b6:
b9:2a:a2:ed:fc:4f:04:4a:b6:52:55:21:99:3a:2c:
83:88:45:4a:da:f9:43:07:71:7d:73:98:3e:86:01:
e0:be:1e:e7:ea:b2:36:55:07:41:3a:e4:fd:84:d9:
e0:21:00:82:24:dc:89:35:f3:4e:da:87:e0:0e:0f:
e3:87:6d:cc:43:6f:76:d1:d8:82:8c:23:4d:5d:33:
1c:c7:82:da:c0:b1:ca:5a:89:71:53:38:ea:ba:f9:
bc:2f:d1:34:95:33:34:b0:62:ec:41:ba:4c:71:93:
79:93:d5:e4:8e:56:53:5f:0b:e2:6c:3b:c5:5c:7a:
66:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AD:22:B2:2B:93:0C:8F:FD:7C:E9:6B:9D:B9:3F:F9:CB:B8:32:EB
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a333030303a3a2f34302d3430203d3e20313939373637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:3000::/40
Signature Algorithm: sha256WithRSAEncryption
71:ba:ae:97:14:91:1c:c6:c5:f8:81:31:19:52:f2:46:bb:63:
06:62:70:2b:37:0c:ba:c6:82:4b:82:ed:f3:03:6e:87:cb:85:
6b:5c:87:f7:e6:f4:51:12:fb:d3:e2:93:84:9d:89:33:43:2a:
3a:20:ea:ca:aa:40:ef:8a:e8:9a:c4:a4:ec:5e:02:69:ba:1b:
d9:34:97:a2:b5:72:89:fc:63:b6:9d:d0:5a:53:32:e7:87:58:
5f:96:c6:53:ac:0d:3f:44:be:d4:6f:36:56:14:17:6b:80:f1:
e9:d0:ab:11:45:60:20:15:74:92:fd:60:75:03:52:19:eb:9c:
ed:2a:c6:67:20:1e:8b:0d:da:86:af:c2:55:c6:42:c6:d6:88:
2c:fb:3e:7d:22:64:02:eb:cd:fe:ca:80:1c:4e:4a:68:5b:b5:
c2:19:4e:e6:b3:c5:4b:01:5f:29:a3:67:8b:73:be:ee:11:0c:
f1:ab:9f:b8:c2:cb:24:8c:39:f9:7e:2d:e1:e2:41:7c:df:c1:
2c:4a:70:4f:99:7f:bf:49:a3:e2:2a:6c:9e:f5:2f:97:d4:3f:
81:d4:95:b3:00:3e:24:3f:8b:17:be:f1:3c:48:6b:0a:61:c2:
3a:45:b4:e3:f8:53:41:e2:da:5b:b0:1e:88:91:cf:d0:b0:c3:
8d:2d:49:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:46:31 2026 by rpki-client