Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a333030303a3a2f34302d3430203d3e20313939373637.roa
File: 326130663a316363353a333030303a3a2f34302d3430203d3e20313939373637.roa (raw, json)
Hash identifier: Rq4L3053eEy+BUXp43R/I3+2u65CvhwO3vJjqgVxkuA=
Subject key identifier: E9:3E:BC:22:F8:26:4C:08:5E:EE:1F:56:66:B1:A5:C4:5B:F4:42:56
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 6C029A1A4741F67C525FDD05A9AC677DBF2ECCA9
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a333030303a3a2f34302d3430203d3e20313939373637.roa
Signing time: Mon 17 Aug 2026 04:04:16 +0000
ROA not before: Mon 17 Aug 2026 03:59:16 +0000
ROA not after: Mon 16 Aug 2027 04:04:16 +0000
asID: 199767
IP address blocks: 2a0f:1cc5:3000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:02:9a:1a:47:41:f6:7c:52:5f:dd:05:a9:ac:67:7d:bf:2e:cc:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Aug 17 03:59:16 2026 GMT
Not After : Aug 16 04:04:16 2027 GMT
Subject: CN=E93EBC22F8264C085EEE1F5666B1A5C45BF44256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:46:2d:c4:6a:99:67:0f:1c:2f:90:55:3d:3b:
6a:3e:d8:79:7a:81:49:9a:4e:b7:0b:c1:89:cb:d3:
5f:78:f1:88:cd:1c:21:c6:6a:63:c8:5c:78:72:47:
2b:53:be:23:ab:ff:9c:eb:84:85:80:07:fb:f6:8e:
85:1b:4e:59:8d:d3:c6:d4:f6:0b:b0:c8:29:77:87:
3b:b3:c0:cb:b7:10:34:d0:97:80:77:ac:92:27:1e:
68:6b:95:af:ff:b9:3e:fa:f4:3b:77:59:7c:bb:f2:
1a:56:db:8b:d0:74:bf:29:f9:84:b3:ec:8a:67:aa:
7b:6a:56:70:84:23:e9:40:6c:74:8a:cb:52:9d:59:
8b:e9:b3:05:79:36:17:a7:75:88:61:d7:f0:70:b3:
f1:91:44:ab:75:ab:cc:39:57:9d:d6:ba:43:2f:fa:
7d:cf:74:c7:66:95:fc:2f:d2:a4:d8:b3:d0:89:ad:
b5:95:d4:a4:de:ae:20:14:c4:94:bc:5b:23:68:a9:
b3:e7:4d:74:4d:53:f4:53:aa:b0:ea:c5:40:cd:26:
b7:8b:2c:c8:56:28:b8:4d:da:4d:8f:ea:e3:39:a4:
37:d0:34:71:1f:8f:82:36:97:c7:0b:73:22:f5:63:
a5:68:e5:c1:34:00:b0:5a:6e:98:87:3a:d4:c7:73:
62:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3E:BC:22:F8:26:4C:08:5E:EE:1F:56:66:B1:A5:C4:5B:F4:42:56
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a333030303a3a2f34302d3430203d3e20313939373637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:3000::/40
Signature Algorithm: sha256WithRSAEncryption
2f:b6:2a:54:56:29:8d:27:ac:e1:6d:62:14:21:51:31:b1:ff:
0a:15:24:2d:5f:f8:0f:6d:36:e2:0f:58:94:3c:ab:98:dd:6d:
de:14:03:0b:d7:e4:4b:4e:e2:18:a8:8f:77:8b:c7:13:f3:80:
ad:71:b5:70:c0:12:c0:d0:a3:50:1c:3a:4f:62:6c:77:37:3c:
1a:11:e7:6a:0e:91:12:c7:13:bd:a7:9c:44:5e:9b:c5:52:cc:
56:ac:c2:8d:97:d4:1d:d6:ec:e0:de:f0:fa:05:be:7e:fc:97:
cf:21:8f:c7:e4:80:36:89:60:b8:af:0a:43:9f:1c:50:8a:b7:
8e:9b:51:00:7b:49:b2:ad:d4:ba:0f:4b:61:40:c1:91:5a:de:
95:15:bd:40:84:bb:d9:77:65:4e:90:48:88:d3:99:2c:58:78:
d7:e6:7a:a0:ee:6a:fa:da:25:fb:8a:96:12:65:7d:49:4c:48:
ab:fa:90:a0:61:21:19:af:0f:eb:a5:57:1a:d3:e9:a0:b8:b2:
1c:6a:b6:e5:d8:c1:56:0d:dd:8e:6b:6d:6a:e1:43:8a:43:f3:
6f:e1:b9:4d:c0:9d:59:cd:c6:1a:98:cc:04:90:c4:6c:d4:30:
9d:f6:13:b1:48:76:9d:91:4a:54:86:80:5a:36:63:e8:db:b5:
e0:38:83:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:39 2026 by rpki-client