Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a333230303a3a2f34302d3430203d3e20313938363831.roa
File: 326130663a316363353a333230303a3a2f34302d3430203d3e20313938363831.roa (raw, json)
Hash identifier: g96fGfyiyfy8lMFYrH02i7hXj70O7evFFrl15IPIE74=
Subject key identifier: 52:CB:49:4D:7C:A9:F3:FB:98:20:E5:DB:90:66:3D:98:83:59:46:D8
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 0F3367C183519B50FC3635C0D15EBC651F415792
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a333230303a3a2f34302d3430203d3e20313938363831.roa
Signing time: Sun 27 Sep 2026 17:38:23 +0000
ROA not before: Sun 27 Sep 2026 17:33:23 +0000
ROA not after: Sun 26 Sep 2027 17:38:23 +0000
asID: 198681
IP address blocks: 2a0f:1cc5:3200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 04:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:33:67:c1:83:51:9b:50:fc:36:35:c0:d1:5e:bc:65:1f:41:57:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Sep 27 17:33:23 2026 GMT
Not After : Sep 26 17:38:23 2027 GMT
Subject: CN=52CB494D7CA9F3FB9820E5DB90663D98835946D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5b:91:48:18:cc:58:34:78:bd:45:35:f9:7c:
b5:fa:c9:e1:b4:bd:9c:7c:55:19:65:30:56:aa:b8:
15:4c:d9:16:1e:c5:be:83:e4:61:bf:f0:65:70:7e:
61:8a:99:b0:bd:ef:e2:10:cb:95:7f:cb:42:18:d8:
f9:37:d5:05:88:32:03:cf:92:e1:29:78:51:c4:c0:
69:b0:b0:5b:97:dd:9e:ef:f0:1a:fe:88:a9:3e:fc:
ab:2b:6c:67:21:76:b4:8b:93:15:d2:b6:22:2e:5f:
11:ba:71:d5:f2:c6:7b:26:c8:72:bd:9e:79:09:e6:
51:64:97:e1:77:1d:b6:13:21:21:6c:e4:cd:7a:04:
9e:8e:9d:3f:54:01:26:a1:b6:36:2e:a0:f6:cd:48:
e9:cf:78:68:4d:53:3c:35:5e:ae:43:a8:28:c6:0f:
96:9a:e8:f6:a7:e4:30:c9:e9:1b:54:d6:64:91:9a:
ea:63:53:23:4d:91:90:28:28:4d:71:df:e1:e0:34:
01:6d:66:f9:92:bf:9c:2b:17:55:9d:26:e4:b9:d1:
0b:7a:00:a1:ea:af:83:bf:17:4a:13:c1:fa:3f:36:
c6:a9:88:3d:f9:03:52:71:1b:26:da:b9:e1:90:b3:
43:8e:91:ae:ba:8f:c5:f9:36:0f:3b:6f:cf:22:a2:
af:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CB:49:4D:7C:A9:F3:FB:98:20:E5:DB:90:66:3D:98:83:59:46:D8
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a333230303a3a2f34302d3430203d3e20313938363831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:3200::/40
Signature Algorithm: sha256WithRSAEncryption
77:51:67:8c:84:58:9b:4a:81:f5:23:74:b1:c4:48:02:72:81:
40:e8:5e:76:bb:22:68:e6:41:d0:49:a6:82:9f:18:4a:10:5c:
5e:09:a3:cf:62:62:fd:d4:4c:92:aa:0a:81:ed:bd:1b:b5:9f:
ae:51:c3:13:41:f8:82:95:9d:60:7b:6c:a0:b4:f3:e0:0c:8e:
fa:ce:7e:ea:bc:09:3b:c1:21:19:f5:d6:2b:62:3d:4a:36:33:
ae:b8:b7:c3:c2:c0:c3:3d:c5:34:58:5d:20:c0:04:07:1a:a3:
be:99:9b:6e:58:79:1b:7a:a1:a8:dd:82:7d:41:51:79:62:8a:
83:b4:48:2f:0a:d6:d4:02:01:51:3b:7b:a4:87:49:0a:b6:c7:
e5:c6:61:d7:f8:67:7f:ce:df:12:c7:19:d9:04:20:7f:be:05:
2e:75:af:ec:c0:d4:e9:72:5d:a8:b5:57:66:01:3a:47:eb:7e:
19:7f:9f:95:44:77:f9:ff:56:06:b1:c2:77:1f:fa:29:0f:d9:
6b:36:62:0e:36:02:cf:49:28:94:b2:0f:a5:bb:cc:36:2f:16:
15:ab:f5:5e:b9:62:d8:c1:e2:36:26:34:97:33:3e:09:51:a0:
8b:e0:7d:a9:7e:3e:5f:4b:af:0a:57:87:fc:63:f8:58:f7:b0:
0a:9a:fc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:54:07 2026 by rpki-client