Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a333230303a3a2f34302d3438203d3e20313938363831.roa
File: 326130663a316363353a333230303a3a2f34302d3438203d3e20313938363831.roa (raw, json)
Hash identifier: K0Qxtcu+Mu9XXGHNrBOG2AQ9V2eYK0QL8m+0Zi46Gtc=
Subject key identifier: D1:BF:63:37:6B:FA:F7:31:1C:91:5F:58:AE:08:B0:19:95:E3:DE:64
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 1ED5575052C2C76C9D00CFECAEFD6F1AAB76388A
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a333230303a3a2f34302d3438203d3e20313938363831.roa
Signing time: Tue 02 Jun 2026 12:18:08 +0000
ROA not before: Tue 02 Jun 2026 12:13:08 +0000
ROA not after: Tue 01 Jun 2027 12:18:08 +0000
asID: 198681
IP address blocks: 2a0f:1cc5:3200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:d5:57:50:52:c2:c7:6c:9d:00:cf:ec:ae:fd:6f:1a:ab:76:38:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jun 2 12:13:08 2026 GMT
Not After : Jun 1 12:18:08 2027 GMT
Subject: CN=D1BF63376BFAF7311C915F58AE08B01995E3DE64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:b0:f1:d0:ff:d0:de:4b:42:b8:62:61:bb:
a0:3c:9e:c8:bc:b2:da:60:02:36:b7:ff:86:05:69:
a8:76:0d:74:4c:6e:42:32:ff:77:87:52:62:fb:0a:
17:5d:dc:2b:d9:fc:a2:a9:c0:bd:a5:ad:2b:e4:32:
d2:d4:ca:f2:50:1c:3d:aa:9f:92:ec:68:3d:cf:23:
c0:62:25:0c:5f:31:74:72:03:48:f0:50:19:79:b4:
18:57:2b:3c:36:c9:93:89:48:ab:f7:61:5b:58:47:
ef:ff:8b:0f:55:17:21:76:a6:e8:60:f7:51:ee:7a:
ce:4b:ea:18:00:cb:2b:9c:c8:67:29:21:fc:93:0b:
64:01:ad:7f:43:fe:e7:79:28:04:1c:4f:b8:ec:6e:
ca:e4:c5:9c:df:cc:31:86:c2:7b:cf:a0:ce:1b:c1:
86:bb:3d:c8:c8:ea:5b:c3:4e:86:f6:db:a1:30:37:
da:c4:c6:24:4d:8d:45:82:c9:9f:f9:c6:1a:6d:97:
77:9f:1a:f6:5e:dd:c6:d0:bb:16:00:07:9e:94:8e:
5c:9f:7a:b7:3e:cc:80:0a:e5:16:0f:bf:cf:90:35:
35:4b:4c:f4:44:bb:d0:0f:5e:b2:3c:5e:fd:e5:ee:
32:9c:30:2e:a9:58:da:91:14:60:0b:4e:76:f0:0e:
49:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BF:63:37:6B:FA:F7:31:1C:91:5F:58:AE:08:B0:19:95:E3:DE:64
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a333230303a3a2f34302d3438203d3e20313938363831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:3200::/40
Signature Algorithm: sha256WithRSAEncryption
0e:e7:92:55:30:66:ca:06:c1:2c:39:34:e3:47:b3:3c:91:ed:
40:19:e9:9d:2d:63:c8:e4:40:18:cb:af:f5:42:b5:3f:ac:08:
7b:c4:82:ca:5b:53:1e:48:92:8b:74:29:1b:75:52:c2:27:7f:
41:f4:c6:b3:8f:90:b1:a5:4e:99:b9:f2:cb:c1:36:73:38:80:
af:71:6a:15:f8:a1:26:7d:ce:9d:91:de:f5:1c:71:d3:a3:d5:
bc:73:46:4f:ef:26:ee:47:74:90:0b:2d:b7:b8:10:df:2f:71:
42:f2:33:70:ea:e7:03:56:e6:31:db:89:f6:0e:8c:02:df:6a:
ef:17:6e:4e:69:4b:83:ae:89:dd:90:4d:c6:e1:47:53:2a:f7:
07:66:f9:f4:0e:3f:ea:3d:01:ad:5e:4b:e7:d6:d0:85:cd:58:
f8:9f:3c:19:c7:b5:1b:c1:93:83:a3:85:b1:d0:aa:e5:94:77:
8a:2c:09:e6:f8:d5:99:9b:d3:1c:af:1f:ab:ea:2e:25:34:b1:
41:02:39:63:ad:6b:8c:77:d6:97:21:c9:7e:12:71:22:ed:c8:
94:bc:57:35:7c:77:e5:ec:58:7a:6d:78:0f:10:2e:a0:03:6c:
e4:f5:e7:ed:c0:53:c3:83:5f:2b:d9:f1:df:93:17:53:92:24:
bf:74:f4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:12:07 2026 by rpki-client