Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a333230303a3a2f34382d3438203d3e20313938363831.roa
File: 326130663a316363353a333230303a3a2f34382d3438203d3e20313938363831.roa (raw, json)
Hash identifier: y3qMqUdUZkVR41+u2FxywzGwBN6pvme0Z4yVfj7rTRw=
Subject key identifier: 00:2D:19:AB:24:82:3E:82:CA:F2:F8:87:F3:3A:6E:42:96:FF:30:DE
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 4DC1DDA1A59752A25BBA86DC17E4F594118CE197
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a333230303a3a2f34382d3438203d3e20313938363831.roa
Signing time: Sun 27 Sep 2026 17:37:39 +0000
ROA not before: Sun 27 Sep 2026 17:32:39 +0000
ROA not after: Sun 26 Sep 2027 17:37:39 +0000
asID: 198681
IP address blocks: 2a0f:1cc5:3200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 04:51:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:c1:dd:a1:a5:97:52:a2:5b:ba:86:dc:17:e4:f5:94:11:8c:e1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Sep 27 17:32:39 2026 GMT
Not After : Sep 26 17:37:39 2027 GMT
Subject: CN=002D19AB24823E82CAF2F887F33A6E4296FF30DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:af:35:8c:1d:14:eb:4e:bd:00:eb:29:c9:33:
df:b2:59:43:2d:0d:47:b8:03:d7:85:67:7c:bf:ed:
d4:71:c8:fe:c1:40:bd:5e:5e:4d:97:8b:9b:0d:22:
9a:bf:7c:d8:c7:f0:14:cd:5c:de:b6:69:38:d9:a7:
9e:ef:29:f1:1c:87:15:a7:06:63:72:e1:2e:ff:e4:
44:41:45:fc:80:4e:a8:93:96:fc:d5:f6:77:9d:a4:
49:8e:72:f2:ce:b9:58:8e:af:88:3c:0d:cb:53:80:
32:fc:b8:6d:9c:bc:43:d1:e3:bf:c2:47:59:af:1d:
d0:86:d4:4c:bf:43:fa:d2:9a:b5:f0:91:dc:1b:66:
53:3d:57:df:b4:f8:fb:dd:17:13:76:40:51:e6:e9:
ec:10:87:55:2c:84:68:84:90:89:b5:85:ed:78:ce:
f9:b0:5e:92:01:a8:ba:6e:6e:b4:5a:e7:4c:a9:9b:
b0:9d:66:fb:ce:96:3d:2e:90:a8:8b:20:48:c0:e4:
8c:8e:dd:c9:62:a0:40:36:7a:b0:ec:23:ab:9f:e4:
26:5e:58:bd:43:d5:44:1a:d6:f0:6f:7c:69:88:9c:
2f:b2:18:96:5b:c7:32:e9:bf:9c:26:85:ba:80:09:
4b:2e:5e:bc:5c:75:5f:06:05:ef:f4:9d:5e:31:4b:
be:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2D:19:AB:24:82:3E:82:CA:F2:F8:87:F3:3A:6E:42:96:FF:30:DE
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a333230303a3a2f34382d3438203d3e20313938363831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:3200::/48
Signature Algorithm: sha256WithRSAEncryption
73:63:7c:cd:3a:1e:d0:2c:d0:48:ea:68:a2:fe:49:0c:09:30:
04:bd:da:7f:49:cf:a5:4f:da:85:95:d5:4c:a0:30:2b:64:95:
a5:b9:14:32:98:cf:eb:8c:7d:7f:bc:e3:e6:66:72:7e:2b:44:
ac:6f:ef:5b:4a:f5:44:19:a1:40:82:eb:10:46:f3:82:8f:88:
64:e9:60:cf:5b:28:1b:f1:5c:c2:29:1a:ae:62:f7:78:e2:af:
99:80:c3:2c:41:e1:a5:e7:d5:1f:41:77:e4:28:78:2f:69:02:
be:56:26:d4:eb:24:d8:cf:30:06:bc:c7:c1:28:86:40:af:78:
e0:2d:67:06:af:7e:dc:67:93:92:66:eb:46:c8:b9:b1:b8:b3:
c1:e4:e9:ae:84:f9:90:d5:b1:6f:59:5a:e6:cc:8c:fc:8e:7e:
ed:40:4a:f9:85:6a:88:9d:2e:5f:e8:e2:a3:ba:43:40:0d:8f:
6e:d5:28:2e:a5:57:b0:97:3d:cc:e9:ac:b5:33:b0:88:7d:f2:
18:ae:9e:73:c7:b3:85:da:83:f4:37:bb:9c:c8:2b:d7:dc:63:
74:ca:25:11:9d:26:c0:02:ba:08:b7:bc:73:4e:60:e0:25:ce:
8f:7e:03:9a:ef:99:36:26:ce:67:6e:40:a0:32:26:e5:0b:d5:
57:45:dc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:45:58 2026 by rpki-client