Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a333231303a3a2f34342d3434203d3e20313938363831.roa
File: 326130663a316363353a333231303a3a2f34342d3434203d3e20313938363831.roa (raw, json)
Hash identifier: lX+IJtMM2rRoT0ogkR91fMn2dG5dh6VhQ2s5YeYW1fM=
Subject key identifier: E3:E8:70:22:80:3F:DB:AF:B0:3E:80:25:F2:6E:0F:88:A9:94:06:3F
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 7DB6F86D09E8EBC864E51FCDEB15C6DFA825FB1E
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a333231303a3a2f34342d3434203d3e20313938363831.roa
Signing time: Sun 27 Sep 2026 17:39:41 +0000
ROA not before: Sun 27 Sep 2026 17:34:41 +0000
ROA not after: Sun 26 Sep 2027 17:39:41 +0000
asID: 198681
IP address blocks: 2a0f:1cc5:3210::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:b6:f8:6d:09:e8:eb:c8:64:e5:1f:cd:eb:15:c6:df:a8:25:fb:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Sep 27 17:34:41 2026 GMT
Not After : Sep 26 17:39:41 2027 GMT
Subject: CN=E3E87022803FDBAFB03E8025F26E0F88A994063F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:99:95:72:76:d4:c1:40:18:22:09:80:14:dc:
f0:5f:25:a9:0d:25:e0:5d:da:fc:c8:73:e8:97:7e:
ed:cc:c6:4b:4d:ec:2c:1a:29:84:7a:ca:1d:ec:2d:
6a:1f:04:2d:f8:f2:d0:0b:70:ae:a1:81:36:3a:ef:
c9:2d:bf:8a:6b:c9:37:2c:37:f5:44:39:16:58:cd:
36:44:ac:97:45:33:8f:39:80:d9:c7:93:26:56:c2:
11:2e:f4:2f:55:e4:5b:15:a2:92:c4:9f:fa:04:b9:
f0:67:9f:4c:f2:c3:86:13:02:0a:bc:d4:63:1a:42:
f5:ae:78:c6:17:56:a2:dd:29:48:e0:e0:52:c4:ae:
14:c3:91:9c:be:ed:53:fe:aa:e0:0d:01:47:20:19:
c9:21:31:da:37:37:a5:56:1b:17:a9:ee:56:5d:ee:
e5:6b:e9:1f:57:fa:42:af:2c:08:02:d3:ca:25:ea:
26:2e:d5:f2:de:f9:16:da:a1:5f:e2:90:cc:ff:0e:
ea:54:ed:23:e9:ce:ec:c2:9f:97:b1:c0:87:d9:13:
33:8c:bb:87:7f:f9:76:5b:45:de:a9:66:4b:32:21:
45:cb:5b:40:cc:99:b7:d1:1b:72:00:de:22:d5:df:
4a:80:7a:50:15:a7:08:59:72:bd:c1:ad:97:fe:7a:
1d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E8:70:22:80:3F:DB:AF:B0:3E:80:25:F2:6E:0F:88:A9:94:06:3F
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a333231303a3a2f34342d3434203d3e20313938363831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:3210::/44
Signature Algorithm: sha256WithRSAEncryption
66:64:78:cb:c1:d7:78:00:d1:a0:b6:95:04:eb:02:7d:58:77:
9d:70:63:71:6b:a8:2f:d7:02:bd:90:c1:5e:aa:6e:cb:f3:80:
fa:23:b3:4c:f6:dc:df:e8:ef:81:96:f5:f8:cb:ff:81:ce:ca:
5e:9d:f5:82:c0:6a:e4:28:b9:d5:88:b3:b6:61:05:97:92:6f:
f9:01:ad:73:a5:37:f2:34:1e:56:a6:27:2b:ec:f0:92:65:f6:
69:f3:54:b5:a2:df:6e:64:6e:75:ee:85:43:75:ca:12:7b:05:
cb:97:15:8c:5f:3c:aa:0d:bf:18:13:e9:87:50:f3:df:92:0b:
dd:96:0b:54:ea:2e:fb:8c:fc:10:05:3e:22:33:98:30:7d:ef:
3b:95:02:69:39:ce:c7:c4:08:55:61:41:ad:27:90:df:ed:c1:
92:f4:93:23:35:34:61:ad:aa:df:b1:11:da:13:d8:d8:b3:53:
55:71:1d:ac:20:6b:23:f2:0d:33:21:9f:8c:b3:88:34:3d:23:
05:12:3b:8b:a3:c9:35:f9:0a:ff:41:7d:e9:da:2b:76:00:4c:
16:ed:d0:fd:fb:1d:0a:59:23:40:4c:b3:a2:45:54:ab:3f:ff:
0b:fd:21:61:90:d1:1f:8c:56:16:62:ed:e2:1b:d4:05:51:40:
72:9e:a1:05
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUfbb4bQno68hk5R/N6xXG36gl+x4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWJlMjQwMDIxYTI4N2YyOTg5NzNkOWVhMjhkZmM4MDcz
NWZkNTgwMDAeFw0yNjA5MjcxNzM0NDFaFw0yNzA5MjYxNzM5NDFaMDMxMTAvBgNV
BAMTKEUzRTg3MDIyODAzRkRCQUZCMDNFODAyNUYyNkUwRjg4QTk5NDA2M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVmZVydtTBQBgiCYAU3PBfJakN
JeBd2vzIc+iXfu3MxktN7CwaKYR6yh3sLWofBC348tALcK6hgTY678ktv4pryTcs
N/VEORZYzTZErJdFM485gNnHkyZWwhEu9C9V5FsVopLEn/oEufBnn0zyw4YTAgq8
1GMaQvWueMYXVqLdKUjg4FLErhTDkZy+7VP+quANAUcgGckhMdo3N6VWGxep7lZd
7uVr6R9X+kKvLAgC08ol6iYu1fLe+RbaoV/ikMz/DupU7SPpzuzCn5exwIfZEzOM
u4d/+XZbRd6pZksyIUXLW0DMmbfRG3IA3iLV30qAelAVpwhZcr3BrZf+eh35AgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQU4+hwIoA/26+wPoAl8m4PiKmUBj8wHwYDVR0j
BBgwFoAUG+JAAhoofymJc9nqKN/IBzX9WAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0
ZjBlLzAvMUJFMjQwMDIxQTI4N0YyOTg5NzNEOUVBMjhERkM4MDczNUZENTgwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ctSkFBaG9vZnltSmM5bnFLTl9JQnpY
OVdBQS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt
M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzM1
M2EzMzMyMzEzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMxMzkzODM2MzgzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHBCoPHMUyEDANBgkqhkiG9w0BAQsFAAOCAQEAZmR4y8HXeADRoLaV
BOsCfVh3nXBjcWuoL9cCvZDBXqpuy/OA+iOzTPbc3+jvgZb1+Mv/gc7KXp31gsBq
5Ci51YiztmEFl5Jv+QGtc6U38jQeVqYnK+zwkmX2afNUtaLfbmRude6FQ3XKEnsF
y5cVjF88qg2/GBPph1Dz35IL3ZYLVOou+4z8EAU+IjOYMH3vO5UCaTnOx8QIVWFB
rSeQ3+3BkvSTIzU0Ya2q37ER2hPY2LNTVXEdrCBrI/INMyGfjLOIND0jBRI7i6PJ
NfkK/0F96dordgBMFu3Q/fsdClkjQEyzokVUqz//C/0hYZDRH4xWFmLt4hvUBVFA
cp6hBQ==
-----END CERTIFICATE-----
Generated at Tue Oct 20 18:36:04 2026 by rpki-client