Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343030303a3a2f34302d3438203d3e203536333637.roa
File: 326130663a316363353a343030303a3a2f34302d3438203d3e203536333637.roa (raw, json)
Hash identifier: DvL79QxUT+j9jbkmaURltEjcp1/uIQGX8Ap7PkNRxCc=
Subject key identifier: 96:CA:3C:FC:15:80:00:67:80:35:24:F4:F6:8A:CD:08:12:2A:2A:D9
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 140974C09DC2A3D91DE38DDA477EEB35A1B7A297
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343030303a3a2f34302d3438203d3e203536333637.roa
Signing time: Wed 01 Jul 2026 15:02:53 +0000
ROA not before: Wed 01 Jul 2026 14:57:53 +0000
ROA not after: Wed 30 Jun 2027 15:02:53 +0000
asID: 56367
IP address blocks: 2a0f:1cc5:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:09:74:c0:9d:c2:a3:d9:1d:e3:8d:da:47:7e:eb:35:a1:b7:a2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jul 1 14:57:53 2026 GMT
Not After : Jun 30 15:02:53 2027 GMT
Subject: CN=96CA3CFC15800067803524F4F68ACD08122A2AD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:49:56:87:c8:c2:04:37:37:b7:94:d5:f2:07:
9a:ff:66:9f:b8:f9:4f:ef:b8:cb:0a:b7:25:51:cc:
75:75:14:25:8e:29:b3:99:ec:bc:2d:a4:38:62:80:
1a:e1:cf:d2:cd:b1:34:77:66:17:08:75:23:de:9a:
5a:b7:52:12:72:1c:02:0f:01:75:ec:7c:19:ec:e9:
82:11:36:ac:08:05:be:4c:8a:9e:c3:65:4f:5c:0f:
4c:f3:ba:c1:5c:e5:9c:c5:82:a3:60:a3:ed:99:b4:
80:d1:a5:97:4d:3c:4c:9f:8d:d3:fb:85:d3:d2:1c:
2b:53:b2:f5:a2:5c:bc:0c:aa:06:a1:c4:e9:71:ef:
8c:aa:b1:6b:bf:0b:34:5e:8c:4e:98:ab:1f:da:f9:
89:d4:43:1a:c2:0a:24:49:f9:34:2b:61:33:ca:2c:
2f:f8:5f:2e:ba:51:8f:ed:3d:05:fc:25:90:10:16:
a9:96:25:06:66:7e:dd:1d:80:54:8e:52:21:1d:da:
6f:ed:61:9d:be:4b:25:3a:a2:4c:ea:7a:16:d0:62:
d8:17:dc:9c:a8:f0:58:a4:71:55:8d:ae:df:3e:30:
11:aa:6b:b4:af:fa:01:b3:ad:f3:92:72:57:75:9e:
7a:1c:1b:d7:e9:5c:d4:68:77:38:95:47:ef:55:2d:
2b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CA:3C:FC:15:80:00:67:80:35:24:F4:F6:8A:CD:08:12:2A:2A:D9
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343030303a3a2f34302d3438203d3e203536333637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:4000::/40
Signature Algorithm: sha256WithRSAEncryption
6e:b2:b9:8c:30:86:00:c7:e0:35:5b:11:c1:00:25:50:48:ae:
1c:5c:29:f6:8b:7e:9f:18:da:da:95:07:02:d5:e4:95:44:df:
fd:b4:a5:61:c7:48:21:c0:8c:bf:db:44:29:3e:2f:d4:93:be:
1c:f4:dc:21:39:1f:72:94:2a:6e:17:4c:3c:bc:b0:dd:bb:0d:
75:82:7d:85:db:7a:86:b3:28:8c:52:94:5a:9d:5b:09:f2:52:
43:c4:dd:86:3c:92:b7:83:05:6c:c7:63:d1:77:ea:cc:45:3f:
55:9a:9b:81:3d:22:69:db:44:77:1e:1a:3d:75:97:69:9b:77:
5b:91:57:76:e8:25:2b:4b:bf:08:63:b6:ff:de:fc:54:7f:1b:
06:dd:b8:1f:9d:5d:53:17:c8:46:8c:f0:d9:e0:3e:96:45:c7:
8c:1a:1f:f5:cf:71:cb:50:03:ef:5f:70:78:18:03:af:55:f1:
0d:ec:b6:e9:c0:81:08:03:8e:94:46:87:02:46:8d:36:88:fa:
ac:41:d3:6f:90:96:fd:7f:0e:b8:56:90:a7:4a:75:a9:40:62:
43:b6:fd:ee:9f:1e:8f:df:2e:24:3b:fd:ba:fe:2c:17:75:ee:
6f:ef:29:33:af:72:90:1f:4c:e6:92:5b:1a:a8:c1:21:92:4b:
f0:36:ef:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:29:03 2026 by rpki-client