Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3430303a3a2f34302d3438203d3e20323033393233.roa
File: 326130663a316363353a3430303a3a2f34302d3438203d3e20323033393233.roa (raw, json)
Hash identifier: eOSfYoOlB/Y4phLvMLHUZfEuF0vP6ksZCv4EwgFy0wo=
Subject key identifier: 66:4F:C0:16:90:68:EE:1D:DF:A2:C2:82:36:B9:BF:2B:91:91:DD:45
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 1C38A84BF24195216B02851103EA2940BEE89124
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3430303a3a2f34302d3438203d3e20323033393233.roa
Signing time: Tue 02 Jun 2026 12:18:09 +0000
ROA not before: Tue 02 Jun 2026 12:13:09 +0000
ROA not after: Tue 01 Jun 2027 12:18:09 +0000
asID: 203923
IP address blocks: 2a0f:1cc5:400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:38:a8:4b:f2:41:95:21:6b:02:85:11:03:ea:29:40:be:e8:91:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jun 2 12:13:09 2026 GMT
Not After : Jun 1 12:18:09 2027 GMT
Subject: CN=664FC0169068EE1DDFA2C28236B9BF2B9191DD45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b6:3a:c2:da:8b:a6:d1:4d:9f:7b:a0:68:e0:
53:77:8f:86:fd:62:2c:61:a0:af:18:84:6f:1c:64:
ea:aa:30:51:66:36:04:b1:1d:6f:05:0e:21:a4:b2:
44:ee:93:fa:c9:da:c8:45:10:a8:72:b0:72:eb:98:
8f:3b:60:64:70:7c:ac:c0:3b:80:c9:5d:4f:cf:48:
5f:46:97:48:20:ba:cd:93:81:34:a7:9d:51:f5:63:
6b:80:d9:a0:32:58:7d:34:c8:a3:15:d1:3c:de:85:
3c:ff:3d:82:1c:ab:b1:31:3f:9a:29:8d:9d:73:2b:
71:9d:82:6a:64:0e:14:63:28:de:bb:8f:64:ea:8a:
09:af:89:5c:2d:c0:a3:9d:25:0c:db:cd:4b:88:a0:
6a:4e:44:96:c8:93:c6:1d:ea:d4:d3:1e:d7:cc:30:
fb:5c:74:7e:65:5f:63:ea:f5:4d:3c:bc:e8:d7:1f:
bc:ec:36:52:ad:71:8c:cd:aa:18:cc:23:4a:dc:e4:
12:ea:51:d6:6c:37:cb:f0:6b:22:f1:cf:00:89:b3:
06:a0:d6:63:e9:51:92:84:56:7a:03:23:aa:87:f3:
90:a5:aa:84:84:dd:d0:ba:00:38:95:ae:23:f9:b5:
f0:48:60:27:a5:99:43:88:4d:85:a5:20:c8:06:6c:
17:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4F:C0:16:90:68:EE:1D:DF:A2:C2:82:36:B9:BF:2B:91:91:DD:45
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3430303a3a2f34302d3438203d3e20323033393233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:400::/40
Signature Algorithm: sha256WithRSAEncryption
7b:b1:8a:5c:1d:a8:cf:29:05:77:b8:f0:0f:3b:96:70:43:ba:
b2:92:ab:62:78:2d:5c:eb:59:20:f5:d3:33:e7:91:73:47:6a:
d5:c8:b1:a6:4a:00:7b:cf:ef:00:44:39:3e:0a:51:76:25:cb:
14:ad:a3:0a:80:b6:c6:98:ab:37:8c:ce:99:ae:39:6f:83:45:
6b:8a:1f:23:64:5b:29:6e:aa:22:ec:c0:4e:2b:c4:58:1f:61:
c7:42:8b:38:af:b1:73:6d:90:69:b8:52:80:b4:09:57:fb:99:
d6:bb:54:44:9f:ef:73:89:ee:d1:99:d5:1e:c4:2a:25:e2:df:
1e:01:bc:e1:94:2f:6c:12:d8:ea:70:24:c5:5c:bd:82:c6:bd:
c8:77:fd:30:3d:51:3a:9d:35:ad:92:31:21:d2:62:e4:57:15:
f1:0e:1d:07:bc:c7:16:55:fb:14:85:d5:ae:47:bf:86:e2:bc:
45:c2:3a:be:da:1c:b4:e0:1a:4f:3d:a4:55:3e:a5:83:70:a0:
fd:20:73:42:ce:a0:cb:29:da:12:60:ab:9a:05:54:9a:53:72:
61:00:27:95:d3:b6:b5:c4:13:92:0a:b6:9f:e5:f3:62:b9:a7:
d1:ef:2e:21:81:9e:65:3a:bc:bd:b0:cd:1b:bd:60:c1:7f:9f:
66:e3:77:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:26:48 2026 by rpki-client