Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3430363a3a2f34382d3438203d3e203331383938.roa
File: 326130663a316363353a3430363a3a2f34382d3438203d3e203331383938.roa (raw, json)
Hash identifier: eOqn/me1apu9rE4DB1LXp+jtfU22P4V0cYzAWWn6oH4=
Subject key identifier: C6:B5:22:54:C7:A7:2E:70:33:DB:3D:45:CF:B0:11:B1:3A:6A:1E:95
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 11EBAA22BB7695C71B2F8EF75DF40C2D02048180
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3430363a3a2f34382d3438203d3e203331383938.roa
Signing time: Sun 09 Aug 2026 14:55:08 +0000
ROA not before: Sun 09 Aug 2026 14:50:08 +0000
ROA not after: Sun 08 Aug 2027 14:55:08 +0000
asID: 31898
IP address blocks: 2a0f:1cc5:406::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 11:19:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:eb:aa:22:bb:76:95:c7:1b:2f:8e:f7:5d:f4:0c:2d:02:04:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Aug 9 14:50:08 2026 GMT
Not After : Aug 8 14:55:08 2027 GMT
Subject: CN=C6B52254C7A72E7033DB3D45CFB011B13A6A1E95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:02:8c:d8:68:04:22:40:81:ce:a2:b7:f6:68:
1a:84:ac:25:ec:c5:9a:9f:63:d5:42:33:2c:e4:f0:
60:5d:bc:5c:b6:fa:87:39:ec:47:02:25:88:ab:98:
8a:26:19:90:4d:ba:ab:63:f8:6c:f6:88:3a:af:b1:
6b:9f:f2:a2:78:30:44:11:f4:4b:b6:dc:d8:96:69:
d3:be:51:72:ff:2d:55:42:2c:42:6d:b8:78:7b:66:
53:b0:8e:82:24:63:15:4b:fc:0f:9c:30:64:16:17:
60:e1:a2:ad:2b:e5:6b:40:25:58:be:14:17:12:9d:
69:de:23:d7:44:38:e8:9e:5c:ce:7b:d1:02:68:46:
59:7c:e9:5e:5e:5d:5f:2b:ca:86:2c:ec:ed:4f:08:
ea:03:7f:dc:cd:06:3d:ed:bf:fd:84:52:a6:c2:97:
2e:04:f6:d2:c1:b5:07:d9:17:1a:f3:87:4e:3c:42:
88:ed:b0:10:34:e9:83:cd:a7:3a:b3:03:ec:a8:6a:
98:82:51:47:13:8d:e1:b8:d9:86:f4:9e:0f:df:f8:
a1:43:a8:b1:14:2a:ae:2e:2e:0f:d6:03:a4:12:08:
07:16:65:5c:4e:40:36:31:50:b3:5f:fe:f8:56:ee:
cd:60:d0:38:46:b6:a3:4b:5d:4e:80:ff:7e:97:96:
cf:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B5:22:54:C7:A7:2E:70:33:DB:3D:45:CF:B0:11:B1:3A:6A:1E:95
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3430363a3a2f34382d3438203d3e203331383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:406::/48
Signature Algorithm: sha256WithRSAEncryption
57:52:83:83:2a:c3:9d:06:c6:b6:3d:91:6c:d4:4b:bd:a1:62:
76:a8:80:4e:92:78:2e:6f:18:63:1b:18:dc:aa:32:46:45:70:
34:df:59:f7:0b:2e:7d:c7:72:e8:3a:b4:f7:43:ef:2a:69:d0:
6f:1e:26:89:a4:7a:5e:79:0f:38:72:9d:ea:bd:15:8f:0d:45:
10:82:0f:96:5b:e3:f5:77:4c:6c:9d:ef:e9:34:20:29:54:ad:
f4:3f:05:4d:b2:a2:be:ee:45:71:67:3a:d9:da:f2:6f:96:95:
27:1c:13:12:1b:79:1a:68:e9:ef:c4:80:9e:04:23:79:50:2e:
63:7c:5f:3c:f2:f5:42:29:4d:48:7e:ac:d6:1e:91:13:17:ab:
6c:7c:a9:83:da:0b:3e:06:fb:cd:50:1d:43:b4:74:a4:dc:04:
e8:df:80:00:7c:e9:47:41:01:20:5e:cb:dd:3a:1d:b1:6a:dd:
af:3f:aa:80:3e:8c:c7:33:a5:40:a8:1e:e3:7e:d0:59:c8:c3:
53:6a:fd:ca:b1:e9:4b:f2:09:e3:5d:b2:16:99:83:9e:2e:ee:
99:16:00:66:85:a1:d2:27:37:a0:d5:4d:6f:37:5d:3a:57:fa:
fa:ae:fc:49:8a:1b:64:d4:52:c7:7c:31:96:79:3b:b8:2c:8e:
1d:50:db:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:33:43 2026 by rpki-client