Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343130303a3a2f34302d3438203d3e203531303331.roa
File: 326130663a316363353a343130303a3a2f34302d3438203d3e203531303331.roa (raw, json)
Hash identifier: hksC2+8eQ59da+mJ3hjnsNE1rwzvqfAILMyIIYvArgA=
Subject key identifier: B7:7E:32:6D:E4:99:81:FC:01:57:76:62:E6:4E:71:5C:EE:E7:1C:51
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 656F9D68A89E85327E037B56491852A5D5681CE7
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343130303a3a2f34302d3438203d3e203531303331.roa
Signing time: Wed 17 Jun 2026 21:47:39 +0000
ROA not before: Wed 17 Jun 2026 21:42:39 +0000
ROA not after: Wed 16 Jun 2027 21:47:39 +0000
asID: 51031
IP address blocks: 2a0f:1cc5:4100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Jun 2026 13:08:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:6f:9d:68:a8:9e:85:32:7e:03:7b:56:49:18:52:a5:d5:68:1c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jun 17 21:42:39 2026 GMT
Not After : Jun 16 21:47:39 2027 GMT
Subject: CN=B77E326DE49981FC01577662E64E715CEEE71C51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:14:a7:d4:4e:b5:d0:bd:aa:4b:84:7a:1a:b0:
4e:80:f7:c5:1e:dd:eb:50:1d:76:d1:a7:87:10:4c:
5b:f3:00:23:5e:e8:c8:f1:68:19:83:15:72:97:8d:
a8:cb:a8:8b:fd:b4:2c:61:36:3b:d8:eb:f5:a1:5d:
d5:71:69:a7:83:fd:a7:bb:34:2a:91:a2:90:96:ce:
54:c1:ee:a0:8b:dd:59:67:8f:26:bf:45:8c:dc:43:
86:3d:e8:1a:0c:03:66:9c:f9:32:b6:7a:ac:96:7f:
ae:de:56:5a:94:25:10:ab:dd:1e:f7:65:6e:31:0b:
b3:7b:f0:1c:cf:08:e3:87:09:e5:2a:79:03:0a:ef:
31:2e:ef:29:a1:3d:1a:de:aa:ec:ba:e9:32:83:08:
89:ab:e9:9d:f5:86:6f:55:4c:6b:a7:41:07:60:df:
bc:93:56:f6:02:6c:e1:af:12:7c:f5:fd:99:a0:be:
4b:18:95:72:58:0b:82:54:5e:63:2c:4e:3f:d2:32:
a1:dc:03:a8:67:0a:86:b1:4a:96:24:c1:c9:d5:90:
8b:0c:79:5e:43:63:e7:8a:ad:b2:e0:d6:b7:6d:3c:
aa:e6:d6:25:85:77:a2:ba:69:39:65:68:2f:3d:f1:
11:b2:99:fc:84:9c:45:cf:92:44:76:09:1b:fd:87:
a2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7E:32:6D:E4:99:81:FC:01:57:76:62:E6:4E:71:5C:EE:E7:1C:51
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343130303a3a2f34302d3438203d3e203531303331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:4100::/40
Signature Algorithm: sha256WithRSAEncryption
12:0f:ce:e6:fb:e2:6b:bf:f8:e3:00:3d:37:ab:87:9c:e2:ff:
26:be:b7:09:62:c3:40:6f:4d:a4:9a:f8:eb:c0:9a:20:ac:1b:
75:93:af:8d:9c:cd:a4:d2:f3:ca:93:7d:e1:81:91:34:33:94:
49:d2:1a:c2:3d:bf:fe:63:fa:9f:a2:5a:e6:07:d9:39:70:6d:
7d:5d:74:e9:2f:e8:7a:cf:41:c7:8a:85:8e:79:9f:a2:4e:1b:
4b:77:f3:34:6c:7d:aa:01:7a:ef:16:ea:9d:ca:ba:45:71:53:
ae:0c:fe:1d:23:26:c2:f8:18:1a:03:e4:10:9a:c0:8d:97:8f:
7e:0d:0c:80:f2:0f:ac:83:68:65:73:5f:e6:59:16:4b:88:a7:
c7:cf:02:02:82:65:07:a1:f9:66:13:f9:1c:1c:9e:c3:58:0e:
a2:13:2d:43:1b:33:02:9c:28:73:57:ea:80:ad:05:01:b7:7d:
3f:0d:ed:3e:be:f3:3b:7b:78:25:81:16:dc:89:32:f2:38:53:
fb:c1:47:58:01:39:f8:39:ee:c6:1d:52:58:46:49:ae:7b:b5:
73:1d:5a:76:f3:14:a1:b6:bd:16:ec:9a:53:c2:b6:eb:80:d1:
f8:53:79:d3:ec:69:c9:4b:9e:54:15:e5:29:7f:85:4a:7a:b7:
a0:79:e9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 18:53:32 2026 by rpki-client