Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343130303a3a2f34302d3438203d3e203538303632.roa
File: 326130663a316363353a343130303a3a2f34302d3438203d3e203538303632.roa (raw, json)
Hash identifier: o4Iwpq2SqCJ2nf2Kj8M7rJXxXmd0AVEOq1vZpbM2eGQ=
Subject key identifier: 7C:3D:F0:DD:5E:5D:02:6E:F4:F0:53:D2:19:07:29:A1:1D:34:90:58
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 03DA601527A894D940A73E8793ED221C5DF0ABC7
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343130303a3a2f34302d3438203d3e203538303632.roa
Signing time: Wed 17 Jun 2026 21:48:13 +0000
ROA not before: Wed 17 Jun 2026 21:43:13 +0000
ROA not after: Wed 16 Jun 2027 21:48:13 +0000
asID: 58062
IP address blocks: 2a0f:1cc5:4100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:da:60:15:27:a8:94:d9:40:a7:3e:87:93:ed:22:1c:5d:f0:ab:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jun 17 21:43:13 2026 GMT
Not After : Jun 16 21:48:13 2027 GMT
Subject: CN=7C3DF0DD5E5D026EF4F053D2190729A11D349058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:be:0f:14:27:7f:d6:7b:a2:23:44:f6:8b:b2:
58:e6:5f:0c:08:af:27:38:18:c3:22:f5:02:f8:30:
da:f1:98:ef:c9:2a:c8:53:18:38:56:ec:85:be:e4:
3c:0a:1c:de:84:3d:d4:71:11:48:72:f8:7f:0c:a8:
0d:ac:0f:8f:e7:b9:03:a4:10:07:c8:92:48:26:1f:
96:a5:a6:21:c8:18:0c:70:60:46:12:ff:a2:f0:28:
58:43:1a:83:bd:ad:72:b3:ab:27:f4:a4:d8:fd:34:
c0:41:ef:c0:c4:77:f2:5c:ef:35:e9:1e:bb:15:57:
ea:6a:71:b2:58:75:66:69:2b:79:c7:19:be:2a:c8:
21:55:42:3e:08:55:3e:9e:91:91:80:d7:8c:ed:65:
79:1a:f1:8c:42:b0:9a:d5:e2:99:ec:37:f0:7f:54:
a1:cb:c4:85:d8:58:7f:ae:e4:14:50:81:1f:49:c1:
49:67:86:bb:4b:69:15:ab:90:8a:81:be:26:64:98:
6a:b2:9a:de:3c:80:45:83:b1:6a:b9:66:70:f4:58:
ce:41:22:b7:34:03:eb:8b:57:47:0f:e0:be:7d:43:
86:8f:b7:26:ce:3d:41:07:88:63:f6:8a:b2:bc:f9:
4a:be:d3:da:06:1b:39:81:69:34:f4:80:89:0c:88:
d0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3D:F0:DD:5E:5D:02:6E:F4:F0:53:D2:19:07:29:A1:1D:34:90:58
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343130303a3a2f34302d3438203d3e203538303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:4100::/40
Signature Algorithm: sha256WithRSAEncryption
47:1f:95:29:01:db:9f:b4:5d:ef:5b:dd:16:08:f4:1a:17:f1:
12:6a:15:98:43:30:02:c8:bf:c7:14:10:36:4a:17:ae:6d:e6:
fe:19:70:d7:f7:a6:a9:e9:af:29:3a:49:78:4b:71:e7:72:06:
67:49:42:47:81:19:ac:b6:53:bf:76:b3:eb:a6:29:63:81:56:
66:85:1e:1f:cf:cb:91:f4:2a:f2:93:a2:55:d9:59:62:da:09:
1a:8d:b5:84:50:82:ac:ea:36:2e:c8:64:16:b3:a0:58:bf:e5:
5c:a0:30:67:07:ab:aa:8d:da:a1:bd:41:cf:c1:06:06:b2:e9:
e0:66:57:e3:15:c5:36:9d:a4:4a:48:b3:ba:52:13:16:b5:b4:
89:8c:e5:d0:13:1f:e6:25:34:19:c5:dd:76:ba:24:a0:94:a2:
41:35:90:3d:aa:2f:b5:50:f9:8a:1b:61:22:7f:32:5a:a0:25:
ba:01:5a:68:f3:d2:ae:76:6a:76:4a:f1:f9:42:06:82:64:9b:
d0:e8:cf:b4:6e:fd:e4:da:64:40:a0:c8:30:d4:6f:ff:95:2c:
2f:8a:33:6a:fc:8f:54:0b:a0:82:17:05:f6:df:6c:ad:3d:9e:
78:cc:be:9c:a0:c1:a2:a5:50:f8:ff:0e:60:69:18:30:97:c7:
b8:ed:38:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:10 2026 by rpki-client