Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343330303a3a2f34302d3438203d3e20323139333937.roa
File: 326130663a316363353a343330303a3a2f34302d3438203d3e20323139333937.roa (raw, json)
Hash identifier: EqRw7R/mL9HEZtS8/EtZwio2dyJhPDD6Kj73PXOvpoI=
Subject key identifier: AB:02:54:55:DD:7E:BB:33:0A:E3:19:BC:0F:E6:8D:6C:FC:FC:2D:78
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 4379F1E8A85ECCECDDF7AF2D2B549DB11AC4BDE7
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343330303a3a2f34302d3438203d3e20323139333937.roa
Signing time: Wed 24 Jun 2026 03:35:48 +0000
ROA not before: Wed 24 Jun 2026 03:30:48 +0000
ROA not after: Wed 23 Jun 2027 03:35:48 +0000
asID: 219397
IP address blocks: 2a0f:1cc5:4300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:79:f1:e8:a8:5e:cc:ec:dd:f7:af:2d:2b:54:9d:b1:1a:c4:bd:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jun 24 03:30:48 2026 GMT
Not After : Jun 23 03:35:48 2027 GMT
Subject: CN=AB025455DD7EBB330AE319BC0FE68D6CFCFC2D78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4c:bb:d2:5e:1b:ec:02:6e:05:3e:5a:05:f5:
dc:ba:5b:93:52:fe:93:a4:34:a7:fc:bd:7c:8a:01:
8f:b9:19:e0:bd:de:4d:f0:43:7a:38:b6:d3:b0:13:
33:fd:6a:01:68:8a:64:7f:df:8c:4d:6a:c0:b8:4d:
5c:e9:d9:e0:12:59:a9:a7:77:95:3d:5d:ba:90:32:
e9:42:f1:45:17:85:57:97:cd:c1:d2:f0:80:b5:d9:
cd:8e:6e:25:4f:a1:dc:dc:ab:84:08:a8:a9:80:2d:
55:c3:c7:a9:d1:9a:07:12:42:65:b7:54:ca:1b:8b:
75:e3:f1:33:21:99:11:b1:a8:17:4a:40:73:51:3e:
ba:a6:9a:9f:75:6f:82:fb:2c:60:f7:5f:8e:62:ca:
64:9f:1d:7e:47:42:2c:a7:03:fa:9c:e6:3c:8a:90:
78:12:32:56:7c:7b:78:68:10:47:23:f7:bb:cc:e5:
ec:59:e5:ab:2f:0d:ad:db:39:94:3d:d1:57:58:07:
24:b3:6c:98:af:e4:25:c0:b3:14:f8:0f:12:71:25:
13:5f:3a:9f:46:c6:c5:03:59:3b:07:09:f5:9e:cf:
7c:a1:55:68:5f:3e:7e:07:79:c2:ae:7e:b3:37:e1:
e5:fe:16:9d:53:f6:2d:8c:98:e6:ef:8f:d5:37:e6:
94:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:02:54:55:DD:7E:BB:33:0A:E3:19:BC:0F:E6:8D:6C:FC:FC:2D:78
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343330303a3a2f34302d3438203d3e20323139333937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:4300::/40
Signature Algorithm: sha256WithRSAEncryption
48:b5:ba:b0:e5:12:e9:f3:12:97:2d:11:ea:b9:0b:1e:51:13:
03:e7:f5:75:19:b2:5e:57:0e:07:65:a1:f0:7c:3e:c2:02:1a:
c7:b6:56:06:03:86:2f:ab:1b:f1:40:cc:8d:07:26:22:c5:28:
e2:a0:42:47:05:fa:a3:25:42:c6:a6:a9:40:a2:07:09:cd:b0:
b6:8d:1b:fb:be:4b:8a:33:ec:c6:7a:c7:32:41:38:52:70:27:
73:d4:4b:cc:31:6a:bf:c1:82:55:5c:21:f1:5b:ec:cb:4e:58:
c9:f9:98:5e:7e:08:c0:ca:0e:03:82:5d:94:99:5d:72:1f:f9:
ed:e2:4f:57:9d:04:46:b1:d1:65:90:38:86:a3:f4:35:60:04:
d7:81:79:03:99:e4:34:43:97:a0:fe:d1:4b:98:6c:65:b0:d4:
bc:cf:0f:79:64:9d:b4:f9:04:44:e3:56:81:a0:8e:51:2b:7c:
0d:d3:39:cf:26:3d:18:26:27:3b:d3:39:1d:ac:7d:19:b9:ce:
dd:de:dc:21:22:a0:55:63:9d:bf:1d:e2:54:64:07:8c:36:7e:
25:fa:f2:83:b8:c9:14:ae:c8:68:1f:5e:48:e8:97:eb:29:49:
58:58:80:01:1a:01:08:d2:11:3d:7f:5a:ef:61:45:4a:33:dc:
5c:2f:a7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:28:55 2026 by rpki-client