Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343530303a3a2f34302d3438203d3e20323139333738.roa
File: 326130663a316363353a343530303a3a2f34302d3438203d3e20323139333738.roa (raw, json)
Hash identifier: LMv6IypLw55wrHQt1ohGjBI+sZfyifaVtkDwDCLCo2w=
Subject key identifier: F7:6E:48:33:96:1A:6A:9F:4D:14:2B:F5:A1:82:7A:7B:CA:C6:27:F1
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 3D7B791ACF6913AE781711C75BC2345FABB0E356
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343530303a3a2f34302d3438203d3e20323139333738.roa
Signing time: Thu 02 Jul 2026 03:59:42 +0000
ROA not before: Thu 02 Jul 2026 03:54:42 +0000
ROA not after: Thu 01 Jul 2027 03:59:42 +0000
asID: 219378
IP address blocks: 2a0f:1cc5:4500::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:7b:79:1a:cf:69:13:ae:78:17:11:c7:5b:c2:34:5f:ab:b0:e3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jul 2 03:54:42 2026 GMT
Not After : Jul 1 03:59:42 2027 GMT
Subject: CN=F76E4833961A6A9F4D142BF5A1827A7BCAC627F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:52:73:50:8b:eb:93:09:e5:8a:3a:b6:37:
7f:f9:78:07:9a:ad:eb:7e:7f:73:c7:c0:c3:ac:b6:
ae:4b:5e:89:06:e1:52:5d:22:6f:90:0f:c7:79:a4:
ab:96:e8:21:90:47:35:5e:98:e4:b5:4c:6e:18:c0:
b8:70:dd:af:17:4f:d9:1b:95:ba:fa:f9:a9:ad:d4:
bb:31:d2:46:e1:44:36:1c:16:04:78:af:67:ba:9d:
ab:fe:ce:48:ad:aa:73:ee:ab:5c:ff:61:4f:f3:56:
b2:53:ed:83:1e:2f:87:af:a9:d4:fa:2f:10:10:43:
37:95:a5:84:08:84:c7:80:5e:3c:89:1b:ac:77:52:
c3:e6:ad:3d:79:82:79:44:6e:62:e9:c9:e7:b4:1a:
5e:de:ff:02:ac:c2:c6:33:e1:5b:9f:db:22:47:37:
d1:55:7a:97:15:65:81:dd:ff:c8:5b:c1:b7:33:b5:
45:3a:31:ee:3f:64:c0:cd:d8:ec:18:5c:64:fd:27:
f7:84:46:1f:ca:95:b0:4f:ba:fd:8c:f6:f5:9f:25:
a3:45:45:d2:44:c5:00:8f:ba:28:2b:a3:58:03:8a:
95:a4:7b:27:13:74:12:e6:36:31:61:1d:d2:4f:a6:
b5:2e:85:27:3b:13:9f:85:ce:cd:1a:86:ff:62:c3:
93:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6E:48:33:96:1A:6A:9F:4D:14:2B:F5:A1:82:7A:7B:CA:C6:27:F1
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343530303a3a2f34302d3438203d3e20323139333738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:4500::/40
Signature Algorithm: sha256WithRSAEncryption
3e:cd:e4:47:b7:c2:3a:51:dd:f5:56:04:2b:c5:2e:e9:15:6a:
26:23:3c:1a:ab:f4:88:b4:4d:21:a9:a0:4f:97:fb:b5:42:05:
a3:15:b2:ad:03:53:0a:b6:d3:25:c7:c4:59:aa:c5:56:d3:ac:
82:a5:1d:05:6c:ce:6e:fb:ad:da:16:26:4f:40:88:59:92:7d:
ab:ef:1f:a2:db:ba:52:fd:c3:55:11:73:28:d5:68:28:e7:dd:
33:2c:07:ee:28:02:16:93:51:e3:b4:3f:1f:11:56:7a:6f:c7:
46:15:0b:db:72:a1:c6:6d:7d:70:67:ab:19:1b:e9:81:55:8e:
aa:fd:d1:5f:e3:91:66:6f:34:4f:f0:62:e6:7a:62:83:be:3f:
b6:45:15:39:fd:c4:13:16:e9:76:16:c8:e4:9e:be:2e:ec:c5:
77:7c:ed:67:bb:83:4b:a7:92:53:74:bc:f5:ea:d3:c3:74:8e:
bb:05:2b:50:6c:63:dd:13:c2:c9:0e:2d:21:53:9d:e6:97:5c:
3f:ba:b9:be:f3:1d:87:b9:19:76:aa:b0:4f:25:3b:20:72:fb:
0f:32:b5:ee:ff:6b:dd:f2:ba:24:db:9c:ae:5b:8f:5d:19:6f:
7b:c5:32:00:ea:59:66:86:25:3a:67:df:e4:dd:22:fb:a2:15:
df:fc:e7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:28:57 2026 by rpki-client