Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343530303a3a2f34302d3438203d3e203430313135.roa
File: 326130663a316363353a343530303a3a2f34302d3438203d3e203430313135.roa (raw, json)
Hash identifier: HcqNoP/JLCmK7AE8V3YK9cSEO8KuvRboa7derLli8i0=
Subject key identifier: 57:F2:43:2D:5D:34:25:88:C7:1A:D5:12:74:2B:F7:A0:16:EE:FE:80
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 47B30FC9D500E6BA98575FC285A6F3F43C0B24F3
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343530303a3a2f34302d3438203d3e203430313135.roa
Signing time: Tue 18 Aug 2026 06:36:54 +0000
ROA not before: Tue 18 Aug 2026 06:31:54 +0000
ROA not after: Tue 17 Aug 2027 06:36:54 +0000
asID: 40115
IP address blocks: 2a0f:1cc5:4500::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:b3:0f:c9:d5:00:e6:ba:98:57:5f:c2:85:a6:f3:f4:3c:0b:24:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Aug 18 06:31:54 2026 GMT
Not After : Aug 17 06:36:54 2027 GMT
Subject: CN=57F2432D5D342588C71AD512742BF7A016EEFE80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:13:ca:bc:ee:7e:30:6b:dc:7a:00:56:d3:ff:
47:15:cc:da:b3:7c:84:e5:d1:b5:a4:88:b0:fa:18:
8f:18:64:9b:e4:e9:b3:a9:7b:3d:55:cb:db:75:ac:
9c:e8:20:02:85:3c:c4:4c:97:1d:fc:7c:1e:63:52:
15:9f:8f:6e:e6:d7:1c:89:6a:14:22:d4:44:99:bc:
bd:5c:88:ef:1c:6a:2c:56:8a:70:ba:bd:8d:9f:de:
8a:5a:81:eb:2b:fc:27:aa:5f:df:6f:db:ee:53:71:
02:50:79:1b:f6:af:03:d0:e1:b6:73:83:78:e0:33:
a4:04:10:98:cd:5e:eb:77:72:97:83:d0:90:f7:02:
84:ea:b2:1e:37:32:51:4b:d5:6d:31:64:fc:b4:82:
52:40:9a:01:4e:40:4d:a8:51:a6:84:1d:ac:77:f0:
d6:a2:50:40:c6:a9:fc:ae:1e:ec:ec:0c:9b:4c:53:
d1:e5:35:7d:92:cb:d2:87:ae:a5:44:47:a8:12:ba:
83:2c:ae:60:c5:69:c6:06:89:62:c1:c8:19:cf:7b:
8d:44:25:53:78:46:23:85:74:95:bc:12:b5:ce:c1:
a3:f3:e5:9b:ce:de:0e:83:bb:18:3c:87:93:62:e6:
2a:7f:5a:7c:be:3a:80:8f:dd:f9:2a:ea:52:ac:27:
79:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F2:43:2D:5D:34:25:88:C7:1A:D5:12:74:2B:F7:A0:16:EE:FE:80
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343530303a3a2f34302d3438203d3e203430313135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:4500::/40
Signature Algorithm: sha256WithRSAEncryption
58:47:a5:2a:45:ec:3e:29:7e:dc:08:7b:c8:de:a1:45:4d:29:
91:cb:01:b6:83:77:a3:90:bc:1d:b6:68:57:46:43:d2:a1:69:
87:14:27:a2:69:f7:dc:73:81:85:08:43:ea:0f:1c:a9:a6:28:
d3:bf:e4:10:9c:32:e3:46:32:e7:e8:7a:84:91:11:ed:92:1e:
d6:30:85:62:fe:08:d3:bc:d4:10:de:34:9d:ee:7d:2b:2b:cc:
6d:0e:c7:9f:7c:64:a6:54:cb:10:01:3c:23:7c:c4:b4:f5:47:
70:94:3e:7f:88:1c:aa:a8:be:78:7e:04:8d:69:9b:78:da:d0:
95:49:18:50:62:f7:e2:c5:96:d6:a8:09:4d:92:3d:c7:00:ad:
0c:7c:49:1b:23:f8:cd:96:58:ee:0e:62:88:51:03:c1:7e:ca:
28:4e:6c:0b:45:ec:ba:80:44:1c:72:b1:08:a1:8f:24:23:a6:
b9:4f:57:fb:cd:1e:44:f4:86:de:d7:6a:41:f3:32:01:1f:dc:
b3:6f:81:5a:62:79:af:4a:bc:ab:2e:5a:89:61:82:88:cf:ba:
7e:06:14:d2:3c:29:83:7b:07:41:bf:cb:a7:f4:6b:b9:b4:c5:
bd:1b:1d:8c:48:cb:82:42:fe:f8:44:6a:e7:c0:c8:84:67:38:
5b:3a:06:5e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUR7MPydUA5rqYV1/Chabz9DwLJPMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWJlMjQwMDIxYTI4N2YyOTg5NzNkOWVhMjhkZmM4MDcz
NWZkNTgwMDAeFw0yNjA4MTgwNjMxNTRaFw0yNzA4MTcwNjM2NTRaMDMxMTAvBgNV
BAMTKDU3RjI0MzJENUQzNDI1ODhDNzFBRDUxMjc0MkJGN0EwMTZFRUZFODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiE8q87n4wa9x6AFbT/0cVzNqz
fITl0bWkiLD6GI8YZJvk6bOpez1Vy9t1rJzoIAKFPMRMlx38fB5jUhWfj27m1xyJ
ahQi1ESZvL1ciO8caixWinC6vY2f3opagesr/CeqX99v2+5TcQJQeRv2rwPQ4bZz
g3jgM6QEEJjNXut3cpeD0JD3AoTqsh43MlFL1W0xZPy0glJAmgFOQE2oUaaEHax3
8NaiUEDGqfyuHuzsDJtMU9HlNX2Sy9KHrqVER6gSuoMsrmDFacYGiWLByBnPe41E
JVN4RiOFdJW8ErXOwaPz5ZvO3g6Duxg8h5Ni5ip/Wny+OoCP3fkq6lKsJ3n7AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUV/JDLV00JYjHGtUSdCv3oBbu/oAwHwYDVR0j
BBgwFoAUG+JAAhoofymJc9nqKN/IBzX9WAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0
ZjBlLzAvMUJFMjQwMDIxQTI4N0YyOTg5NzNEOUVBMjhERkM4MDczNUZENTgwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ctSkFBaG9vZnltSmM5bnFLTl9JQnpY
OVdBQS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt
M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzM1
M2EzNDM1MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDM0MzAzMTMxMzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAqDxzFRTANBgkqhkiG9w0BAQsFAAOCAQEAWEelKkXsPil+3Ah7yN6h
RU0pkcsBtoN3o5C8HbZoV0ZD0qFphxQnomn33HOBhQhD6g8cqaYo07/kEJwy40Yy
5+h6hJER7ZIe1jCFYv4I07zUEN40ne59KyvMbQ7Hn3xkplTLEAE8I3zEtPVHcJQ+
f4gcqqi+eH4EjWmbeNrQlUkYUGL34sWW1qgJTZI9xwCtDHxJGyP4zZZY7g5iiFED
wX7KKE5sC0XsuoBEHHKxCKGPJCOmuU9X+80eRPSG3tdqQfMyAR/cs2+BWmJ5r0q8
qy5aiWGCiM+6fgYU0jwpg3sHQb/Lp/RrubTFvRsdjEjLgkL++ERq58DIhGc4WzoG
Xg==
-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:39 2026 by rpki-client