Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343630303a3a2f34302d3430203d3e203434333234.roa
File: 326130663a316363353a343630303a3a2f34302d3430203d3e203434333234.roa (raw, json)
Hash identifier: ZPR9F8Dx7oAO4c1ma+eTltnaYbYlknabfWEq/UAnufA=
Subject key identifier: 76:A0:74:D5:3E:05:F7:F0:89:DC:A2:E0:0A:5E:D6:A4:75:05:3B:00
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 6708CE4EE5D62004FED9019BF7A91FF19071A39B
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343630303a3a2f34302d3430203d3e203434333234.roa
Signing time: Sat 22 Aug 2026 06:27:59 +0000
ROA not before: Sat 22 Aug 2026 06:22:59 +0000
ROA not after: Sat 21 Aug 2027 06:27:59 +0000
asID: 44324
IP address blocks: 2a0f:1cc5:4600::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:08:ce:4e:e5:d6:20:04:fe:d9:01:9b:f7:a9:1f:f1:90:71:a3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Aug 22 06:22:59 2026 GMT
Not After : Aug 21 06:27:59 2027 GMT
Subject: CN=76A074D53E05F7F089DCA2E00A5ED6A475053B00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d5:23:6f:1c:a0:e2:85:48:12:44:4f:23:47:
58:8b:77:39:ec:7e:be:e0:1a:07:8e:c8:31:eb:8b:
56:79:f6:d0:6d:4b:d1:b1:1d:3e:2a:0f:f2:a5:62:
91:03:3c:a4:ab:00:5c:49:80:82:dc:d3:dd:31:2d:
1b:4d:de:b5:56:f6:3a:c0:a2:85:c0:82:8b:af:0e:
6e:16:56:3c:47:f0:eb:df:cd:85:53:22:74:1f:7c:
fb:ca:f7:64:88:a6:51:65:41:f4:33:2b:1c:db:df:
4e:ac:73:2e:93:2d:e1:5b:d7:14:42:09:d6:dd:ab:
75:b5:45:44:ef:98:79:24:1d:26:cc:a6:58:e6:c1:
f5:44:52:ca:c6:bd:16:14:71:4e:74:0f:41:89:1e:
06:1c:74:35:aa:19:a9:0d:89:17:50:03:8a:0f:7f:
7f:d2:fb:aa:ec:9e:8b:c3:10:0c:70:a4:60:1c:99:
6d:ae:64:4e:e5:e1:7f:15:6c:65:4d:0f:43:8f:70:
b5:12:24:fe:ca:45:1e:17:13:32:a9:c5:95:a5:8e:
f3:ca:8f:23:d5:14:fb:cf:81:7c:4b:25:9b:69:75:
cb:af:96:ce:f5:a1:24:b7:7e:77:10:95:02:db:1e:
88:5b:02:e5:6e:bb:ed:57:79:7a:be:da:80:0b:69:
27:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A0:74:D5:3E:05:F7:F0:89:DC:A2:E0:0A:5E:D6:A4:75:05:3B:00
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343630303a3a2f34302d3430203d3e203434333234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:4600::/40
Signature Algorithm: sha256WithRSAEncryption
12:13:4e:29:b3:49:bd:71:6e:35:4c:5d:69:bd:d0:72:83:e1:
b3:90:af:76:4e:12:46:9c:f9:41:34:4a:77:27:8e:3f:0d:9d:
9a:0f:3a:0a:09:cb:96:3d:7e:f5:2e:29:6f:9b:0d:09:b7:52:
7f:49:69:58:46:da:37:c8:4e:dd:4f:61:21:9c:bb:0a:bd:7e:
e9:2e:5f:14:6a:48:8a:bb:5a:bc:ce:8d:c6:6a:e4:c5:c2:ae:
1a:2f:b6:05:33:a6:d3:a6:82:fc:9d:dd:f4:e5:d0:10:04:18:
ea:2c:70:7c:7c:8d:21:21:c6:e6:89:f9:95:0d:36:4f:ee:30:
c4:2c:c5:f2:e2:30:64:8d:2e:3e:b1:fe:8c:a4:10:c4:c8:7d:
13:44:e0:00:4b:70:c8:ac:40:e0:21:f8:7d:f3:f3:4d:e3:b3:
65:73:e5:e6:91:65:1b:d6:89:74:61:43:b6:8a:df:01:7f:1f:
40:a2:dd:6b:8c:af:ec:0e:0e:91:20:c3:be:80:7d:49:8f:41:
43:77:43:67:62:79:d3:ad:f7:d6:1a:0a:2f:e0:f1:5c:89:e9:
13:58:a0:51:23:cd:cd:cf:95:a5:00:58:63:d0:da:4d:9e:b4:
8c:01:20:e5:a4:1d:99:8b:9b:66:ac:cf:cf:3a:1d:6d:ef:a6:
ca:93:34:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:29:07 2026 by rpki-client