Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343630303a3a2f34302d3438203d3e20323131353735.roa
File: 326130663a316363353a343630303a3a2f34302d3438203d3e20323131353735.roa (raw, json)
Hash identifier: KFliPdm292NKtdCJk5gnlog//Jh/U+MAnEJIcG81iUw=
Subject key identifier: AF:AB:26:E6:72:97:B2:2D:F2:BD:90:5E:6F:1F:4B:41:8C:98:C2:55
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 46CBAE482D64B8BEC36CC6B0E332EC96FE97F9FA
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343630303a3a2f34302d3438203d3e20323131353735.roa
Signing time: Wed 12 Aug 2026 16:20:48 +0000
ROA not before: Wed 12 Aug 2026 16:15:48 +0000
ROA not after: Wed 11 Aug 2027 16:20:48 +0000
asID: 211575
IP address blocks: 2a0f:1cc5:4600::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:cb:ae:48:2d:64:b8:be:c3:6c:c6:b0:e3:32:ec:96:fe:97:f9:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Aug 12 16:15:48 2026 GMT
Not After : Aug 11 16:20:48 2027 GMT
Subject: CN=AFAB26E67297B22DF2BD905E6F1F4B418C98C255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:ca:46:97:db:3c:f1:31:39:57:30:ab:28:
b0:11:ac:d7:3c:07:9c:4f:2a:fc:99:49:0b:d6:99:
17:0d:80:04:c0:67:4f:0c:74:61:e3:46:96:20:51:
cd:2c:56:7d:1d:87:9f:e6:64:07:d0:41:e4:f4:79:
b3:99:51:80:a9:29:33:53:ab:f0:ae:c7:7e:4c:7f:
ca:86:f5:c2:7b:77:90:b1:58:cb:f5:ef:a5:b2:df:
27:01:19:e4:e1:e6:2a:eb:04:69:0f:d1:45:7a:1d:
f6:e0:84:57:67:b5:ab:65:5b:fb:39:c0:35:fa:81:
72:fe:d2:88:89:50:59:e3:f8:ab:29:bb:73:12:dc:
3e:0e:d9:c6:59:08:1a:16:eb:38:57:67:8c:0a:6a:
d9:93:85:16:9d:18:70:8e:47:a6:62:bb:04:28:d5:
7a:e0:3c:52:84:4e:1b:fb:fb:5a:57:28:0a:bd:19:
5f:d8:6a:f4:62:d5:2f:b2:b8:c7:c9:3b:08:87:dc:
c0:53:82:71:3f:0a:51:49:cf:9c:2a:82:34:cf:16:
0a:47:21:b3:b2:44:98:cf:13:4f:9c:cd:ce:1a:da:
d6:8a:ec:94:44:8c:14:1b:01:a0:a9:48:3c:3e:aa:
aa:1d:bc:50:fd:da:a3:2c:57:48:cf:31:95:ed:4e:
44:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AB:26:E6:72:97:B2:2D:F2:BD:90:5E:6F:1F:4B:41:8C:98:C2:55
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343630303a3a2f34302d3438203d3e20323131353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:4600::/40
Signature Algorithm: sha256WithRSAEncryption
0f:1a:76:7b:f8:61:86:b6:a2:9c:39:dd:19:83:0a:18:2e:74:
b7:08:3a:28:aa:1e:2e:ba:18:a2:6d:1e:7e:17:88:a7:d6:7c:
8c:10:8d:91:37:83:09:63:d8:75:f6:0b:70:2b:e7:40:5e:c4:
38:83:23:12:d8:69:b4:67:fb:81:b9:22:c1:93:76:21:08:d1:
15:bf:82:bf:0f:fa:ba:f4:bb:82:1c:c7:8a:42:40:6d:4f:78:
9a:a9:0c:0e:55:c6:b3:53:46:10:9d:36:e6:ca:0d:26:59:e9:
7c:3d:91:d0:af:70:fd:0d:1a:03:c1:0c:81:fd:88:32:e2:7c:
96:84:9a:a6:53:dd:f8:bb:9e:70:a5:10:fa:23:99:0f:00:6d:
67:ae:65:dd:9f:74:57:47:da:8a:7d:b2:b8:42:9c:70:8b:9e:
c5:79:7f:5d:0d:9e:c2:29:7f:1b:c6:e3:8d:7f:4b:dd:23:8b:
61:85:d8:fe:15:30:47:6e:7c:9b:0e:6f:68:75:04:2f:e4:d8:
83:16:47:71:ef:20:a6:c4:56:a7:ac:a7:ec:26:fb:85:33:13:
9e:71:37:af:3d:c1:a4:30:a4:a1:62:29:d1:39:2c:74:5b:79:
49:0f:91:0a:f7:ca:a0:eb:84:24:93:91:49:b6:6d:0b:de:32:
79:8f:f8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:44 2026 by rpki-client