Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343730303a3a2f34302d3438203d3e20323139333332.roa
File: 326130663a316363353a343730303a3a2f34302d3438203d3e20323139333332.roa (raw, json)
Hash identifier: j+V+nZx5G7WnzKrg6orlXPSIVpp+H6FOv1PMzUoZb1E=
Subject key identifier: 4D:48:9B:9E:A0:E5:EC:2D:B1:F2:76:92:53:CA:79:FA:50:FB:C5:F9
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 743BF60DD2E15A718705A28607AD1BD47F69F6F3
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343730303a3a2f34302d3438203d3e20323139333332.roa
Signing time: Wed 08 Jul 2026 17:50:57 +0000
ROA not before: Wed 08 Jul 2026 17:45:57 +0000
ROA not after: Wed 07 Jul 2027 17:50:57 +0000
asID: 219332
IP address blocks: 2a0f:1cc5:4700::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:3b:f6:0d:d2:e1:5a:71:87:05:a2:86:07:ad:1b:d4:7f:69:f6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jul 8 17:45:57 2026 GMT
Not After : Jul 7 17:50:57 2027 GMT
Subject: CN=4D489B9EA0E5EC2DB1F2769253CA79FA50FBC5F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ec:07:4d:61:fa:df:5f:9d:f6:fd:2d:26:c8:
fb:93:67:f0:47:70:10:36:b9:9b:ee:4e:22:9d:61:
7a:0d:b6:64:de:8a:a0:d9:2c:c6:d7:dc:3b:9e:bf:
71:9a:78:43:63:24:7b:e4:81:40:58:46:2b:2a:b1:
3e:7b:e7:ed:1d:80:c4:ca:f6:90:86:41:56:30:17:
c1:de:91:fc:c1:aa:9d:e8:b9:fc:5b:8e:d2:ba:d2:
39:1a:46:f8:b4:0d:74:15:de:0d:d6:81:c4:0c:fe:
79:b4:dc:5f:02:c4:b9:9f:23:67:0d:c3:cc:b9:ed:
a0:3e:6b:67:ee:73:9f:19:99:b1:af:d6:52:fd:a0:
dd:c0:70:0a:e4:48:52:04:e7:22:2b:20:e0:b0:41:
08:7a:21:e8:d7:c2:85:88:e4:a5:6a:36:ab:16:5d:
25:d7:b8:2e:db:08:be:cf:ea:87:09:53:7e:1f:3e:
a8:04:dd:5e:91:61:68:20:1b:43:34:16:86:4a:9e:
ca:e7:7b:f8:9b:87:bc:7d:b6:0d:46:5b:bd:cd:3f:
9a:c2:55:eb:04:88:fe:c8:53:df:e1:eb:9c:39:b5:
6d:b2:db:9a:fe:c9:ba:64:4b:c5:e6:08:73:08:9e:
20:e9:e6:88:36:56:36:f9:65:5f:e8:58:1f:fb:96:
61:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:48:9B:9E:A0:E5:EC:2D:B1:F2:76:92:53:CA:79:FA:50:FB:C5:F9
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343730303a3a2f34302d3438203d3e20323139333332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:4700::/40
Signature Algorithm: sha256WithRSAEncryption
11:97:f7:5a:ce:1c:e7:99:c3:08:aa:65:d5:ca:e8:92:66:82:
0d:24:6f:0c:90:5a:7a:05:f8:03:6a:46:03:b0:51:6e:e2:67:
d0:6b:2b:70:f4:c6:cf:da:f9:77:28:8e:e7:64:ac:0f:b6:21:
6d:0a:77:d2:fd:8f:df:34:69:96:6f:e3:43:bd:f6:20:b1:13:
3f:e6:61:32:8c:68:6b:7d:9d:01:eb:82:4f:f9:77:59:75:c0:
78:c2:78:2f:07:ae:11:cc:7f:a7:94:90:27:4e:cb:bf:32:e5:
43:47:06:28:80:37:ff:3f:10:38:2c:b6:d9:ce:4b:60:98:15:
de:18:4c:72:31:03:36:c6:c9:fe:36:34:a7:f3:53:85:42:c2:
32:91:0b:89:10:87:94:a2:d9:60:80:67:d6:62:41:3e:c4:04:
49:a5:6b:60:1e:4a:ae:41:0b:67:2b:2f:27:c1:42:41:a4:51:
3f:1d:88:47:e6:4e:d9:d1:e6:8f:d4:8a:95:18:7e:32:dd:cc:
64:33:fc:d3:87:db:ee:94:61:5b:9a:3c:d0:b8:58:e0:10:aa:
e8:67:18:50:36:df:e8:55:29:35:2c:ef:b6:99:52:32:09:ce:
22:0c:51:8f:69:b2:f2:4b:e9:bf:1a:82:10:66:d0:d0:7f:7e:
7d:7b:0a:9b
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUdDv2DdLhWnGHBaKGB60b1H9p9vMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWJlMjQwMDIxYTI4N2YyOTg5NzNkOWVhMjhkZmM4MDcz
NWZkNTgwMDAeFw0yNjA3MDgxNzQ1NTdaFw0yNzA3MDcxNzUwNTdaMDMxMTAvBgNV
BAMTKDRENDg5QjlFQTBFNUVDMkRCMUYyNzY5MjUzQ0E3OUZBNTBGQkM1RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/7AdNYfrfX532/S0myPuTZ/BH
cBA2uZvuTiKdYXoNtmTeiqDZLMbX3Duev3GaeENjJHvkgUBYRisqsT575+0dgMTK
9pCGQVYwF8HekfzBqp3oufxbjtK60jkaRvi0DXQV3g3WgcQM/nm03F8CxLmfI2cN
w8y57aA+a2fuc58ZmbGv1lL9oN3AcArkSFIE5yIrIOCwQQh6IejXwoWI5KVqNqsW
XSXXuC7bCL7P6ocJU34fPqgE3V6RYWggG0M0FoZKnsrne/ibh7x9tg1GW73NP5rC
VesEiP7IU9/h65w5tW2y25r+ybpkS8XmCHMIniDp5og2Vjb5ZV/oWB/7lmF3AgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUTUibnqDl7C2x8naSU8p5+lD7xfkwHwYDVR0j
BBgwFoAUG+JAAhoofymJc9nqKN/IBzX9WAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0
ZjBlLzAvMUJFMjQwMDIxQTI4N0YyOTg5NzNEOUVBMjhERkM4MDczNUZENTgwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ctSkFBaG9vZnltSmM5bnFLTl9JQnpY
OVdBQS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt
M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzM1
M2EzNDM3MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzOTMzMzMzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoPHMVHMA0GCSqGSIb3DQEBCwUAA4IBAQARl/dazhznmcMIqmXV
yuiSZoINJG8MkFp6BfgDakYDsFFu4mfQaytw9MbP2vl3KI7nZKwPtiFtCnfS/Y/f
NGmWb+NDvfYgsRM/5mEyjGhrfZ0B64JP+XdZdcB4wngvB64RzH+nlJAnTsu/MuVD
RwYogDf/PxA4LLbZzktgmBXeGExyMQM2xsn+NjSn81OFQsIykQuJEIeUotlggGfW
YkE+xARJpWtgHkquQQtnKy8nwUJBpFE/HYhH5k7Z0eaP1IqVGH4y3cxkM/zTh9vu
lGFbmjzQuFjgEKroZxhQNt/oVSk1LO+2mVIyCc4iDFGPabLyS+m/GoIQZtDQf359
ewqb
-----END CERTIFICATE-----
Generated at Sun Jul 12 10:09:36 2026 by rpki-client