Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a353630303a3a2f34302d3438203d3e20313937373534.roa
File: 326130663a316363353a353630303a3a2f34302d3438203d3e20313937373534.roa (raw, json)
Hash identifier: tCvqleRUuN1iM2hbdhJ96FRDEVeIavIQko6HEB508L4=
Subject key identifier: 87:65:B1:9C:C6:4A:19:16:C1:90:EF:F9:CE:3E:AE:EC:15:C1:15:A4
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 2E2FCBA25F2452290C8D021B0E5B13123233BCB7
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a353630303a3a2f34302d3438203d3e20313937373534.roa
Signing time: Mon 10 Aug 2026 22:01:34 +0000
ROA not before: Mon 10 Aug 2026 21:56:34 +0000
ROA not after: Mon 09 Aug 2027 22:01:34 +0000
asID: 197754
IP address blocks: 2a0f:1cc5:5600::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:2f:cb:a2:5f:24:52:29:0c:8d:02:1b:0e:5b:13:12:32:33:bc:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Aug 10 21:56:34 2026 GMT
Not After : Aug 9 22:01:34 2027 GMT
Subject: CN=8765B19CC64A1916C190EFF9CE3EAEEC15C115A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fd:f2:c2:e8:24:32:36:7b:72:a8:d7:da:02:
0a:f3:4e:61:f0:05:8e:9c:15:b1:78:ea:6f:d4:dd:
18:0e:28:6f:0f:43:76:dc:82:f0:d1:16:bd:e3:32:
ca:b0:b0:ab:49:08:fd:78:6f:cc:02:9a:35:60:b5:
46:f1:c8:00:57:df:0b:45:1a:de:c7:1f:cb:78:76:
cd:e4:48:cd:1a:67:16:50:b9:d2:db:01:99:5e:33:
9d:28:80:78:dd:6c:a5:55:cf:89:a8:97:50:e4:81:
ba:2f:2a:18:c4:5e:c1:b6:37:a8:c7:e0:a3:2b:d0:
62:99:0f:76:fb:2a:8d:b9:bf:c8:f1:3e:48:55:2c:
ca:7b:73:46:d9:d8:3e:ce:dd:fb:31:1f:07:7a:3e:
64:28:84:82:a0:6b:8f:b8:b3:90:9a:cb:8f:8f:1e:
ba:bc:a6:4a:64:b3:81:66:05:e9:f8:8c:65:2c:50:
31:1a:7e:c3:20:35:6c:0f:8d:e1:48:a4:a8:cd:87:
21:ac:2b:fe:a4:65:db:02:a2:3a:d9:a3:64:9c:7e:
c7:a3:db:b9:c7:40:d6:77:d0:1b:c8:02:d3:0b:82:
64:4f:e3:1c:10:99:b6:8d:70:28:55:c1:2d:6f:6d:
78:8b:2c:08:73:0f:49:fb:bd:00:9c:24:6f:57:31:
26:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:65:B1:9C:C6:4A:19:16:C1:90:EF:F9:CE:3E:AE:EC:15:C1:15:A4
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a353630303a3a2f34302d3438203d3e20313937373534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:5600::/40
Signature Algorithm: sha256WithRSAEncryption
74:96:16:42:30:62:0d:fc:ad:c4:ad:9d:13:75:dc:c3:04:0d:
46:fb:b8:65:e8:d4:53:47:2e:9f:06:b3:b2:82:c9:f5:e5:02:
e1:27:8f:31:b1:a9:4a:16:57:ce:cd:71:00:fb:56:04:fd:a9:
92:b3:5a:d9:a6:04:b8:1c:ec:1f:79:19:8d:af:42:a3:2c:9b:
9d:7d:89:d6:b9:6b:c6:7c:69:39:ae:78:c3:79:16:0d:a2:3c:
8c:44:c1:ba:37:ed:9f:e8:ca:f6:3f:51:16:c4:ff:dd:d7:2c:
f5:0c:52:e8:78:c3:bb:a5:c5:a1:67:89:70:72:bf:69:a6:78:
2d:59:be:05:27:dc:f4:da:4c:bb:93:2b:a2:eb:b7:fa:dd:5f:
b9:e3:9c:8d:60:2d:e2:68:d6:dd:b6:85:71:c3:4f:02:f3:01:
cd:3b:16:1b:cc:7b:c1:6a:cc:51:1c:bd:86:c8:d3:d9:d2:4f:
d5:f7:25:23:50:e6:e3:20:af:31:c0:3c:71:e9:bc:ee:06:37:
ad:9e:40:fb:f7:7c:8d:3b:bd:44:7d:f2:60:6e:86:6f:a1:26:
76:e2:2b:6a:41:a6:27:7e:8a:86:6f:1b:43:95:f1:15:4f:e6:
2d:27:98:00:1c:18:ad:30:36:18:76:aa:45:58:b2:b1:14:fa:
6c:21:07:90
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIULi/Lol8kUikMjQIbDlsTEjIzvLcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWJlMjQwMDIxYTI4N2YyOTg5NzNkOWVhMjhkZmM4MDcz
NWZkNTgwMDAeFw0yNjA4MTAyMTU2MzRaFw0yNzA4MDkyMjAxMzRaMDMxMTAvBgNV
BAMTKDg3NjVCMTlDQzY0QTE5MTZDMTkwRUZGOUNFM0VBRUVDMTVDMTE1QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM/fLC6CQyNntyqNfaAgrzTmHw
BY6cFbF46m/U3RgOKG8PQ3bcgvDRFr3jMsqwsKtJCP14b8wCmjVgtUbxyABX3wtF
Gt7HH8t4ds3kSM0aZxZQudLbAZleM50ogHjdbKVVz4mol1DkgbovKhjEXsG2N6jH
4KMr0GKZD3b7Ko25v8jxPkhVLMp7c0bZ2D7O3fsxHwd6PmQohIKga4+4s5Cay4+P
Hrq8pkpks4FmBen4jGUsUDEafsMgNWwPjeFIpKjNhyGsK/6kZdsCojrZo2Scfsej
27nHQNZ30BvIAtMLgmRP4xwQmbaNcChVwS1vbXiLLAhzD0n7vQCcJG9XMSYlAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUh2WxnMZKGRbBkO/5zj6u7BXBFaQwHwYDVR0j
BBgwFoAUG+JAAhoofymJc9nqKN/IBzX9WAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0
ZjBlLzAvMUJFMjQwMDIxQTI4N0YyOTg5NzNEOUVBMjhERkM4MDczNUZENTgwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ctSkFBaG9vZnltSmM5bnFLTl9JQnpY
OVdBQS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt
M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzM1
M2EzNTM2MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMxMzkzNzM3MzUzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoPHMVWMA0GCSqGSIb3DQEBCwUAA4IBAQB0lhZCMGIN/K3ErZ0T
ddzDBA1G+7hl6NRTRy6fBrOygsn15QLhJ48xsalKFlfOzXEA+1YE/amSs1rZpgS4
HOwfeRmNr0KjLJudfYnWuWvGfGk5rnjDeRYNojyMRMG6N+2f6Mr2P1EWxP/d1yz1
DFLoeMO7pcWhZ4lwcr9ppngtWb4FJ9z02ky7kyui67f63V+545yNYC3iaNbdtoVx
w08C8wHNOxYbzHvBasxRHL2GyNPZ0k/V9yUjUObjIK8xwDxx6bzuBjetnkD793yN
O71EffJgboZvoSZ24itqQaYnfoqGbxtDlfEVT+YtJ5gAHBitMDYYdqpFWLKxFPps
IQeQ
-----END CERTIFICATE-----
Generated at Thu Aug 13 08:01:21 2026 by rpki-client