Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a353730303a3a2f34302d3438203d3e20323138373936.roa
File: 326130663a316363353a353730303a3a2f34302d3438203d3e20323138373936.roa (raw, json)
Hash identifier: VHQWGCiYjFEKjGb8xhIZBm3ANZYOXdtvXg3B7Six6r8=
Subject key identifier: 32:74:01:CB:07:66:36:76:C4:9B:41:A3:CB:C8:78:52:FC:2D:9A:0F
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 27D3862C64C5A8E34CE9E777ACE0636EC4BD43FD
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a353730303a3a2f34302d3438203d3e20323138373936.roa
Signing time: Thu 03 Sep 2026 12:30:37 +0000
ROA not before: Thu 03 Sep 2026 12:25:37 +0000
ROA not after: Thu 02 Sep 2027 12:30:37 +0000
asID: 218796
IP address blocks: 2a0f:1cc5:5700::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:d3:86:2c:64:c5:a8:e3:4c:e9:e7:77:ac:e0:63:6e:c4:bd:43:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Sep 3 12:25:37 2026 GMT
Not After : Sep 2 12:30:37 2027 GMT
Subject: CN=327401CB07663676C49B41A3CBC87852FC2D9A0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:72:76:2e:d4:ea:50:c2:3d:08:24:9c:c3:63:
56:bd:a2:92:87:e4:86:66:2a:0d:28:0d:a6:3a:4e:
50:76:d9:41:b4:5c:3f:80:6c:db:97:62:be:fe:27:
b0:55:cc:31:18:0a:90:b9:44:b4:0f:f2:de:03:e7:
41:49:be:06:b3:47:ff:28:19:71:46:59:80:a2:19:
fe:89:41:00:32:5d:31:29:69:c3:99:31:3c:30:55:
5d:4c:8a:57:b0:8e:ca:ea:d9:16:0a:21:e6:de:96:
17:2c:a0:8a:6c:9f:21:75:33:67:d8:f8:30:f9:41:
ec:98:f0:4a:76:af:94:79:f3:db:00:db:59:68:ef:
59:e5:f7:5c:bf:3d:df:e3:d5:55:83:33:5c:4e:85:
8e:62:c6:8d:2c:d8:c7:cf:b6:fc:6d:8f:18:1f:bd:
db:2c:40:67:e2:12:78:79:0c:d6:d9:e7:2e:f3:5c:
db:4f:b3:19:a3:c4:f6:97:bb:48:af:40:0a:bd:9e:
dc:39:33:8a:1e:8b:b1:9e:e2:b9:2a:7f:3b:a3:65:
9d:0b:e0:7d:a1:29:05:2d:f7:55:eb:43:0b:9f:3a:
59:fd:ea:11:74:a4:81:4b:03:3b:8f:54:8c:f3:6e:
fd:01:b4:cc:b1:e4:a7:0a:ea:d5:57:b6:70:39:21:
bf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:74:01:CB:07:66:36:76:C4:9B:41:A3:CB:C8:78:52:FC:2D:9A:0F
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a353730303a3a2f34302d3438203d3e20323138373936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:5700::/40
Signature Algorithm: sha256WithRSAEncryption
33:87:bb:fb:5a:27:52:b1:23:e7:50:b3:7c:38:69:7f:4a:74:
9f:86:ce:c7:cd:31:82:d6:a6:c2:64:01:d3:21:50:05:2c:73:
8d:16:a0:3f:f7:46:2c:fd:b9:9d:c7:c3:94:47:70:70:78:c9:
59:49:df:14:0d:c3:e3:1e:5a:67:32:28:4a:8b:52:3a:6e:47:
64:8c:0f:1e:16:aa:7a:1b:c0:97:fa:0d:fa:78:b4:ae:83:19:
74:57:a6:cc:35:0a:4f:c4:7b:a6:b8:c2:0f:bd:7f:2b:51:a2:
43:a7:52:fd:33:a8:b0:29:93:d7:eb:78:c4:f4:c4:eb:2e:ca:
16:0a:c2:63:8c:59:67:0a:5f:24:45:7b:3c:a4:8a:5e:37:58:
25:da:06:4e:76:50:e0:04:c5:64:dd:db:1a:52:e7:30:f1:fd:
6a:42:ba:aa:1a:44:2b:5c:7e:ca:c6:e4:a8:48:bf:8f:42:00:
e0:d3:0d:78:d6:ca:da:ef:a7:fd:f0:1e:d5:28:8a:47:a5:7a:
93:d1:59:64:bd:ac:6f:3e:de:f4:c8:1d:2f:68:40:9e:4e:0f:
0c:5c:2a:94:81:51:80:db:88:65:05:6d:4b:76:a2:21:1c:6a:
b0:0d:99:a8:89:87:46:c8:12:59:f3:bb:9a:86:28:49:37:3e:
47:0c:6f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:28:32 2026 by rpki-client