Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a363030303a3a2f34302d3430203d3e20323138353338.roa
File: 326130663a316363353a363030303a3a2f34302d3430203d3e20323138353338.roa (raw, json)
Hash identifier: 6JcDpemuYRxmaynZirYJtvcqDUw5CM+dBCyDxUeeIIo=
Subject key identifier: FA:B0:A3:18:FF:10:DC:E8:BE:58:41:37:20:9E:CE:95:26:83:02:03
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 79A7BF65C8E1DAD65B579957D82B57414C31D26A
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a363030303a3a2f34302d3430203d3e20323138353338.roa
Signing time: Sun 18 Oct 2026 06:40:53 +0000
ROA not before: Sun 18 Oct 2026 06:35:53 +0000
ROA not after: Sun 17 Oct 2027 06:40:53 +0000
asID: 218538
IP address blocks: 2a0f:1cc5:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:a7:bf:65:c8:e1:da:d6:5b:57:99:57:d8:2b:57:41:4c:31:d2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Oct 18 06:35:53 2026 GMT
Not After : Oct 17 06:40:53 2027 GMT
Subject: CN=FAB0A318FF10DCE8BE584137209ECE9526830203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:79:03:21:80:56:72:f8:0b:75:6d:88:00:df:
0a:36:10:49:0f:e7:fd:aa:ce:ef:fc:38:00:1e:52:
72:ee:9b:b2:d6:9e:b7:e4:57:f3:5c:78:03:57:72:
b7:87:5f:a9:2c:c3:31:a3:d6:55:e3:cd:a5:8d:2b:
aa:25:bc:62:2e:8a:5f:4a:33:3d:af:4d:ac:c2:bd:
90:2a:c9:08:19:ca:47:9f:97:a5:fc:09:ed:dd:87:
45:d2:d6:7d:82:15:cb:ce:2a:97:ab:17:88:f9:20:
84:ab:13:57:cc:f0:80:53:34:dd:2c:f5:8e:3e:83:
b2:fd:cc:aa:76:43:90:9a:0d:e1:13:53:f4:55:0f:
87:37:e5:03:ab:4c:f1:2c:7d:ef:c2:fc:e1:e5:d5:
c6:fd:51:38:c6:4b:f7:e1:fb:85:b4:91:4a:ec:b2:
c2:a4:27:90:cc:2c:a4:cb:47:60:d1:4f:88:91:33:
11:1c:6d:88:db:23:87:83:65:b8:93:4e:9a:f2:2e:
2c:ad:e0:52:f5:6d:02:50:b7:0a:3d:ae:88:64:9f:
f7:c4:a9:29:3d:10:39:98:a6:6e:1f:c6:50:52:5e:
e5:47:7a:d6:cb:77:cf:93:ef:51:5d:80:d1:fd:36:
46:0a:1e:1f:05:f3:36:30:c1:bd:72:96:0e:32:48:
cd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B0:A3:18:FF:10:DC:E8:BE:58:41:37:20:9E:CE:95:26:83:02:03
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a363030303a3a2f34302d3430203d3e20323138353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:6000::/40
Signature Algorithm: sha256WithRSAEncryption
2f:b5:66:9b:88:f7:11:56:45:86:c3:13:7f:21:e7:a9:0b:d1:
a3:63:bb:6a:90:29:4b:88:b5:db:bc:2d:7a:b5:86:26:73:b8:
71:67:35:0c:36:dd:07:7a:a6:5f:f0:4f:db:91:4c:df:ee:43:
a6:e2:c0:15:6b:34:07:5e:69:ba:d5:f8:a2:0c:48:3f:41:44:
72:05:9f:16:f1:8b:52:59:41:fb:2b:8f:a7:fd:be:c5:44:d5:
ba:43:32:63:11:40:35:7a:c9:6e:81:94:c5:96:b6:9e:c8:78:
fb:a5:4d:1f:e4:c4:bd:91:7d:3b:87:71:82:7e:c1:71:d3:ad:
f7:bd:19:22:3b:d9:ae:84:3b:1c:eb:e1:a2:68:a6:fd:db:a0:
e6:e0:3d:14:84:bb:81:de:2f:d4:25:38:52:37:4a:d3:ce:63:
32:a3:cb:af:08:1c:be:30:5d:6a:9b:c4:65:58:5d:82:3b:58:
6d:de:c5:5e:2b:c6:dc:ee:66:26:8d:43:76:28:34:55:cb:d4:
1f:e5:6f:68:6c:d3:f9:91:c6:2c:35:7c:bd:b4:7c:e8:c0:48:
ba:56:3b:7f:2f:9b:2c:a7:87:29:d3:62:ea:37:f7:bb:8d:be:
09:fd:ad:c4:7e:b6:7c:10:ac:d9:cb:91:5c:fb:ad:74:32:f8:
62:93:e5:53
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUeae/Zcjh2tZbV5lX2CtXQUwx0mowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWJlMjQwMDIxYTI4N2YyOTg5NzNkOWVhMjhkZmM4MDcz
NWZkNTgwMDAeFw0yNjEwMTgwNjM1NTNaFw0yNzEwMTcwNjQwNTNaMDMxMTAvBgNV
BAMTKEZBQjBBMzE4RkYxMERDRThCRTU4NDEzNzIwOUVDRTk1MjY4MzAyMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbeQMhgFZy+At1bYgA3wo2EEkP
5/2qzu/8OAAeUnLum7LWnrfkV/NceANXcreHX6kswzGj1lXjzaWNK6olvGIuil9K
Mz2vTazCvZAqyQgZykefl6X8Ce3dh0XS1n2CFcvOKperF4j5IISrE1fM8IBTNN0s
9Y4+g7L9zKp2Q5CaDeETU/RVD4c35QOrTPEsfe/C/OHl1cb9UTjGS/fh+4W0kUrs
ssKkJ5DMLKTLR2DRT4iRMxEcbYjbI4eDZbiTTpryLiyt4FL1bQJQtwo9rohkn/fE
qSk9EDmYpm4fxlBSXuVHetbLd8+T71FdgNH9NkYKHh8F8zYwwb1ylg4ySM3BAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQU+rCjGP8Q3Oi+WEE3IJ7OlSaDAgMwHwYDVR0j
BBgwFoAUG+JAAhoofymJc9nqKN/IBzX9WAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0
ZjBlLzAvMUJFMjQwMDIxQTI4N0YyOTg5NzNEOUVBMjhERkM4MDczNUZENTgwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ctSkFBaG9vZnltSmM5bnFLTl9JQnpY
OVdBQS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt
M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzM1
M2EzNjMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzEzODM1MzMzOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoPHMVgMA0GCSqGSIb3DQEBCwUAA4IBAQAvtWabiPcRVkWGwxN/
IeepC9GjY7tqkClLiLXbvC16tYYmc7hxZzUMNt0HeqZf8E/bkUzf7kOm4sAVazQH
Xmm61fiiDEg/QURyBZ8W8YtSWUH7K4+n/b7FRNW6QzJjEUA1eslugZTFlraeyHj7
pU0f5MS9kX07h3GCfsFx0633vRkiO9muhDsc6+GiaKb926Dm4D0UhLuB3i/UJThS
N0rTzmMyo8uvCBy+MF1qm8RlWF2CO1ht3sVeK8bc7mYmjUN2KDRVy9Qf5W9obNP5
kcYsNXy9tHzowEi6Vjt/L5ssp4cp02LqN/e7jb4J/a3EfrZ8EKzZy5Fc+610Mvhi
k+VT
-----END CERTIFICATE-----
Generated at Tue Oct 20 02:14:01 2026 by rpki-client