Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a363030303a3a2f34382d3438203d3e20323138353338.roa
File: 326130663a316363353a363030303a3a2f34382d3438203d3e20323138353338.roa (raw, json)
Hash identifier: 5v3beKY6RQ1PM4C6uZQyzZvvvAID6/DUo+9FBTxzx2s=
Subject key identifier: 7B:96:60:D8:54:DA:94:6F:F4:61:A8:08:0A:BF:7C:7E:DE:93:F5:CA
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 722B31C461378078E8847193786CA7D7407C5F0E
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a363030303a3a2f34382d3438203d3e20323138353338.roa
Signing time: Thu 01 Oct 2026 05:11:59 +0000
ROA not before: Thu 01 Oct 2026 05:06:59 +0000
ROA not after: Thu 30 Sep 2027 05:11:59 +0000
asID: 218538
IP address blocks: 2a0f:1cc5:6000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:2b:31:c4:61:37:80:78:e8:84:71:93:78:6c:a7:d7:40:7c:5f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Oct 1 05:06:59 2026 GMT
Not After : Sep 30 05:11:59 2027 GMT
Subject: CN=7B9660D854DA946FF461A8080ABF7C7EDE93F5CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:55:44:e0:86:fa:33:3a:bb:20:2e:c5:df:fe:
08:15:06:e3:b2:84:c9:f8:88:77:99:12:6d:92:31:
1c:70:fd:fb:1a:eb:ca:a6:1b:61:26:ff:2b:29:6f:
f7:5a:f2:92:35:82:de:ad:ea:49:82:39:7d:06:b6:
af:91:58:5d:7d:96:b6:a7:51:0d:57:1a:43:80:57:
c5:75:06:e7:2c:13:10:35:63:30:74:44:dc:a4:39:
d2:56:0e:a2:5d:82:98:d9:1e:c3:fb:ed:2c:7c:d1:
f7:88:3c:8b:e4:39:58:c4:ab:fc:d6:0d:f2:b7:cd:
84:fe:a2:25:88:cf:41:bf:09:dc:a8:6d:12:ce:c3:
59:88:b2:02:20:de:ae:9a:8a:e7:05:8c:47:2e:2f:
29:d1:2f:a4:e2:49:bb:4a:f6:c5:8d:c8:1a:ea:66:
91:9e:88:47:61:eb:2f:b6:47:85:e7:ca:da:bd:e9:
79:e4:94:aa:d4:20:db:f3:5b:bc:9d:b2:49:0a:30:
0f:b0:f4:9b:b6:30:6c:6c:2b:14:dc:35:29:04:08:
86:43:a8:9a:39:1c:45:eb:b2:f3:3b:35:27:9c:dd:
d6:50:5b:f4:20:2c:ec:d5:d2:f7:6c:83:01:e1:93:
a1:d3:3b:f5:86:e9:78:7a:e3:8d:89:9a:87:ae:52:
4c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:96:60:D8:54:DA:94:6F:F4:61:A8:08:0A:BF:7C:7E:DE:93:F5:CA
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a363030303a3a2f34382d3438203d3e20323138353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:6000::/48
Signature Algorithm: sha256WithRSAEncryption
16:6f:1a:94:f1:5a:71:65:53:42:70:b4:67:ed:72:76:5e:6e:
89:80:e3:28:2a:56:e1:c1:45:ee:04:58:e4:d2:35:2e:e8:20:
2f:18:26:45:1f:4b:21:65:ec:66:fb:16:73:8e:e0:54:7d:a6:
44:11:5f:08:ef:3e:b1:9b:b5:23:0d:11:7b:97:51:a9:46:38:
56:81:61:23:3e:d3:e0:b3:75:b4:4f:33:3e:6e:91:29:f5:34:
70:d0:d7:7c:e1:81:9a:92:b2:0c:1f:60:6a:c2:5e:14:07:3e:
cf:3d:39:f2:02:a2:f8:0c:9c:6c:c0:7f:f6:73:dc:43:5f:6d:
b3:10:95:5f:6b:57:45:95:4c:29:9d:34:4e:8b:e5:f0:49:63:
60:8a:d7:2e:24:55:0f:1a:06:6e:28:58:98:fd:b4:e2:a9:40:
61:f3:cd:4d:a3:c7:13:b8:42:59:35:c4:17:fc:1f:31:07:9b:
c1:df:a5:b1:dd:33:00:91:0e:eb:ea:92:95:df:08:d4:b2:87:
b8:49:d3:94:8b:0d:1c:30:19:d6:05:dd:9d:20:cf:ec:2a:bd:
3e:52:43:b1:2b:ad:4f:86:55:fa:57:ed:1e:95:4d:23:5d:1f:
67:af:83:0c:e7:80:8d:cc:de:a2:49:db:e6:d6:5f:1f:3b:43:
f3:8c:e4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:02:51 2026 by rpki-client