Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a363030313a3a2f34382d3438203d3e20323138353338.roa
File: 326130663a316363353a363030313a3a2f34382d3438203d3e20323138353338.roa (raw, json)
Hash identifier: /uXblqOiepX58AY4X7lGp5/lFF2zkDbZXW+LZK8eaRE=
Subject key identifier: 15:8C:54:DD:31:09:6B:4E:91:E4:1A:AE:91:72:71:1B:2B:6E:4F:97
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 4DC619D93592D349CF4879D7D9D9D2CC2D4BFDFF
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a363030313a3a2f34382d3438203d3e20323138353338.roa
Signing time: Thu 01 Oct 2026 05:12:34 +0000
ROA not before: Thu 01 Oct 2026 05:07:34 +0000
ROA not after: Thu 30 Sep 2027 05:12:34 +0000
asID: 218538
IP address blocks: 2a0f:1cc5:6001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:c6:19:d9:35:92:d3:49:cf:48:79:d7:d9:d9:d2:cc:2d:4b:fd:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Oct 1 05:07:34 2026 GMT
Not After : Sep 30 05:12:34 2027 GMT
Subject: CN=158C54DD31096B4E91E41AAE9172711B2B6E4F97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0a:02:52:fb:f4:1f:8f:20:1e:f0:89:29:7d:
0c:b4:94:19:6e:88:e9:58:e4:94:d1:77:c2:dd:8e:
0a:05:a0:b3:69:fc:d2:cc:eb:1e:bd:24:a0:38:84:
07:c2:d2:39:84:d5:a7:78:6f:62:48:95:7e:d6:18:
29:09:b1:24:4b:d6:4d:a4:e4:e8:93:1e:2b:5a:35:
8d:00:3e:6a:04:af:f3:f8:8c:43:d9:0f:b5:c6:bd:
3b:68:8a:10:d7:0b:0f:c6:88:91:76:47:a6:97:27:
14:5e:4c:ca:e6:24:69:ef:3f:67:6a:8e:b6:45:f4:
98:b9:53:b5:51:98:95:9f:df:b5:fa:f0:02:c6:f2:
26:06:8d:4e:c6:81:46:aa:a1:f1:a4:4a:e4:66:ae:
ab:64:7b:42:20:d4:64:ef:a0:12:6d:b4:48:d2:1a:
40:46:a3:54:5a:cb:84:fc:39:ba:44:d5:0c:68:16:
9e:73:af:39:07:ad:a2:b7:be:8b:e5:9e:22:f5:12:
14:05:86:6f:23:a4:d5:f6:2f:a0:66:21:d0:9b:00:
ba:c1:a7:15:59:a8:e6:7c:b3:95:71:6b:60:85:d3:
95:2e:fe:51:ce:05:18:75:40:0c:2b:df:bf:b4:6f:
95:2b:02:41:7e:81:8f:82:5b:67:80:c6:ef:d4:52:
0c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8C:54:DD:31:09:6B:4E:91:E4:1A:AE:91:72:71:1B:2B:6E:4F:97
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a363030313a3a2f34382d3438203d3e20323138353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:6001::/48
Signature Algorithm: sha256WithRSAEncryption
31:e2:a7:cf:bd:15:9b:5e:20:28:a3:df:ae:6f:ae:7a:f1:b5:
88:87:74:65:8e:b9:b2:53:68:4e:d1:97:4a:10:2a:f9:08:5d:
92:b0:be:21:ad:02:11:92:ae:84:3f:c7:87:03:28:6a:d2:e6:
2a:4a:b2:08:e7:45:4e:58:fa:c4:1d:96:4b:ea:61:03:b9:60:
89:9a:6b:8f:7c:4c:23:c5:80:84:e3:79:ac:0e:43:d6:45:90:
82:b1:2f:c6:a5:33:d7:74:ef:f2:83:13:a3:14:b3:15:ea:5f:
bd:98:67:6a:47:a1:9d:5d:9e:f4:6f:62:85:cd:63:46:7d:64:
f6:da:fc:8d:2f:6d:76:21:f9:dc:ef:97:fc:7b:4d:51:da:f2:
cb:b8:ed:4a:ac:0f:57:9c:4b:b2:fc:b7:84:9b:36:9b:30:e3:
b2:39:86:47:1a:0e:96:39:12:98:a8:80:3b:c9:55:18:65:6b:
41:4d:c7:c2:e6:34:e8:d2:9a:c7:c8:54:72:e0:0a:45:b8:ca:
28:0c:3a:42:75:79:aa:6c:64:56:c7:d3:0a:2c:ba:23:35:7c:
13:71:bd:f5:ea:a7:73:ac:34:14:d9:fc:6c:4a:a0:50:b0:08:
d0:47:29:9f:9d:56:1e:e7:0e:88:fe:13:52:9f:d5:fb:4a:01:
d4:6f:c6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:54:02 2026 by rpki-client