Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a363030333a3a2f34382d3438203d3e20323138353338.roa
File: 326130663a316363353a363030333a3a2f34382d3438203d3e20323138353338.roa (raw, json)
Hash identifier: KVFtysmowt3X8GmEc/RyICYmsSS2pR0Zi6/dvwNPk30=
Subject key identifier: 42:22:10:49:C6:B5:47:A6:78:5F:F2:0B:CA:88:37:D9:59:00:F4:BE
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 173EEE5DEF2BB369B98F60752158AFDC6AAF0A18
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a363030333a3a2f34382d3438203d3e20323138353338.roa
Signing time: Fri 02 Oct 2026 02:44:36 +0000
ROA not before: Fri 02 Oct 2026 02:39:36 +0000
ROA not after: Fri 01 Oct 2027 02:44:36 +0000
asID: 218538
IP address blocks: 2a0f:1cc5:6003::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:3e:ee:5d:ef:2b:b3:69:b9:8f:60:75:21:58:af:dc:6a:af:0a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Oct 2 02:39:36 2026 GMT
Not After : Oct 1 02:44:36 2027 GMT
Subject: CN=42221049C6B547A6785FF20BCA8837D95900F4BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:60:75:ee:97:16:2b:a7:62:26:e1:b3:da:28:
43:5c:4f:45:45:9c:ad:17:a9:c0:e2:9d:80:0f:c5:
d7:2b:5b:81:b4:a8:e1:77:03:ef:76:e4:86:34:91:
91:15:ed:c1:58:85:ea:06:2b:ed:c3:5f:84:9f:7c:
aa:68:99:11:47:eb:76:fb:f9:5a:ea:61:6a:99:23:
a5:ab:b8:0d:3d:85:d6:6b:9a:72:d1:4d:06:5d:61:
f2:58:6d:6d:eb:43:24:e2:76:40:c2:d1:19:68:b2:
a4:09:d5:66:89:04:a2:e1:dd:b3:d9:11:75:a0:cd:
ae:b5:85:3b:07:ce:99:e6:20:9b:d9:85:fa:1e:5a:
f6:ce:f3:49:b3:a4:a8:9d:35:83:38:e8:45:b5:bd:
ce:e4:25:15:25:35:5d:23:4b:36:ae:f7:c0:2d:b3:
aa:7c:22:71:06:f1:cb:e5:4c:43:10:4a:05:86:b0:
6a:30:72:c5:0d:11:f9:b9:22:78:57:a6:22:40:e6:
41:e2:e3:aa:ab:e3:04:62:5b:fb:8e:a3:94:1e:e0:
3f:84:5d:d5:44:af:e2:0f:b0:72:ec:20:50:0a:97:
f9:31:ea:71:b3:bc:7c:d3:c3:0a:ae:32:a3:31:3b:
2c:99:e9:e5:3c:b6:0e:eb:8a:4e:6b:c4:bd:93:f7:
05:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:22:10:49:C6:B5:47:A6:78:5F:F2:0B:CA:88:37:D9:59:00:F4:BE
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a363030333a3a2f34382d3438203d3e20323138353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:6003::/48
Signature Algorithm: sha256WithRSAEncryption
58:30:61:07:75:e7:48:cf:66:2b:2a:d3:73:b9:36:b1:59:48:
94:f2:7e:33:0a:ad:99:6e:49:9d:c9:7b:59:3f:90:e5:d9:7f:
bd:19:71:1a:ef:fd:40:01:19:63:8c:2b:3d:d6:22:0b:3b:92:
c4:df:a8:28:ae:ef:ce:5a:a0:22:57:aa:47:b8:4b:55:b8:50:
49:45:b2:94:75:1a:ad:3a:95:b5:ee:5b:7b:cb:b6:32:e0:6c:
4f:0c:bb:25:ad:53:48:af:56:78:2f:84:f8:22:2b:42:fd:8d:
ac:47:bf:a1:43:cc:89:c6:e6:05:2f:3c:d0:20:d9:1d:c7:16:
52:cc:a9:aa:36:25:9e:b1:61:39:a1:fb:05:ba:a0:17:93:49:
4e:79:90:82:43:c8:61:29:d9:fc:09:74:6c:4b:bf:0b:d0:4d:
6f:a3:37:d3:71:dc:8f:f5:9a:16:55:29:e4:4e:34:1a:ad:82:
52:53:62:44:c2:43:bf:41:78:43:3e:da:e2:82:1c:05:00:9d:
ac:76:12:fc:64:9e:a1:13:33:f7:fd:03:15:5f:78:3e:18:85:
10:64:16:62:8e:c6:04:d1:38:e6:91:c2:41:f2:28:8e:3d:3a:
07:96:3d:d5:78:ff:bb:60:53:a8:0d:f0:9e:ab:8e:8d:45:a0:
4a:89:7d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:02:46 2026 by rpki-client