Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a363030343a3a2f34382d3438203d3e20323138353338.roa
File: 326130663a316363353a363030343a3a2f34382d3438203d3e20323138353338.roa (raw, json)
Hash identifier: gCsViIrYVlbX03yI9NGSwNKfuqgkaxROBvLt4D5utZQ=
Subject key identifier: 23:41:36:A4:45:3B:5A:3D:DC:E1:CF:B4:F1:C6:44:5E:C2:C7:91:DC
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 13F290AFF26DED252CD93C3C614192DC2F75A4F2
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a363030343a3a2f34382d3438203d3e20323138353338.roa
Signing time: Sat 03 Oct 2026 14:15:01 +0000
ROA not before: Sat 03 Oct 2026 14:10:01 +0000
ROA not after: Sat 02 Oct 2027 14:15:01 +0000
asID: 218538
IP address blocks: 2a0f:1cc5:6004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:f2:90:af:f2:6d:ed:25:2c:d9:3c:3c:61:41:92:dc:2f:75:a4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Oct 3 14:10:01 2026 GMT
Not After : Oct 2 14:15:01 2027 GMT
Subject: CN=234136A4453B5A3DDCE1CFB4F1C6445EC2C791DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a2:1b:96:b8:bf:03:e2:08:f9:92:1d:17:b8:
8e:d5:35:aa:34:97:5c:04:f8:10:0d:39:5f:e0:02:
e1:e7:ac:50:74:f0:77:4f:36:0d:c1:88:f0:fb:a6:
1e:e7:f9:85:f7:1f:09:1c:2e:06:7a:03:0b:89:2d:
79:b1:62:29:17:2e:2d:54:7d:a4:6b:86:60:6b:ec:
16:20:66:69:28:b5:e6:54:ab:9e:7f:c1:6c:78:ed:
6b:24:3c:79:7d:d7:2f:c6:42:13:d1:66:6d:4c:c2:
fa:eb:86:2f:96:cc:c8:c5:9e:7f:8f:6f:3c:6d:9b:
4e:d2:1f:3f:a4:37:c0:91:ca:6f:6a:0e:89:21:83:
a4:05:85:36:f9:b6:69:c7:e0:c4:fa:3d:e9:f9:c4:
d3:a0:74:61:52:32:d5:a9:d8:3c:c8:c1:b9:b0:12:
07:3a:2b:16:ee:78:8a:84:50:55:1d:42:6b:b7:5d:
81:34:95:2c:85:b5:fd:16:b1:e6:79:9f:2f:30:2c:
0d:03:7a:e8:d3:36:e2:0f:0a:63:5e:58:3e:95:e3:
4c:91:0c:83:d5:82:89:f3:ec:69:da:fc:b1:b8:9e:
af:ed:6d:d0:fd:30:fb:2e:5d:55:d2:cf:64:ab:e7:
d7:6a:a9:c3:2d:f9:87:77:6d:f7:43:b9:3f:87:9b:
87:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:41:36:A4:45:3B:5A:3D:DC:E1:CF:B4:F1:C6:44:5E:C2:C7:91:DC
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a363030343a3a2f34382d3438203d3e20323138353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:6004::/48
Signature Algorithm: sha256WithRSAEncryption
70:c2:d8:53:60:76:9c:4e:90:0a:fe:a6:16:ae:4f:0f:98:00:
29:f7:7d:d8:de:1d:cb:ec:92:bb:f5:0f:46:34:3b:0b:03:17:
61:5c:bf:20:54:80:e0:9f:c3:34:70:3e:6a:85:9f:dc:12:51:
53:9d:70:02:0e:5a:0f:df:64:a9:78:f7:5b:93:31:b5:41:55:
a4:03:4c:fd:ec:82:ff:6a:4d:82:a7:e2:77:01:4d:c1:05:3f:
d5:d4:a5:27:7e:a3:dc:b6:bd:69:e0:28:35:de:5e:66:fb:e0:
52:b8:bc:8c:67:74:57:7d:96:f4:22:11:f0:9b:cb:22:56:b6:
bd:8c:53:32:69:6f:39:16:9e:73:f0:4f:fc:0e:08:40:86:7b:
3a:97:15:5d:81:f7:41:40:f6:b6:5e:94:06:d4:56:45:52:55:
5a:a3:a4:55:58:7d:18:0a:4a:9e:b2:78:8d:73:a6:ed:8a:20:
0d:ab:c4:25:16:3f:5e:e9:73:8b:a0:d6:b2:2f:92:df:c6:21:
9f:8d:aa:63:95:1f:1f:7f:e8:28:ca:cf:c9:16:0b:ea:ae:b2:
ce:bd:5e:bd:a8:51:8d:de:4e:6b:0f:24:c0:a6:76:cd:ac:e6:
4b:a2:b0:98:db:b6:3d:5b:24:91:af:cc:c5:9a:5c:a1:16:22:
3f:fd:9d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:36:17 2026 by rpki-client