Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a363030353a3a2f34382d3438203d3e20323138353338.roa
File: 326130663a316363353a363030353a3a2f34382d3438203d3e20323138353338.roa (raw, json)
Hash identifier: Ih+TNsbaC7J6aXn5CVL+Uqfc02qW+6XF4UMOdX/HpYc=
Subject key identifier: 6F:CD:25:E3:1C:B8:3F:F9:93:0E:BA:4C:A7:D0:A9:83:67:E6:7D:BF
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 255A489A559EEA47FC0AA8E22D4298783642C411
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a363030353a3a2f34382d3438203d3e20323138353338.roa
Signing time: Thu 08 Oct 2026 12:50:57 +0000
ROA not before: Thu 08 Oct 2026 12:45:57 +0000
ROA not after: Thu 07 Oct 2027 12:50:57 +0000
asID: 218538
IP address blocks: 2a0f:1cc5:6005::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 04:51:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:5a:48:9a:55:9e:ea:47:fc:0a:a8:e2:2d:42:98:78:36:42:c4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Oct 8 12:45:57 2026 GMT
Not After : Oct 7 12:50:57 2027 GMT
Subject: CN=6FCD25E31CB83FF9930EBA4CA7D0A98367E67DBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c2:8b:51:b6:bd:b0:d5:5c:0b:f0:07:22:b4:
ec:0a:39:d1:bb:20:94:2b:d1:dd:eb:c8:37:de:f0:
6b:1c:90:80:e3:06:c1:85:05:7c:c3:b4:e7:a8:34:
31:b0:76:41:1d:d5:ad:ee:7a:84:d1:31:fb:c1:2b:
8d:b0:3e:3a:58:28:82:df:b3:84:79:28:9a:d5:87:
78:5d:da:9a:09:39:bf:df:44:20:76:3a:2c:c0:9e:
b3:64:f6:6c:d6:75:ec:53:06:83:e0:75:f9:84:c1:
57:e1:02:e9:7c:85:8d:64:b8:c3:3b:88:25:1d:24:
3d:b7:bb:de:12:9e:a2:9b:12:ed:26:5e:31:10:a1:
5f:13:b0:bd:cd:b9:b0:21:72:90:88:6e:87:c6:ab:
82:bb:a2:65:30:81:43:2b:21:5c:58:eb:be:9a:2b:
4c:f9:6a:33:47:06:58:a0:2b:cb:35:52:29:0f:8e:
9f:1d:cc:21:18:45:bd:a3:66:3e:ee:1d:8a:c7:02:
dc:8d:e7:9f:0a:cd:85:0f:4a:aa:f9:89:c2:47:21:
1a:c6:c9:c7:13:4e:bd:41:2a:ac:92:8f:09:a3:f5:
ce:cc:64:1b:7f:ba:18:d3:40:a5:88:ed:ee:13:3e:
2e:7a:1e:4a:c2:58:70:52:63:b3:3a:c8:96:cb:0c:
18:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CD:25:E3:1C:B8:3F:F9:93:0E:BA:4C:A7:D0:A9:83:67:E6:7D:BF
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a363030353a3a2f34382d3438203d3e20323138353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:6005::/48
Signature Algorithm: sha256WithRSAEncryption
3a:05:f9:bd:7c:54:a4:1a:20:66:85:50:3f:44:bd:cd:a1:d5:
2b:2f:6c:bc:a2:68:95:2a:02:79:7c:86:77:5a:22:31:fa:43:
85:2f:2b:17:56:5a:5a:67:99:f8:3c:e4:8b:4a:dc:b0:58:39:
e8:32:7e:bb:08:75:77:e2:8c:47:75:c0:8f:80:cb:31:f1:1a:
06:53:05:47:1a:8b:bb:71:cd:24:ce:c2:e2:24:9b:bb:15:32:
5b:38:ba:84:f6:d1:fe:9f:4e:e6:95:a2:ad:b2:80:50:27:09:
41:aa:cd:b1:4f:c8:96:ce:97:1a:d4:23:6b:36:42:14:cb:36:
0c:d3:93:63:83:6f:6b:c8:0b:5d:cd:46:ca:e5:b1:c8:0b:90:
c7:0d:ca:ba:f3:df:b9:ba:0e:fe:a7:cb:2c:57:56:a4:1d:f8:
d4:7f:d6:46:be:c9:0c:8c:2a:c5:44:57:45:1a:08:97:6c:da:
e4:16:80:e7:86:d8:82:45:d0:82:58:d7:cc:3b:73:9b:93:05:
95:00:f6:ff:83:94:f6:c4:30:48:2b:e9:3e:9a:6b:f9:dc:8b:
46:06:bb:a2:64:96:ce:df:80:23:2b:1b:54:45:e6:c0:75:5c:
d4:0c:7f:b0:e8:17:c0:3a:1c:2a:dd:0f:f7:89:70:41:4e:f3:
fb:89:53:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 18:31:41 2026 by rpki-client