Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a363030363a3a2f34382d3438203d3e20323138353338.roa
File: 326130663a316363353a363030363a3a2f34382d3438203d3e20323138353338.roa (raw, json)
Hash identifier: 6sG7lwcuBUmbkY4wUkjRp9GDlw0JGUoMeKskGWvPjCg=
Subject key identifier: D1:92:9F:A9:D4:CD:CB:2D:4A:DF:44:D8:21:7A:54:5C:F0:D6:94:C4
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 3D70618ECB6ED385BBA38F6195B77B47B6061C21
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a363030363a3a2f34382d3438203d3e20323138353338.roa
Signing time: Thu 08 Oct 2026 12:51:27 +0000
ROA not before: Thu 08 Oct 2026 12:46:27 +0000
ROA not after: Thu 07 Oct 2027 12:51:27 +0000
asID: 218538
IP address blocks: 2a0f:1cc5:6006::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:70:61:8e:cb:6e:d3:85:bb:a3:8f:61:95:b7:7b:47:b6:06:1c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Oct 8 12:46:27 2026 GMT
Not After : Oct 7 12:51:27 2027 GMT
Subject: CN=D1929FA9D4CDCB2D4ADF44D8217A545CF0D694C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:71:8a:fe:fa:58:a5:5c:f8:e8:f1:26:66:35:
2d:57:58:ab:03:58:84:4f:e5:86:41:a5:43:74:a2:
37:40:b4:cc:91:18:56:5f:c7:c6:a5:bc:36:bf:03:
cd:f3:3b:4f:b1:9c:0f:20:60:5a:9c:16:0e:13:eb:
9c:35:f0:4e:07:36:fe:bc:38:b4:f7:93:8f:31:29:
e8:cb:70:ae:4b:5d:9b:21:0d:d6:1f:35:30:3d:85:
86:3e:a9:1f:ad:0c:7a:cc:df:08:f6:5a:89:05:1a:
7e:73:14:59:c9:e8:b4:fe:87:da:23:d6:85:44:54:
1c:cd:ec:42:f6:3a:d1:cf:45:16:36:2a:39:9c:9b:
3f:e4:13:70:01:47:7d:61:a6:61:4d:c0:c0:d4:fa:
20:6a:79:93:da:64:c2:7c:1d:f5:53:09:85:39:13:
85:5f:c8:97:ae:25:25:b0:84:6f:14:50:57:7b:a1:
8d:2b:3e:63:ef:cc:46:4b:b2:41:ee:9a:0b:ad:49:
b1:15:c5:17:cc:d4:6a:15:36:f3:eb:6b:3b:66:be:
59:e1:28:2b:60:a4:ed:4d:32:9a:2e:63:d9:b4:df:
e2:6c:ee:05:ba:b2:53:92:26:71:42:95:a4:e0:bb:
a6:97:92:4a:2d:2a:52:62:c8:72:5e:36:20:2d:16:
e8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:92:9F:A9:D4:CD:CB:2D:4A:DF:44:D8:21:7A:54:5C:F0:D6:94:C4
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a363030363a3a2f34382d3438203d3e20323138353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:6006::/48
Signature Algorithm: sha256WithRSAEncryption
7e:78:bb:f2:69:9d:0b:ba:ef:11:49:46:3b:4b:d4:ae:86:c2:
b3:f3:13:b2:19:05:15:3c:94:70:ee:cd:ed:10:a3:c0:b8:f3:
fc:ff:a9:ff:94:90:0c:05:83:e7:e4:06:f3:b1:5c:60:52:20:
65:da:f4:1f:aa:4e:18:d8:e1:be:3f:98:72:56:55:24:2a:bd:
91:4e:a4:f2:bf:7a:06:cb:27:30:0a:be:85:60:44:a2:5c:a4:
23:5d:82:cc:e2:6d:8f:25:17:ed:e3:34:d6:62:47:4e:5f:28:
48:82:28:7c:3e:39:56:90:5f:11:1d:f6:bc:62:e4:6f:31:d0:
79:da:cd:42:21:2d:f1:48:d0:e3:74:41:2b:58:ae:28:0e:b1:
11:27:c9:07:e4:a3:37:3a:c4:6f:e6:05:9f:9e:7c:78:86:a7:
82:3a:47:fa:eb:b7:4e:f2:e0:69:ee:38:f8:d7:9f:9f:05:9d:
fe:c3:96:9c:dc:37:3e:84:2c:1a:5d:cf:e1:0a:ac:6e:44:02:
37:22:3d:bd:d7:1b:db:f1:13:d5:92:42:47:93:53:8b:9e:a3:
e4:c9:bb:5e:5e:43:81:17:ab:08:89:b9:33:04:db:39:f1:77:
25:a0:56:9f:6a:60:13:c6:ea:a7:7b:21:b9:10:ce:bf:3c:47:
3a:24:f0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:36:09 2026 by rpki-client