Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a6130303a3a2f34302d3438203d3e20313938323636.roa
File: 326130663a316363353a6130303a3a2f34302d3438203d3e20313938323636.roa (raw, json)
Hash identifier: z/BylRZ6USs55TrayD2RlWKD+C7g8qmS6z6zHCIAA3A=
Subject key identifier: 06:67:16:A4:2D:E5:CC:32:C0:A8:2A:A2:9B:41:2B:49:B2:0B:3D:C0
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 5888CBD6590414DFEF7F6DE0F526722292D53B5A
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a6130303a3a2f34302d3438203d3e20313938323636.roa
Signing time: Tue 02 Jun 2026 12:18:15 +0000
ROA not before: Tue 02 Jun 2026 12:13:15 +0000
ROA not after: Tue 01 Jun 2027 12:18:15 +0000
asID: 198266
IP address blocks: 2a0f:1cc5:a00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Jun 2026 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:88:cb:d6:59:04:14:df:ef:7f:6d:e0:f5:26:72:22:92:d5:3b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jun 2 12:13:15 2026 GMT
Not After : Jun 1 12:18:15 2027 GMT
Subject: CN=066716A42DE5CC32C0A82AA29B412B49B20B3DC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d4:70:97:2e:d2:59:6e:13:dc:67:42:c1:7d:
36:3a:80:d7:63:6c:61:e3:d1:45:1f:ca:ef:a1:70:
65:1c:65:22:06:48:71:f7:41:18:54:50:87:1e:47:
07:5d:87:e4:4f:a9:6c:34:ac:c4:32:cb:76:e4:68:
5d:ed:e9:91:e7:4a:89:1a:68:07:ee:e6:02:9e:25:
01:03:ff:9b:18:d6:00:67:c5:3d:67:24:a2:e4:26:
0d:44:13:74:4f:07:a7:9e:ef:9f:6b:c4:1e:5a:23:
f8:e3:28:55:a7:7a:ca:e6:9e:14:a7:ec:8a:db:95:
71:c9:4d:df:59:6b:b9:06:29:f1:1f:5c:0c:97:b2:
6c:18:3a:e3:ab:70:0c:48:24:9b:7e:4f:4f:27:3d:
0b:4c:7b:ea:3b:cf:54:be:49:24:1d:3d:81:a0:0d:
7e:37:7d:d4:fd:06:27:c6:14:dc:7e:32:a4:99:a0:
1c:2d:1e:f0:90:99:5d:40:ac:06:9b:e0:09:e1:d7:
08:c6:cd:16:eb:52:6e:2a:4f:a5:43:9b:b8:77:e1:
4b:af:22:6c:ac:87:62:8b:06:e0:d1:3b:a2:16:e0:
f4:c6:b2:21:4f:36:02:80:c6:f7:64:ce:59:6d:ce:
4e:3a:93:5b:f5:5c:f0:a9:9e:29:90:0b:eb:84:67:
5a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:67:16:A4:2D:E5:CC:32:C0:A8:2A:A2:9B:41:2B:49:B2:0B:3D:C0
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a6130303a3a2f34302d3438203d3e20313938323636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:a00::/40
Signature Algorithm: sha256WithRSAEncryption
62:39:6d:b0:fc:54:9d:e0:f6:2e:47:d0:83:7e:fc:15:75:16:
a1:9f:11:27:f2:cb:ff:62:e9:08:e6:67:ab:ce:8c:d6:7c:15:
dc:ad:0a:f9:d1:8a:22:15:8a:4e:b3:b1:86:9e:c1:46:a2:d6:
e8:25:64:75:08:c7:00:48:80:02:7a:f5:7a:73:9f:82:28:90:
e1:b3:71:98:7d:3a:b3:2b:4d:ce:d1:79:e9:c8:56:bc:fc:17:
7e:38:a8:3c:91:6a:65:68:aa:64:e8:71:fa:af:21:bd:1b:1c:
df:33:83:65:24:f6:a4:60:aa:28:c0:d4:19:52:47:c2:30:b5:
85:0f:1a:3d:23:32:e0:7c:10:95:cb:35:1f:15:6a:4e:ad:6d:
72:82:70:ae:da:b7:eb:a2:6d:a4:38:4d:15:ba:c6:63:6d:10:
b0:99:18:05:bd:31:cd:7e:ae:e5:41:a8:cb:c8:b4:18:55:ba:
85:b9:0e:71:83:99:ad:ee:85:8a:ab:97:77:4a:36:38:df:c5:
7c:9d:e5:22:44:41:85:4d:6a:25:aa:82:46:77:18:ca:4f:f0:
70:2d:af:88:66:ce:41:23:d9:ba:b8:12:1c:71:c8:a0:6a:14:
c6:c7:00:4b:a3:5b:94:68:89:cd:21:dd:2f:b3:f4:15:ed:a7:
b7:fb:4a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 09:26:39 2026 by rpki-client