Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a6530303a3a2f34302d3438203d3e20323034353339.roa
File: 326130663a316363353a6530303a3a2f34302d3438203d3e20323034353339.roa (raw, json)
Hash identifier: KgFPH6R62r0FiFBgjl0hxGJeAs7Sa/ZuP8AlpSL5BtY=
Subject key identifier: AD:D3:68:9D:40:F0:8D:DE:54:E7:19:6D:40:34:43:0F:6D:89:0D:26
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 7C337EBC9359681425CF4BE83A7AAB3D50593A04
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a6530303a3a2f34302d3438203d3e20323034353339.roa
Signing time: Tue 02 Jun 2026 12:18:26 +0000
ROA not before: Tue 02 Jun 2026 12:13:26 +0000
ROA not after: Tue 01 Jun 2027 12:18:26 +0000
asID: 204539
IP address blocks: 2a0f:1cc5:e00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:33:7e:bc:93:59:68:14:25:cf:4b:e8:3a:7a:ab:3d:50:59:3a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jun 2 12:13:26 2026 GMT
Not After : Jun 1 12:18:26 2027 GMT
Subject: CN=ADD3689D40F08DDE54E7196D4034430F6D890D26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fb:fa:75:e1:de:62:47:51:48:d7:8b:2a:f3:
c0:33:46:b8:07:ad:d7:bd:d1:60:d9:3b:f0:7f:c8:
87:92:f7:32:f0:d5:bc:01:aa:d9:12:ef:fc:4b:12:
91:0e:a7:2b:82:fe:94:5d:bf:57:b6:70:e1:f5:c7:
e4:e2:09:7d:6b:db:ad:f7:08:8e:80:8c:20:ad:96:
e2:47:24:2e:f9:c3:e3:34:34:12:25:c5:f6:6a:df:
c1:58:01:f1:fc:e4:e5:0f:88:a3:12:8a:1b:4d:35:
04:bb:e9:c5:7c:a7:73:a1:b1:3d:85:ef:dd:65:5c:
49:70:1c:39:dd:9a:7f:89:64:ff:dd:4c:53:76:15:
52:31:12:f9:a2:97:1c:d5:33:bb:41:9b:7c:9e:89:
81:33:3f:f5:1a:81:e2:dd:58:37:aa:a7:8f:b1:0e:
6f:cf:ca:5b:a1:0d:9a:62:57:81:82:75:19:9c:c8:
e5:e7:54:26:8c:dc:d2:e5:e2:3c:78:dd:8f:ad:2c:
2c:58:8b:e4:98:25:0c:4a:60:3d:c3:2d:0f:63:50:
ba:56:6a:ed:34:79:eb:8e:9b:0b:05:69:a4:ce:78:
cd:41:18:36:c5:74:74:29:64:9a:20:ae:cc:a5:d1:
18:f4:da:58:32:74:e8:76:4c:5c:fc:4e:d8:c9:7e:
ca:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D3:68:9D:40:F0:8D:DE:54:E7:19:6D:40:34:43:0F:6D:89:0D:26
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a6530303a3a2f34302d3438203d3e20323034353339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:e00::/40
Signature Algorithm: sha256WithRSAEncryption
38:8c:89:41:9b:9e:ea:c5:59:05:4a:16:48:5f:ea:b0:25:ee:
b3:43:b7:a1:8d:cc:34:08:38:42:1e:4e:a6:e2:b3:15:86:cf:
0d:a5:08:d2:19:66:78:61:f1:67:57:85:02:05:9b:b2:da:a2:
a8:6b:09:c0:46:b6:42:92:e6:28:80:62:4a:56:f9:4c:d8:9f:
8e:12:e6:ac:93:d9:f4:a9:ed:95:50:63:9e:3b:c6:07:d0:eb:
a3:fe:f8:9d:77:86:ce:b3:4e:e0:8e:ec:93:5d:90:45:3a:1e:
5a:35:f2:19:54:ca:0b:24:3e:e7:cc:16:d2:1a:b1:48:1c:b4:
95:fb:f5:d8:7d:87:a3:a2:e9:dd:26:da:c6:ec:82:7e:84:f9:
62:0c:6b:d9:17:b5:da:2b:1e:e4:b0:0d:e4:e2:9e:cc:1d:2b:
71:68:82:ae:ce:1c:34:c2:a2:07:f4:e8:b9:65:fe:4a:fa:48:
3f:61:76:00:b5:5d:6a:2e:9e:fa:d5:da:07:b1:1f:a5:55:68:
a5:59:29:21:da:b7:24:63:35:1d:e2:9b:22:13:9e:14:e8:49:
01:2e:55:28:ac:97:11:c6:e9:be:87:b3:57:7a:b6:c7:92:d6:
1d:a7:58:98:da:bb:ec:8e:54:d3:c4:0e:fe:29:0e:c5:42:f8:
a3:69:3d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:23:00 2026 by rpki-client