Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363373a666631393a3a2f34382d3438203d3e20323032333335.roa
File: 326130663a316363373a666631393a3a2f34382d3438203d3e20323032333335.roa (raw, json)
Hash identifier: RQ0Lg+JpJSJYt8UdSr6pSh4RVGgQN+TMzSSkZlJK7ek=
Subject key identifier: 43:00:93:B9:85:AD:FA:47:06:E4:2A:07:81:C9:5B:97:13:73:36:93
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 2C9B95C8C38A682FFE1B38C5499D26C64B955E47
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363373a666631393a3a2f34382d3438203d3e20323032333335.roa
Signing time: Thu 20 Aug 2026 13:17:54 +0000
ROA not before: Thu 20 Aug 2026 13:12:54 +0000
ROA not after: Thu 19 Aug 2027 13:17:54 +0000
asID: 202335
IP address blocks: 2a0f:1cc7:ff19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:58:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:9b:95:c8:c3:8a:68:2f:fe:1b:38:c5:49:9d:26:c6:4b:95:5e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Aug 20 13:12:54 2026 GMT
Not After : Aug 19 13:17:54 2027 GMT
Subject: CN=430093B985ADFA4706E42A0781C95B9713733693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5e:15:81:6f:7e:54:f0:ba:cf:9c:40:e5:31:
8f:6b:4d:33:83:98:7a:f7:ff:59:ed:d5:b7:79:c0:
31:cc:31:f0:e8:76:6c:80:a1:23:1c:b2:de:c5:62:
6e:fe:9f:4c:85:81:13:28:44:60:02:36:7e:7c:c9:
1a:f1:5f:34:0f:e7:7f:81:9d:da:4c:b7:1c:59:de:
fe:16:ee:ae:6e:9d:57:da:c8:ca:29:e8:3d:b0:ba:
28:c7:53:b3:9e:31:ae:44:a7:1a:08:63:f4:bd:0b:
b9:5e:69:00:ab:21:8c:95:8c:81:35:6f:94:62:9b:
4b:c9:03:c5:15:48:71:ba:d0:0b:cd:d3:ff:d9:60:
01:df:d6:26:55:8a:10:7c:04:b3:64:55:7e:a3:d0:
5b:92:22:f3:1a:43:28:e3:56:cb:e1:29:79:52:e5:
c2:11:41:d9:0c:f0:f6:62:e6:6f:47:a8:3c:9b:ea:
ec:6b:67:1d:93:0d:b2:a4:0b:fe:ea:29:04:16:a5:
6f:9c:d8:02:36:67:3e:6c:30:23:03:44:57:dc:cd:
94:7e:08:27:64:a1:73:3b:45:94:19:cc:68:2a:c1:
ff:db:8a:7e:08:0c:91:4b:de:f1:29:d3:55:1b:46:
1c:5a:bb:00:04:1a:bf:86:fb:f0:88:45:25:28:e2:
97:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:00:93:B9:85:AD:FA:47:06:E4:2A:07:81:C9:5B:97:13:73:36:93
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363373a666631393a3a2f34382d3438203d3e20323032333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc7:ff19::/48
Signature Algorithm: sha256WithRSAEncryption
32:8a:35:ea:52:30:c7:85:e7:83:88:11:27:c8:89:02:4a:d8:
34:cb:25:b3:b9:bb:9f:68:e5:8e:74:22:fd:fc:bc:06:69:b5:
66:3f:ea:a4:c1:98:66:aa:3f:3d:ec:8c:ef:82:81:94:dd:f9:
6b:a2:c2:29:65:96:b5:45:b4:a8:10:32:cf:c4:0d:08:af:5b:
59:13:0e:8c:74:0b:a8:54:1e:5d:14:4f:0e:79:05:12:36:0c:
d2:7f:02:e7:3b:b8:87:d4:0a:48:35:0c:00:a5:10:ec:fc:26:
4a:0b:55:02:6c:ed:05:3f:53:c9:b1:ee:7e:06:4b:91:18:20:
29:57:5d:aa:f3:3d:ba:6a:3c:d2:16:58:48:95:66:0d:d6:c2:
8f:3b:d9:d2:76:9b:f4:fa:66:4f:a7:c2:f6:2e:6e:74:c7:7b:
eb:74:d4:a7:f0:05:90:70:10:c9:3c:a2:57:a2:6f:f0:bb:bd:
82:c5:c5:b9:1a:c6:9d:73:90:8c:b5:67:ca:b4:b9:0f:c9:6b:
c1:95:b7:1e:cc:d8:cf:7e:7f:0a:9b:46:86:10:68:db:6f:0b:
0e:b0:d3:de:70:ac:f2:98:46:8e:ee:e6:b0:49:8b:f9:15:b1:
95:63:0c:81:c9:15:c0:d8:da:22:fc:a4:47:24:6a:d9:ea:70:
12:cf:1d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:40 2026 by rpki-client