Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/326130323a323937303a3a2f32392d3438203d3e203433383437.roa
File: 326130323a323937303a3a2f32392d3438203d3e203433383437.roa (raw, json)
Hash identifier: AQQ26lv3mFMwuJYalDQOTND7aBaRxrpCSBYyfjNgtdc=
Subject key identifier: 04:45:18:E3:25:F5:B4:C6:F3:31:71:A9:04:80:08:8D:59:24:4D:4E
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 41E5410C46552BD5059F2E3C6B0CF1F720A7D32E
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/326130323a323937303a3a2f32392d3438203d3e203433383437.roa
Signing time: Tue 07 Jul 2026 15:48:59 +0000
ROA not before: Tue 07 Jul 2026 15:43:59 +0000
ROA not after: Tue 06 Jul 2027 15:48:59 +0000
asID: 43847
IP address blocks: 2a02:2970::/29 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 12:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:e5:41:0c:46:55:2b:d5:05:9f:2e:3c:6b:0c:f1:f7:20:a7:d3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Jul 7 15:43:59 2026 GMT
Not After : Jul 6 15:48:59 2027 GMT
Subject: CN=044518E325F5B4C6F33171A90480088D59244D4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:08:a9:17:da:d9:ab:0d:31:12:8e:1e:bc:c6:
6b:ea:bc:8c:36:be:7f:3d:b4:20:91:33:65:0c:25:
92:d4:cc:1e:52:52:1f:85:0b:67:04:be:da:cc:da:
a5:8b:e1:51:6f:34:2f:8b:3e:6d:81:9c:fd:14:4d:
bb:6c:dc:4b:07:aa:c2:37:13:30:1d:c5:37:90:04:
60:a9:ee:80:0f:cc:35:cf:5c:be:13:f1:5e:80:7a:
8f:d2:f6:10:dd:15:be:d0:70:c4:2b:1d:04:c0:a8:
50:95:d2:76:b9:ca:94:0c:9c:16:9a:c8:4e:c8:07:
2c:07:50:23:ef:28:a3:13:83:3e:88:08:e9:ab:56:
18:64:03:d4:6d:1f:8e:cf:ff:4c:a9:5b:44:40:bb:
9a:30:34:3b:76:5e:08:e7:d2:6e:44:91:e3:cb:99:
d9:aa:aa:a3:0f:b8:28:d6:44:e4:12:20:b2:4b:25:
a0:7b:fa:fb:df:ca:5f:a4:c0:74:8b:7a:3d:31:20:
58:6d:d0:0d:51:26:89:bb:e8:1d:1e:e8:c4:a7:a0:
7f:b8:46:33:66:c4:e8:03:2c:dc:d7:e2:a9:61:ed:
88:bb:b8:f2:67:03:79:a5:4b:47:a1:45:ba:88:c7:
54:40:9e:7f:64:2e:48:ed:fe:57:70:da:d3:e2:db:
5f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:45:18:E3:25:F5:B4:C6:F3:31:71:A9:04:80:08:8D:59:24:4D:4E
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/326130323a323937303a3a2f32392d3438203d3e203433383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2970::/29
Signature Algorithm: sha256WithRSAEncryption
2a:60:a8:83:a4:4d:28:7c:5e:61:91:02:2b:14:af:cc:8f:75:
99:f1:01:6b:bc:95:50:d5:ea:0b:7f:5f:10:f0:00:87:aa:0e:
f2:1c:ef:0f:1b:ea:21:4c:7d:c7:67:08:55:4d:30:8e:1a:bf:
42:a6:8c:da:d1:2a:4c:a8:07:9d:21:8c:6f:96:a1:a9:9a:32:
e8:07:64:8f:9b:a3:d9:83:b6:ad:e4:d0:4b:a6:75:36:d0:a8:
11:12:da:eb:d6:de:bd:79:24:d4:82:d2:44:ea:86:e0:42:fd:
4e:29:81:68:7d:bb:66:36:03:9f:2f:66:da:e4:5f:e9:5f:2c:
d3:46:bc:df:87:c0:ed:9c:31:55:17:6c:05:d3:b4:26:a7:ba:
f3:cd:5d:dd:f0:34:f8:33:ff:5e:80:de:af:1f:de:30:4d:23:
1b:55:b3:fc:85:39:8e:36:9f:ac:78:a2:cc:08:ab:90:4d:b2:
75:25:ad:4b:0e:e9:ff:c9:bb:63:07:66:80:76:f6:bb:1a:9a:
55:de:e6:46:1c:54:95:e9:fc:5e:3b:10:06:3e:a9:bd:5e:7a:
1b:95:4d:5c:0e:a7:a8:4a:ed:2d:46:49:95:1e:4f:13:55:3c:
48:22:0f:1b:2d:77:fe:cf:9d:35:48:e5:84:88:e8:72:72:bd:
80:c7:80:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:24:11 2026 by rpki-client