Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638303a3a2f33322d3438203d3e20313339333137.roa
File: 326130613a643638303a3a2f33322d3438203d3e20313339333137.roa (raw, json)
Hash identifier: 9uxdhCWJM/sIXCpTZUmH78FRG6qiNbULLGusY6bMbzg=
Subject key identifier: 0F:0D:FA:C4:16:99:35:2B:7E:80:2C:D5:A2:3B:CB:6D:13:DC:87:0D
Certificate issuer: /CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Certificate serial: 545E016BBF5B329785CD1D07A536C4A1A68B6B59
Authority key identifier: 0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638303a3a2f33322d3438203d3e20313339333137.roa
Signing time: Thu 04 Jun 2026 01:29:37 +0000
ROA not before: Thu 04 Jun 2026 01:24:37 +0000
ROA not after: Thu 03 Jun 2027 01:29:37 +0000
asID: 139317
IP address blocks: 2a0a:d680::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:11:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:5e:01:6b:bf:5b:32:97:85:cd:1d:07:a5:36:c4:a1:a6:8b:6b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Validity
Not Before: Jun 4 01:24:37 2026 GMT
Not After : Jun 3 01:29:37 2027 GMT
Subject: CN=0F0DFAC41699352B7E802CD5A23BCB6D13DC870D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c6:ca:5c:ad:40:7a:6c:7c:cd:d5:d0:87:1e:
1c:ac:8e:df:c4:ba:1b:14:4c:7e:8f:79:00:bc:f5:
75:e3:0d:fb:22:d2:19:99:80:36:a9:37:a3:c6:76:
83:c0:e1:f6:29:a5:91:a9:98:5f:10:f9:46:8e:ec:
a5:44:b5:69:99:e7:72:88:7c:b2:fa:6f:e7:cb:46:
e7:8d:3a:f3:4d:ef:17:d0:3c:89:1e:5e:c0:37:c1:
89:d2:7f:25:d7:e0:8b:3e:03:67:48:0b:3e:fb:6a:
eb:66:ba:9e:81:a6:81:47:5a:5f:c7:af:e8:dc:46:
b6:f6:74:ca:29:c9:44:4f:57:41:31:f8:31:29:82:
9e:b3:1d:f2:7c:9c:85:9b:36:b1:e1:eb:94:00:d6:
79:ca:9c:96:67:93:ba:52:b7:c4:23:74:45:97:76:
86:76:b7:ea:4e:16:1f:2a:b0:36:5e:08:d5:f6:3f:
c6:72:ba:ba:e9:78:6f:51:6e:a6:1f:1d:65:e0:97:
39:7f:00:02:f0:8f:8b:41:b3:e9:60:16:c9:be:15:
9c:50:25:43:ad:a1:dc:68:c6:98:b0:d1:c8:b3:5d:
03:4c:30:e7:6b:47:a8:51:da:1b:63:37:05:da:ce:
a5:71:b5:d1:3f:4f:ea:e4:c6:12:a9:fa:f0:d0:2a:
0d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0D:FA:C4:16:99:35:2B:7E:80:2C:D5:A2:3B:CB:6D:13:DC:87:0D
X509v3 Authority Key Identifier:
keyid:0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638303a3a2f33322d3438203d3e20313339333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d680::/32
Signature Algorithm: sha256WithRSAEncryption
11:b8:62:d6:2b:a6:b8:60:54:59:1c:a4:f1:45:ea:b5:d5:2f:
e4:b3:7e:ca:7d:dc:dd:cf:4d:56:d2:e5:45:71:db:f3:ed:7a:
72:59:d6:cb:35:ec:d2:d3:a1:ad:07:c8:f5:d2:7e:2f:0f:27:
18:76:0e:50:08:9a:36:70:3a:d5:90:ce:6f:70:d7:bc:35:07:
00:ef:1c:65:4f:e4:50:02:82:1e:ab:12:80:c5:47:46:03:85:
40:dc:4f:7b:1b:a6:05:35:47:5f:6d:ce:5a:c1:ea:57:2c:70:
3b:18:8a:68:82:e3:ca:ea:fe:bf:d1:79:8a:a8:29:0c:32:97:
0d:96:2d:06:43:6d:27:d1:ed:c8:25:59:59:c0:97:4f:86:5b:
96:06:bd:ca:50:4c:96:a1:01:57:3d:1f:75:b4:7b:32:78:27:
32:83:32:fb:9b:41:3e:67:1c:28:b6:3a:90:b5:99:39:1d:0d:
0a:ad:ab:67:e0:28:53:15:79:a4:77:6e:83:fc:fe:35:bd:f3:
3f:15:1a:ce:65:f2:ff:c3:60:81:27:04:5a:b2:76:73:73:d7:
58:53:a4:3f:7f:9b:7e:06:10:b9:c7:db:b4:e2:33:bc:b9:b8:
5c:2c:8b:20:f5:e3:ad:fa:37:6e:55:de:91:fc:3d:a1:70:91:
5f:0a:43:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:14:50 2026 by rpki-client