Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638323a643030303a3a2f33362d3438203d3e20323139323038.roa
File: 326130613a643638323a643030303a3a2f33362d3438203d3e20323139323038.roa (raw, json)
Hash identifier: v/BWIbyLFdNKWIJBTAMGuH9YaifhTiluWVcVxi+Fhlk=
Subject key identifier: 2C:64:55:A8:AB:00:D2:D7:F9:81:A8:39:9C:AB:46:77:38:92:68:61
Certificate issuer: /CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Certificate serial: 652AA0A6D148E836D07DAD486E1FA618B545DDC8
Authority key identifier: 0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638323a643030303a3a2f33362d3438203d3e20323139323038.roa
Signing time: Fri 17 Jul 2026 14:29:07 +0000
ROA not before: Fri 17 Jul 2026 14:24:07 +0000
ROA not after: Fri 16 Jul 2027 14:29:07 +0000
asID: 219208
IP address blocks: 2a0a:d682:d000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:2a:a0:a6:d1:48:e8:36:d0:7d:ad:48:6e:1f:a6:18:b5:45:dd:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Validity
Not Before: Jul 17 14:24:07 2026 GMT
Not After : Jul 16 14:29:07 2027 GMT
Subject: CN=2C6455A8AB00D2D7F981A8399CAB467738926861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4b:d1:31:61:c0:16:d1:93:0f:0b:18:99:1a:
b4:c4:8b:2a:49:b6:2a:67:8d:32:50:b4:f9:4c:f7:
29:19:df:b7:e6:dd:a8:65:f4:33:14:49:b0:1f:36:
fd:f5:6b:60:ea:6d:b7:f7:b2:0f:b2:b5:e5:f7:86:
f6:fc:ca:05:61:8c:49:81:08:8f:c6:cf:ea:57:60:
58:71:3e:05:55:68:9d:70:b7:5b:dc:4a:0d:07:16:
97:f5:d3:d9:01:3c:de:47:5e:8c:67:fe:cf:9b:f6:
ca:a7:1a:7a:35:15:58:c7:06:ef:95:88:61:43:97:
90:a1:2f:ea:38:3a:5a:f5:f6:14:be:71:54:de:1f:
c8:38:1e:a3:b7:2a:9e:4d:94:5b:0b:33:fd:4a:e2:
ef:87:ea:14:9f:89:ba:99:e9:10:0b:64:ab:f2:ee:
22:5b:2f:63:7f:e2:30:fe:a4:d7:ff:a7:20:89:18:
a3:4e:7c:fe:60:7d:e7:12:27:53:18:86:bf:42:a6:
de:ff:9c:7b:e5:df:13:df:5b:3c:45:0c:da:56:08:
83:5b:8b:0e:fd:c5:5b:33:07:2e:8f:c9:6d:de:01:
35:33:1c:b7:1b:11:2a:9a:15:46:44:8f:ca:1c:40:
a3:9c:33:5d:1c:7e:3c:dd:6c:df:cb:06:a6:35:c3:
bc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:64:55:A8:AB:00:D2:D7:F9:81:A8:39:9C:AB:46:77:38:92:68:61
X509v3 Authority Key Identifier:
keyid:0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638323a643030303a3a2f33362d3438203d3e20323139323038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d682:d000::/36
Signature Algorithm: sha256WithRSAEncryption
a6:df:51:88:2b:e9:53:14:cc:0f:e4:42:ea:28:12:fe:ec:20:
ef:2f:30:eb:9f:7a:a0:81:bb:13:27:71:2b:0e:03:4f:ca:76:
c3:2d:c0:bd:d2:81:b2:e4:4c:f9:fe:1b:e0:c3:cf:06:81:fd:
33:0a:74:17:8d:87:02:d4:fd:80:49:7e:50:41:13:22:4e:9a:
9f:34:b4:e6:e5:ce:94:ad:0e:ae:46:5a:c7:8d:95:f7:63:9f:
9f:1e:a5:7a:7e:cd:5a:12:5b:7f:88:73:27:16:9c:a6:01:08:
0c:62:53:a4:da:a5:f4:9a:6f:7c:d7:45:eb:9b:59:ef:93:47:
ce:15:01:b8:d2:d3:b6:ff:d1:3c:33:87:cd:aa:0a:7e:25:ee:
83:3b:9b:83:33:ef:7f:6f:c4:75:a1:24:1c:ef:a5:f5:e6:84:
5b:1d:93:ea:45:21:76:4c:a4:67:1b:83:2a:9c:6a:27:25:b2:
92:5a:04:a6:ce:ba:5b:fb:bd:50:a0:17:05:44:63:20:29:d5:
74:32:f4:a8:d0:86:5c:d5:b5:6a:97:c9:52:7d:a9:a8:92:3e:
08:c4:ee:d1:53:ed:35:99:d1:99:60:7c:19:57:ef:c7:d5:4e:
ff:1e:34:be:a1:89:80:e8:41:27:8e:89:b8:ed:73:87:9b:e0:
44:f4:42:c7
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUZSqgptFI6DbQfa1Ibh+mGLVF3cgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGU3MGFlMGFjZDBiZTgzZDJkNDU4Y2EyMDdiMWQ0ZmZh
M2MzZTRlYTAeFw0yNjA3MTcxNDI0MDdaFw0yNzA3MTYxNDI5MDdaMDMxMTAvBgNV
BAMTKDJDNjQ1NUE4QUIwMEQyRDdGOTgxQTgzOTlDQUI0Njc3Mzg5MjY4NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/S9ExYcAW0ZMPCxiZGrTEiypJ
tipnjTJQtPlM9ykZ37fm3ahl9DMUSbAfNv31a2Dqbbf3sg+yteX3hvb8ygVhjEmB
CI/Gz+pXYFhxPgVVaJ1wt1vcSg0HFpf109kBPN5HXoxn/s+b9sqnGno1FVjHBu+V
iGFDl5ChL+o4Olr19hS+cVTeH8g4HqO3Kp5NlFsLM/1K4u+H6hSfibqZ6RALZKvy
7iJbL2N/4jD+pNf/pyCJGKNOfP5gfecSJ1MYhr9Cpt7/nHvl3xPfWzxFDNpWCINb
iw79xVszBy6PyW3eATUzHLcbESqaFUZEj8ocQKOcM10cfjzdbN/LBqY1w7zZAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQULGRVqKsA0tf5gag5nKtGdziSaGEwHwYDVR0j
BBgwFoAUDnCuCs0L6D0tRYyiB7HU/6PD5OowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjNmMmFhYWUtMjNjZi00YTM3LTk0MDMtNzQzYjE1ZWMy
YThlLzAvMEU3MEFFMEFDRDBCRTgzRDJENDU4Q0EyMDdCMUQ0RkZBM0MzRTRFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RuQ3VDczBMNkQwdFJZeWlCN0hVXzZQ
RDVPby5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjNmMmFhYWUt
MjNjZi00YTM3LTk0MDMtNzQzYjE1ZWMyYThlLzAvMzI2MTMwNjEzYTY0MzYzODMy
M2E2NDMwMzAzMDNhM2EyZjMzMzYyZDM0MzgyMDNkM2UyMDMyMzEzOTMyMzAzOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGBCoK1oLQMA0GCSqGSIb3DQEBCwUAA4IBAQCm31GIK+lTFMwP5ELq
KBL+7CDvLzDrn3qggbsTJ3ErDgNPynbDLcC90oGy5Ez5/hvgw88Ggf0zCnQXjYcC
1P2ASX5QQRMiTpqfNLTm5c6UrQ6uRlrHjZX3Y5+fHqV6fs1aElt/iHMnFpymAQgM
YlOk2qX0mm9810Xrm1nvk0fOFQG40tO2/9E8M4fNqgp+Je6DO5uDM+9/b8R1oSQc
76X15oRbHZPqRSF2TKRnG4MqnGonJbKSWgSmzrpb+71QoBcFRGMgKdV0MvSo0IZc
1bVql8lSfamokj4IxO7RU+01mdGZYHwZV+/H1U7/HjS+oYmA6EEnjom47XOHm+BE
9ELH
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:02:30 2026 by rpki-client