Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638323a653030303a3a2f33362d3438203d3e20323139323037.roa
File: 326130613a643638323a653030303a3a2f33362d3438203d3e20323139323037.roa (raw, json)
Hash identifier: /hbUb7P8tvehfjH0Hs94vC86vj3k0KrkZvYJd6dLPnA=
Subject key identifier: 0F:7A:46:B2:CA:62:91:24:B3:E4:C3:84:36:52:17:85:54:C0:99:FD
Certificate issuer: /CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Certificate serial: 0847E0D8F7F96F8D1A6D1639D6B69287E656187E
Authority key identifier: 0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638323a653030303a3a2f33362d3438203d3e20323139323037.roa
Signing time: Fri 17 Jul 2026 14:28:57 +0000
ROA not before: Fri 17 Jul 2026 14:23:57 +0000
ROA not after: Fri 16 Jul 2027 14:28:57 +0000
asID: 219207
IP address blocks: 2a0a:d682:e000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:47:e0:d8:f7:f9:6f:8d:1a:6d:16:39:d6:b6:92:87:e6:56:18:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Validity
Not Before: Jul 17 14:23:57 2026 GMT
Not After : Jul 16 14:28:57 2027 GMT
Subject: CN=0F7A46B2CA629124B3E4C3843652178554C099FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:93:64:14:94:5c:eb:1d:1a:c0:5e:46:07:e9:
e5:73:44:3d:e9:62:59:1b:c9:ac:ec:08:8d:75:e5:
da:b9:67:43:65:9f:80:3e:67:b4:7f:2c:52:0d:b3:
be:50:68:ea:0c:c2:f8:d3:74:b9:f0:27:a8:6e:b8:
17:5a:a7:2d:2f:ec:0a:3a:ca:54:58:44:f9:2f:29:
29:95:33:71:4d:76:2c:42:21:e4:67:03:c6:cd:cf:
6e:15:25:29:a2:f3:95:04:61:34:e1:c5:dc:f3:f8:
4f:9c:54:9b:83:ed:4a:2f:d7:aa:dd:ad:71:83:c3:
fa:42:4e:24:4a:a5:53:2e:bd:57:3f:e2:a4:fe:cf:
ac:cf:3f:49:30:fe:99:c0:d2:76:2d:cf:c8:e4:1e:
d4:8c:47:ad:78:3a:a7:e1:4e:9f:70:85:df:c9:d8:
dd:06:5c:58:36:5f:dd:ca:5f:15:7a:f3:99:63:5d:
82:a7:cc:95:3b:b0:84:17:27:51:25:11:84:a4:bb:
11:fa:f8:f9:63:29:39:2a:d3:57:a5:e7:81:16:aa:
df:a0:41:9e:bb:d7:77:24:cf:a8:d0:18:fd:38:5d:
98:d5:cc:30:b5:bb:33:e9:10:46:99:c0:9d:fc:f0:
1e:4b:0b:6f:55:d0:a7:6b:ba:c3:e5:b8:2e:6a:a4:
48:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7A:46:B2:CA:62:91:24:B3:E4:C3:84:36:52:17:85:54:C0:99:FD
X509v3 Authority Key Identifier:
keyid:0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638323a653030303a3a2f33362d3438203d3e20323139323037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d682:e000::/36
Signature Algorithm: sha256WithRSAEncryption
77:29:b6:4b:8f:62:4e:40:5a:b5:ea:c5:46:29:5f:b8:09:6b:
9b:c8:4a:eb:79:e7:e9:fc:ef:b2:4f:41:6c:7a:f8:1f:22:53:
ec:d0:09:a9:40:9d:57:bc:8f:80:66:79:7d:4d:35:e9:86:62:
c4:9b:07:3c:7c:80:43:c2:53:5e:10:28:a2:1c:dd:8d:2a:2c:
97:22:d2:b1:a0:b0:a6:c1:f5:a6:6b:1a:c3:cb:83:87:5f:00:
b7:21:72:73:5c:54:14:e2:fb:06:50:dc:2a:e7:9b:68:11:d1:
71:dc:6e:92:d5:0f:ce:e6:57:46:a7:54:99:27:bf:33:41:50:
f4:13:81:01:d3:84:54:d9:0b:bf:8d:c2:4e:70:b9:e6:9f:85:
fa:65:a1:b7:69:6c:1c:71:5b:d4:3b:ce:c8:58:b9:55:2c:81:
ca:f0:38:42:3f:d1:cf:c4:56:26:f7:c9:f7:de:96:bf:85:b0:
10:fd:5b:c7:20:ad:02:6c:7e:e0:4c:e7:ac:b9:52:80:1b:a2:
6f:7f:64:7f:0c:02:34:f6:c0:7d:16:1c:3b:24:76:00:79:43:
c9:b1:c7:80:91:4b:ce:e2:f5:4d:b2:cc:67:d9:04:7f:29:d6:
59:e3:cd:7e:7f:52:f9:db:02:7b:94:a2:db:7b:4c:77:97:97:
75:30:82:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:01 2026 by rpki-client