Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638323a663030303a3a2f33362d3438203d3e20323139323833.roa
File: 326130613a643638323a663030303a3a2f33362d3438203d3e20323139323833.roa (raw, json)
Hash identifier: 8/Dy4zPyPwRTfYS2Cii0dXxY7IAyPHqGc67WcpaHY8g=
Subject key identifier: 03:33:B2:BB:47:CC:FD:E7:1C:B3:FC:29:FF:3D:BD:BE:ED:BC:B5:73
Certificate issuer: /CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Certificate serial: 04AB792F6C717DDF85331EC2825979A86AD52EBC
Authority key identifier: 0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638323a663030303a3a2f33362d3438203d3e20323139323833.roa
Signing time: Fri 17 Jul 2026 14:28:33 +0000
ROA not before: Fri 17 Jul 2026 14:23:33 +0000
ROA not after: Fri 16 Jul 2027 14:28:33 +0000
asID: 219283
IP address blocks: 2a0a:d682:f000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:ab:79:2f:6c:71:7d:df:85:33:1e:c2:82:59:79:a8:6a:d5:2e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Validity
Not Before: Jul 17 14:23:33 2026 GMT
Not After : Jul 16 14:28:33 2027 GMT
Subject: CN=0333B2BB47CCFDE71CB3FC29FF3DBDBEEDBCB573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0c:ff:31:19:22:ff:62:17:3c:48:6e:37:03:
e7:32:47:dc:5f:4d:f5:e6:3c:3d:7c:e5:bc:55:18:
f5:07:a0:08:01:a9:43:3d:cd:52:52:9b:3b:b8:6d:
8c:44:f1:a7:37:99:ba:05:2a:3e:74:c8:6d:2f:0a:
3f:36:d9:a0:71:d4:75:a3:25:a1:95:19:8b:5c:87:
0c:17:f4:42:25:0e:6f:67:b4:34:8e:b1:4d:74:10:
3c:29:c9:c4:aa:10:09:fe:14:84:48:ae:d6:4d:b4:
58:34:12:9e:96:3c:11:0a:40:1c:7d:5e:c6:33:26:
e6:8c:f1:c8:f5:9f:6f:14:8d:8d:9b:16:62:ec:47:
b6:38:4e:b4:20:0b:50:db:eb:1d:57:1f:2f:1f:46:
77:55:16:c5:9b:90:40:3b:25:7e:4e:d7:1e:95:b8:
9b:26:89:5d:80:a2:10:76:60:34:1b:ea:b9:56:f1:
ae:2a:f3:7b:ab:6f:fb:a3:bd:74:72:d3:c0:8f:83:
2d:e9:2a:51:ca:cd:b9:23:63:aa:7b:ba:c3:03:38:
78:74:19:70:db:4f:37:62:2a:fd:c1:bf:d7:5e:32:
d2:8a:ab:57:c9:dc:4a:e7:7e:72:6f:2e:e2:1f:2c:
25:49:f1:bf:a4:35:ef:7f:db:20:65:7f:f1:9d:62:
dd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:33:B2:BB:47:CC:FD:E7:1C:B3:FC:29:FF:3D:BD:BE:ED:BC:B5:73
X509v3 Authority Key Identifier:
keyid:0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638323a663030303a3a2f33362d3438203d3e20323139323833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d682:f000::/36
Signature Algorithm: sha256WithRSAEncryption
a9:b8:5a:c2:90:eb:8d:1b:80:d2:4f:e6:28:7b:90:17:0d:5d:
29:90:60:c8:ed:e6:01:cf:46:52:43:ca:66:9f:85:fc:4c:d6:
42:53:dd:15:16:22:3e:01:e0:f2:d3:6e:e8:fc:a6:44:59:e6:
b6:3d:f7:7b:23:d9:0f:0f:7c:b3:cc:66:ec:92:c2:01:7c:93:
da:94:00:7c:a5:fb:69:fa:76:44:09:8a:02:fa:09:0c:d8:a6:
09:38:b9:3b:6c:d7:55:71:93:a8:8a:0c:74:87:42:cd:30:ed:
01:9d:79:5f:d6:5f:55:ef:9a:ec:10:1b:db:e9:b3:7e:ce:cb:
df:c2:37:7d:6a:a5:68:24:ed:a9:4e:dd:80:8f:56:e4:9a:3b:
16:0d:21:10:2f:da:26:ac:c5:d2:17:d7:49:b0:4b:8e:91:40:
f1:60:1b:f6:7d:2c:83:33:3e:c9:ed:ae:0b:38:4c:73:48:03:
c0:ed:50:a9:85:fa:7e:83:3b:37:48:7e:6f:34:16:2a:92:5f:
18:91:6e:d3:51:5c:09:55:6a:30:6b:4a:b9:ac:29:1a:5a:86:
43:50:c2:dd:28:52:f7:52:e3:a9:dc:84:80:0c:5f:a2:44:e1:
58:bb:cd:44:c9:a6:a0:88:c8:e9:b2:d2:d9:c7:e6:99:a2:97:
1a:80:eb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:02:30 2026 by rpki-client