Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638333a3a2f33322d3438203d3e20323133393033.roa
File: 326130613a643638333a3a2f33322d3438203d3e20323133393033.roa (raw, json)
Hash identifier: W+8q39gznYX0o4KUlgrQq8k9LXJMIdHIh+OMugSu5lg=
Subject key identifier: 3D:FD:3D:E7:E7:38:07:64:21:A4:F0:8A:10:BA:FB:5D:CC:89:F3:F1
Certificate issuer: /CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Certificate serial: 5899228DA55F8A058874835EF38666E6AED6936C
Authority key identifier: 0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638333a3a2f33322d3438203d3e20323133393033.roa
Signing time: Wed 28 Oct 2026 11:32:28 +0000
ROA not before: Wed 28 Oct 2026 11:27:28 +0000
ROA not after: Wed 27 Oct 2027 11:32:28 +0000
asID: 213903
IP address blocks: 2a0a:d683::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:99:22:8d:a5:5f:8a:05:88:74:83:5e:f3:86:66:e6:ae:d6:93:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Validity
Not Before: Oct 28 11:27:28 2026 GMT
Not After : Oct 27 11:32:28 2027 GMT
Subject: CN=3DFD3DE7E738076421A4F08A10BAFB5DCC89F3F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:d2:d7:1a:5a:3a:8a:a9:9d:5d:60:1f:02:
16:e2:5f:8a:9d:33:1e:51:42:bc:10:d8:1c:76:9c:
7b:fa:5b:87:f8:3d:df:52:f3:4d:8e:8c:b9:86:b5:
e3:e5:f4:8a:43:a1:d6:2b:22:6c:62:e1:10:e5:7c:
b9:9c:9d:63:4b:d4:ab:1c:be:dc:18:ce:69:26:22:
25:53:da:5b:a5:2e:49:27:44:53:93:9a:47:61:73:
f5:5e:4d:9a:f7:cd:f9:fc:b5:f5:35:4f:fb:ed:ad:
dc:5c:d2:dc:0d:e8:e7:10:04:de:c5:69:ce:4f:39:
60:25:62:ec:6b:ef:dd:07:63:7c:de:e6:97:69:f5:
29:39:1a:90:a4:92:79:37:8e:4c:d2:b5:3d:58:04:
d7:99:af:7b:cd:42:fa:b8:4c:39:a1:c9:03:60:a4:
4d:4c:3f:9e:71:9d:96:f8:e2:09:fd:a2:3b:f2:26:
d6:e8:7f:b0:2f:2c:d9:09:d2:93:ce:80:a5:86:d1:
47:e4:36:36:a0:12:dc:c0:73:9d:ab:9b:b9:55:42:
e0:b9:bf:14:a7:13:a3:bd:7f:14:d2:63:c6:c3:48:
3b:56:58:47:23:65:16:19:8d:82:8b:98:40:af:f9:
97:35:69:e3:3b:ba:13:e5:41:e2:3c:db:12:ac:67:
2c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FD:3D:E7:E7:38:07:64:21:A4:F0:8A:10:BA:FB:5D:CC:89:F3:F1
X509v3 Authority Key Identifier:
keyid:0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638333a3a2f33322d3438203d3e20323133393033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d683::/32
Signature Algorithm: sha256WithRSAEncryption
19:aa:0f:87:9f:f7:e2:f4:30:32:58:26:24:88:71:91:be:13:
b3:fa:80:31:d1:ec:d3:18:c6:c0:40:86:12:99:1b:7e:33:22:
8d:d1:8c:74:5d:01:49:4a:5b:9f:ec:4e:f1:15:34:3a:f8:15:
48:e6:6f:5f:b6:89:43:8b:d9:da:09:28:0d:87:49:fe:4e:97:
87:c2:53:17:ac:c6:aa:4d:83:f4:48:71:38:83:ea:33:92:36:
f7:0e:3b:8c:45:79:0b:67:76:24:13:db:33:ff:d1:12:35:54:
4f:b2:42:2b:99:1f:bc:01:8d:d9:61:f3:44:7b:36:ae:5f:51:
6c:bb:16:0b:70:00:44:1f:48:08:b2:22:58:de:01:39:cc:c7:
2e:94:2b:64:1f:8e:d8:51:71:ea:84:74:be:c3:63:31:f9:19:
e1:71:c5:6b:46:94:e5:f4:31:6f:4b:54:72:01:30:ac:32:dc:
75:53:78:0b:3f:ff:87:8a:a6:de:ed:a0:88:75:87:d6:1a:f2:
47:70:48:d6:f6:15:af:c4:bc:fd:7f:18:68:1f:c2:c1:a7:08:
f1:b1:4e:4d:06:18:cc:97:00:97:ea:aa:60:79:55:96:cf:e6:
44:58:cc:e8:77:6e:07:77:ad:7e:a6:3f:37:66:5a:60:5f:b4:
8e:77:43:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:26:32 2026 by rpki-client