Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638373a663030303a3a2f34342d3438203d3e20313432343333.roa
File: 326130613a643638373a663030303a3a2f34342d3438203d3e20313432343333.roa (raw, json)
Hash identifier: AMQEmk2Gamce4CGjOhcsatfMgR2ITuuPxLRE5OPFALo=
Subject key identifier: AC:BD:98:D1:7D:85:8B:6D:BC:5A:27:73:B8:9A:4D:9C:97:3E:6D:E4
Certificate issuer: /CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Certificate serial: 50B5E06415253DC8FD3617D6A2BCE86819F2337D
Authority key identifier: 0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638373a663030303a3a2f34342d3438203d3e20313432343333.roa
Signing time: Fri 05 Jun 2026 16:03:44 +0000
ROA not before: Fri 05 Jun 2026 15:58:44 +0000
ROA not after: Fri 04 Jun 2027 16:03:44 +0000
asID: 142433
IP address blocks: 2a0a:d687:f000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:11:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:b5:e0:64:15:25:3d:c8:fd:36:17:d6:a2:bc:e8:68:19:f2:33:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Validity
Not Before: Jun 5 15:58:44 2026 GMT
Not After : Jun 4 16:03:44 2027 GMT
Subject: CN=ACBD98D17D858B6DBC5A2773B89A4D9C973E6DE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:60:d3:9d:d9:72:5e:54:65:63:d0:20:d7:41:
7a:51:f8:36:40:9c:9a:b1:eb:8d:9b:ca:84:99:16:
c6:be:7b:9a:b5:cf:9b:7c:05:d9:10:8a:6d:06:b6:
5d:f4:63:97:b4:56:88:5e:fa:4e:d4:5c:7f:54:10:
f7:8e:de:2a:be:b6:09:3c:e8:4a:b4:e1:71:7d:d5:
8b:8e:41:4d:fa:04:dc:fd:44:73:c8:be:66:40:2e:
d3:a1:be:78:31:f3:d3:82:c2:18:53:d4:44:3a:9c:
44:56:36:8a:05:7f:2e:40:79:30:ec:ba:b7:87:7f:
24:c2:6a:28:1e:6f:77:e0:8e:48:4a:1b:e6:0e:80:
2e:7e:55:73:1f:e7:6a:87:6d:58:11:8e:00:ee:72:
72:83:5b:60:6e:97:39:66:be:c8:90:49:3f:ee:f1:
06:eb:c2:5b:a6:af:35:bf:ca:17:d8:cc:0d:ae:f1:
be:54:58:3e:19:1a:dc:f7:1b:29:c3:a4:9e:b4:a6:
67:26:db:3e:17:71:65:ca:39:11:37:22:b9:66:85:
f9:4d:0b:f3:37:2f:32:f2:7d:64:b7:ec:a7:25:7c:
73:f6:0a:63:50:fc:4f:ce:bf:41:dc:e6:de:05:cd:
f2:02:d5:46:27:f6:b1:96:77:e0:c5:5e:58:c1:87:
7d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BD:98:D1:7D:85:8B:6D:BC:5A:27:73:B8:9A:4D:9C:97:3E:6D:E4
X509v3 Authority Key Identifier:
keyid:0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638373a663030303a3a2f34342d3438203d3e20313432343333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d687:f000::/44
Signature Algorithm: sha256WithRSAEncryption
40:a5:45:95:c0:0e:25:48:a3:18:23:e6:f2:a2:2d:dc:64:7e:
fc:e3:76:0d:32:6f:13:a8:9e:36:26:e0:66:76:cf:0e:c7:46:
55:03:f0:89:91:f2:e7:e0:3a:6a:bd:16:7c:36:86:c3:bf:44:
4e:1f:cc:d1:34:f2:56:83:01:c0:de:7b:8e:f5:b3:83:23:bc:
0c:75:f6:7e:b4:e8:dd:93:70:e6:38:41:04:89:f5:a5:95:64:
03:9b:26:b0:41:e0:9d:85:56:e6:05:33:cd:ce:22:eb:e9:57:
39:3b:41:20:28:6a:14:97:29:ca:d3:c7:73:5a:ed:8c:4d:8a:
a3:7d:b7:90:26:bf:c5:63:6b:98:42:5c:ed:ab:48:72:99:42:
27:eb:c7:b8:96:6f:9a:e8:66:8e:5a:09:ce:19:6b:1a:46:61:
f7:56:24:a8:6e:cf:7e:93:fd:2d:e4:67:e8:cd:5a:4d:c3:88:
29:4d:91:2f:e7:49:21:b4:cb:c9:5e:be:e1:80:6d:d4:bc:0a:
b3:f0:71:30:03:29:29:8e:e4:b2:72:69:fe:c2:2e:fb:38:a4:
c5:db:72:84:3a:19:b1:bf:4b:ef:a0:f0:00:e6:0a:53:2e:f7:
13:a3:96:a3:d0:8b:a3:e6:44:4c:8d:be:3e:b0:84:fd:24:40:
23:5f:ca:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:15:28 2026 by rpki-client