Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638373a666630323a3a2f34382d3438203d3e20323139323037.roa
File: 326130613a643638373a666630323a3a2f34382d3438203d3e20323139323037.roa (raw, json)
Hash identifier: 5JWWZDi+y2DIDiFR71Ufp8CF8RxIHJzTGTA47i2VuYE=
Subject key identifier: 85:69:0D:B6:04:57:35:65:A9:A5:CE:49:72:F1:E6:19:A8:AB:5B:C2
Certificate issuer: /CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Certificate serial: 6C32DC7D8FFAFE5EE806CFC0AB54FA1629CD2CC1
Authority key identifier: 0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638373a666630323a3a2f34382d3438203d3e20323139323037.roa
Signing time: Wed 15 Jul 2026 18:29:50 +0000
ROA not before: Wed 15 Jul 2026 18:24:50 +0000
ROA not after: Wed 14 Jul 2027 18:29:50 +0000
asID: 219207
IP address blocks: 2a0a:d687:ff02::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:32:dc:7d:8f:fa:fe:5e:e8:06:cf:c0:ab:54:fa:16:29:cd:2c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Validity
Not Before: Jul 15 18:24:50 2026 GMT
Not After : Jul 14 18:29:50 2027 GMT
Subject: CN=85690DB604573565A9A5CE4972F1E619A8AB5BC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:42:40:b0:f7:15:64:3f:08:07:96:e7:d0:
9e:79:17:93:4c:43:01:9a:a3:33:74:8d:3b:42:b0:
97:00:50:14:15:8a:7a:7c:30:cb:d0:5b:7f:00:22:
38:51:d8:10:dc:df:dd:9d:07:61:01:58:b8:c9:79:
e9:96:aa:70:c4:bc:53:31:92:e7:cb:a2:e8:ab:92:
c4:dc:aa:b2:55:96:ad:88:bb:4b:df:78:59:43:e1:
b8:e1:4b:ea:4e:a7:c3:f5:fe:24:57:32:c9:04:18:
5f:7c:21:3d:f0:0f:99:c4:b3:ca:54:ef:ce:02:fc:
75:1f:8a:82:7c:26:59:f0:2b:06:25:e9:41:b1:b1:
b9:7e:c2:d5:36:2e:c2:97:1b:b3:bf:6f:59:41:8e:
cd:f4:93:07:9b:09:d5:a7:9f:66:cd:26:c1:53:a2:
fd:df:89:93:df:da:a2:fe:78:4f:9b:a1:be:e8:a3:
ca:22:7f:73:bd:30:7b:3a:f8:bf:4f:96:b9:04:3e:
ce:ef:42:52:2c:db:c0:29:71:82:96:5b:9f:30:63:
c1:d0:a1:c4:7d:37:9e:48:ee:73:5c:8e:3c:31:ae:
b7:a3:c8:5c:b6:4b:23:c3:53:90:a7:59:81:dc:50:
4d:35:8d:65:3f:36:97:8d:a8:25:61:13:72:68:de:
8c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:69:0D:B6:04:57:35:65:A9:A5:CE:49:72:F1:E6:19:A8:AB:5B:C2
X509v3 Authority Key Identifier:
keyid:0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638373a666630323a3a2f34382d3438203d3e20323139323037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d687:ff02::/48
Signature Algorithm: sha256WithRSAEncryption
6c:e0:ae:c4:9c:82:24:14:df:31:b5:d9:b4:b6:f9:bb:c5:cc:
ed:f8:9d:72:fa:b7:80:42:43:48:8e:6c:1d:fb:57:56:a3:91:
fa:62:e3:51:ad:77:4b:b6:33:41:f8:a4:cd:1e:6f:09:c3:28:
79:a5:34:c3:b0:35:a6:e8:61:e8:5b:8f:76:8d:eb:51:f5:92:
8b:84:89:c1:ab:9a:83:0a:51:b4:b8:65:c5:0d:30:ab:cc:d4:
93:c5:c2:3f:30:90:1d:59:a0:bd:05:95:ab:b2:e5:19:09:cc:
98:e5:2c:8e:42:0a:c2:7f:ea:80:1b:47:ec:0d:a9:53:02:ca:
76:59:0b:58:31:1a:1a:9f:49:fa:95:56:d6:2d:07:10:6e:6d:
bf:3d:4b:3b:95:af:ea:93:54:a9:ce:11:67:08:34:d6:fd:ff:
c4:ac:bf:ec:cb:c7:36:59:3f:98:b2:46:cb:87:27:1d:f8:51:
50:e2:da:6f:5c:14:90:9e:65:bc:39:e9:6f:eb:5d:99:ac:de:
34:c5:9c:71:51:d3:cf:4c:8b:b3:4b:4a:9f:fd:24:ff:44:18:
88:74:5c:61:40:b9:25:09:d4:5e:ad:18:7c:0a:32:7e:f6:cc:
ba:7f:b0:e5:a2:c7:41:9a:10:3b:76:6e:16:66:99:30:f2:c7:
f9:98:44:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:58:14 2026 by rpki-client