Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638373a666630333a3a2f34382d3438203d3e20323139323038.roa
File: 326130613a643638373a666630333a3a2f34382d3438203d3e20323139323038.roa (raw, json)
Hash identifier: S/8ZK1ErCZvTRtQCq1QRmXQBY3n8crW0uhTdSwe8qG0=
Subject key identifier: 0D:20:49:4B:76:1F:DD:DC:62:56:0A:31:08:FA:F2:F1:6C:A0:FA:4C
Certificate issuer: /CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Certificate serial: 060F1FA459D524D73E21115895F62BDD5C955171
Authority key identifier: 0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638373a666630333a3a2f34382d3438203d3e20323139323038.roa
Signing time: Wed 15 Jul 2026 18:30:00 +0000
ROA not before: Wed 15 Jul 2026 18:25:00 +0000
ROA not after: Wed 14 Jul 2027 18:30:00 +0000
asID: 219208
IP address blocks: 2a0a:d687:ff03::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:0f:1f:a4:59:d5:24:d7:3e:21:11:58:95:f6:2b:dd:5c:95:51:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Validity
Not Before: Jul 15 18:25:00 2026 GMT
Not After : Jul 14 18:30:00 2027 GMT
Subject: CN=0D20494B761FDDDC62560A3108FAF2F16CA0FA4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4e:3a:c5:6c:50:da:12:c3:a4:d8:6b:b7:4f:
0f:da:78:79:c4:39:42:5b:8f:6b:70:c2:cc:11:89:
63:cc:49:01:c1:a1:80:3c:1c:12:9e:63:64:1a:6c:
5b:e0:fd:65:24:1c:74:37:74:53:1f:21:7e:24:a5:
54:82:22:14:ea:cc:56:08:ca:ae:c6:e4:b7:a2:86:
c1:e6:8b:f0:af:11:3f:2e:44:4c:a8:6c:e2:01:3c:
dd:c8:63:00:5a:fd:f2:13:e9:53:ae:81:49:35:d3:
8d:a6:db:4d:a6:e1:64:ca:e5:18:71:dd:41:1e:56:
26:24:39:26:8e:ee:1e:f2:11:c9:67:44:1d:81:f3:
6d:c7:20:5f:48:f2:80:9c:b9:be:31:bd:a0:a8:33:
e4:19:d2:44:77:cc:a9:95:43:e7:b4:8e:51:aa:21:
e4:74:35:e0:2b:bc:49:4e:d1:60:df:88:2d:93:bc:
b6:c1:4a:f9:d3:81:74:58:77:d3:32:d7:2b:30:37:
c1:64:16:7e:de:04:41:ff:76:cb:d7:16:35:81:e0:
14:b4:9b:0e:ac:e3:16:5e:46:e5:ff:e5:2f:7c:7f:
30:20:94:69:bc:c6:88:a6:9d:81:81:1f:27:b8:5f:
18:98:63:f9:b7:3d:a0:6d:86:df:d0:28:82:f6:81:
18:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:20:49:4B:76:1F:DD:DC:62:56:0A:31:08:FA:F2:F1:6C:A0:FA:4C
X509v3 Authority Key Identifier:
keyid:0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638373a666630333a3a2f34382d3438203d3e20323139323038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d687:ff03::/48
Signature Algorithm: sha256WithRSAEncryption
96:39:55:ea:8a:4b:af:49:f3:37:f0:11:1b:ce:b3:cd:69:39:
3f:29:43:bd:33:08:d9:da:74:00:d8:aa:13:03:61:a2:dd:dc:
50:e4:62:53:cf:f2:c9:f7:6f:d2:63:7a:30:8a:2b:7d:7f:19:
15:0a:10:ee:ab:bb:d2:07:8a:39:7b:00:df:ec:f3:8a:56:39:
8c:58:4a:0c:a6:c6:2b:18:01:b2:f7:5f:18:b7:98:b9:a4:3b:
95:0f:89:7d:40:69:12:f1:2e:3f:8f:c2:79:20:bf:34:93:ad:
d4:aa:81:8d:2d:a8:8a:ad:71:f5:f8:a7:51:2a:5a:f9:f2:2e:
97:9e:5f:c2:07:62:d7:d1:2a:73:a4:e6:ef:36:36:ff:19:55:
86:cd:0f:73:3d:cb:d0:a0:ab:3d:c4:db:f1:e3:06:31:ac:e7:
71:98:7e:68:9d:6c:ee:fe:52:e7:af:ee:cf:0e:c6:f7:ea:42:
4c:e4:8f:0c:5f:e9:aa:f0:fb:89:00:4a:da:50:f6:15:48:e4:
f7:6e:ae:10:0e:a0:68:dd:4f:4e:21:45:0f:3c:81:ba:a4:24:
55:d0:b9:45:48:4d:e4:59:28:ba:88:d1:33:2e:e6:d8:1d:8c:
f0:c9:15:9f:36:d5:80:80:ac:97:2c:67:05:8b:a9:cc:e6:b9:
2e:30:c6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:02:30 2026 by rpki-client