Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638373a666630343a3a2f34382d3438203d3e20323138383638.roa
File: 326130613a643638373a666630343a3a2f34382d3438203d3e20323138383638.roa (raw, json)
Hash identifier: /Qn7vWpWpCtp1RtdEsraoox42aGCAAZITsl1NydtXls=
Subject key identifier: 72:DA:AA:84:29:B1:5B:CF:B9:6F:36:5F:82:E2:23:09:B5:55:E0:52
Certificate issuer: /CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Certificate serial: 0632411B71BDE54A96AC9FC3DEBD668045D21717
Authority key identifier: 0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638373a666630343a3a2f34382d3438203d3e20323138383638.roa
Signing time: Tue 25 Aug 2026 15:12:50 +0000
ROA not before: Tue 25 Aug 2026 15:07:50 +0000
ROA not after: Tue 24 Aug 2027 15:12:50 +0000
asID: 218868
IP address blocks: 2a0a:d687:ff04::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 09:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:32:41:1b:71:bd:e5:4a:96:ac:9f:c3:de:bd:66:80:45:d2:17:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Validity
Not Before: Aug 25 15:07:50 2026 GMT
Not After : Aug 24 15:12:50 2027 GMT
Subject: CN=72DAAA8429B15BCFB96F365F82E22309B555E052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8c:29:0c:66:6b:99:0d:29:c9:c0:5b:71:98:
9a:c4:6d:f1:3a:b5:85:04:75:81:67:4b:23:3b:0c:
54:ca:ad:b8:f0:53:39:54:11:64:3c:9a:c0:64:2d:
7f:39:23:90:92:98:bc:c4:8d:36:83:d7:4c:a8:d7:
26:a3:c5:bb:76:af:87:06:6e:28:4d:d7:e8:7f:a9:
ee:37:e5:db:36:c8:f2:66:9f:17:81:29:72:33:ce:
aa:9f:6c:05:30:ad:69:5a:b2:54:15:89:2e:91:0b:
24:0a:b7:84:7e:02:d4:27:e2:d3:49:84:0b:72:ba:
fb:5d:e8:d1:4b:7e:2e:a8:09:58:8b:02:ab:9c:9c:
d4:67:27:3a:ab:61:17:7e:1b:43:2e:ba:76:28:cd:
a9:d2:7f:c6:41:d9:73:0f:d2:2c:9d:9b:fd:e6:02:
a7:f9:bc:fe:a8:1d:b7:99:be:4d:a5:d5:83:c3:95:
a9:a2:74:f3:25:c4:79:7f:4c:aa:2a:fd:ac:90:3c:
04:d7:ca:d8:ed:45:bb:25:f0:1f:1e:b6:1a:32:a6:
c5:93:a2:e0:8b:12:ac:70:d6:52:b7:ef:85:9d:55:
0b:90:f7:97:f4:48:27:b0:78:b4:e1:c5:9c:d3:86:
86:11:cb:de:76:f4:96:42:0b:af:2f:bc:0f:c1:ac:
ea:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DA:AA:84:29:B1:5B:CF:B9:6F:36:5F:82:E2:23:09:B5:55:E0:52
X509v3 Authority Key Identifier:
keyid:0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638373a666630343a3a2f34382d3438203d3e20323138383638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d687:ff04::/48
Signature Algorithm: sha256WithRSAEncryption
58:88:db:90:45:f9:27:c3:5c:32:8b:d9:2b:31:83:b8:75:94:
a5:89:a4:77:c6:46:64:c8:b3:c1:6e:86:d3:7a:1c:07:78:8b:
0a:79:20:dc:2c:92:ca:65:09:83:40:aa:5e:06:6f:14:32:79:
8d:d3:8a:4b:e9:32:24:f9:cd:68:ed:29:8e:34:6d:57:47:d7:
b8:c2:39:f9:22:38:04:3d:0b:68:5e:59:a9:63:ea:ce:9c:dd:
c6:35:6b:39:d8:0c:e7:35:b8:02:ba:43:52:bf:e5:39:11:7a:
47:7e:35:f2:35:0f:27:3d:03:7b:cb:b3:c6:4a:96:04:f1:6b:
7b:bd:dd:dc:ff:d6:10:4c:52:22:4d:76:28:a8:b7:1e:75:04:
21:57:07:72:13:be:1b:4d:39:cd:3a:89:fe:20:7d:b0:79:04:
7a:ad:7b:3e:39:cc:ed:70:55:c2:9d:1c:77:2d:52:86:dd:ab:
9b:f4:3c:59:19:1e:4b:1b:09:a9:ad:63:44:14:f4:c3:49:a1:
9a:ed:a2:d4:69:18:81:22:86:c5:68:56:c9:c4:48:47:29:80:
9b:d7:49:7f:e4:52:0a:59:46:35:91:d3:fb:d7:2e:89:d2:17:
2f:8b:24:91:84:07:cf:93:3a:66:57:8d:e1:db:91:57:a7:d7:
42:e0:8d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:58 2026 by rpki-client