Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638373a666630353a3a2f34382d3438203d3e20323138383637.roa
File: 326130613a643638373a666630353a3a2f34382d3438203d3e20323138383637.roa (raw, json)
Hash identifier: sQzmM+cfjw9OGqZLZbYBKONhAU1u7EoEQyRU3OqTZ8U=
Subject key identifier: AF:42:82:9D:FA:E8:FD:34:03:7C:9C:42:B1:85:24:2C:34:69:71:88
Certificate issuer: /CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Certificate serial: 644A9AF9FAC2E0640EB750270F1B91396A59F367
Authority key identifier: 0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638373a666630353a3a2f34382d3438203d3e20323138383637.roa
Signing time: Tue 25 Aug 2026 15:12:57 +0000
ROA not before: Tue 25 Aug 2026 15:07:57 +0000
ROA not after: Tue 24 Aug 2027 15:12:57 +0000
asID: 218867
IP address blocks: 2a0a:d687:ff05::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 09:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:4a:9a:f9:fa:c2:e0:64:0e:b7:50:27:0f:1b:91:39:6a:59:f3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Validity
Not Before: Aug 25 15:07:57 2026 GMT
Not After : Aug 24 15:12:57 2027 GMT
Subject: CN=AF42829DFAE8FD34037C9C42B185242C34697188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:69:2d:69:db:8a:14:2c:64:aa:72:e4:f5:9a:
d5:0f:1f:e8:63:99:3d:fd:93:82:1e:59:fe:f4:2c:
a6:0f:20:8c:8d:ef:58:b1:8c:05:4f:a0:ef:41:29:
c4:96:eb:5d:51:a4:1f:4b:e7:d1:df:de:ee:54:d3:
0a:eb:59:8f:37:c2:52:d1:5f:6c:e7:c4:f7:94:a3:
ac:35:a7:90:a9:3f:3f:e1:32:28:be:fa:13:bd:61:
d6:a0:54:11:f6:df:2c:3b:eb:21:f0:c0:53:97:7a:
f0:f4:7f:cb:c7:53:4a:eb:b7:86:1a:1e:83:86:00:
07:b8:41:1f:31:19:73:60:02:fb:e9:14:46:38:da:
20:47:a3:b2:ee:c5:b7:ac:df:b8:37:9f:4b:59:fd:
d5:2c:ef:92:b9:72:7b:7c:fc:84:12:01:f3:31:d8:
d7:99:f1:31:34:51:7d:c9:04:40:88:9b:23:e4:c1:
f5:2b:69:38:8a:f8:f7:26:13:c4:5e:b8:4d:a1:a6:
b2:4e:1d:e8:e8:c9:87:6a:5f:40:2b:00:1c:cd:91:
a0:64:da:9c:2d:82:72:f0:74:8d:1a:1e:c1:cd:06:
5c:95:ec:46:d9:d2:30:5e:3e:72:e5:95:59:79:8d:
9f:63:d0:6b:ef:20:85:8d:3d:bf:0b:0f:33:7b:ee:
4b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:42:82:9D:FA:E8:FD:34:03:7C:9C:42:B1:85:24:2C:34:69:71:88
X509v3 Authority Key Identifier:
keyid:0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638373a666630353a3a2f34382d3438203d3e20323138383637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d687:ff05::/48
Signature Algorithm: sha256WithRSAEncryption
a8:e9:7f:bf:49:57:b7:02:0e:7c:06:c6:fa:01:f3:39:e5:71:
e8:2b:a8:f3:c0:a1:c9:88:f1:bd:aa:80:b0:61:f4:0f:8f:4d:
f5:09:af:32:c7:ed:67:02:1f:9f:01:9f:ec:ac:83:f5:c5:3b:
10:df:9c:68:1b:9a:57:e3:6b:ef:de:02:e0:46:47:f6:2d:f9:
d5:91:2c:c8:3c:27:04:43:8a:e8:f1:a5:21:2a:9e:8a:3f:00:
35:08:30:9c:03:b4:8c:d1:ce:6f:2d:a9:6f:ef:58:fa:dc:36:
0d:d3:2b:e1:1d:55:50:b5:71:e7:bc:bb:fe:91:0b:20:cf:24:
08:90:45:83:3c:80:82:3a:38:b9:f0:9c:f6:77:e3:92:56:57:
2e:8d:8d:c4:43:0e:27:27:e2:c5:fc:8c:2c:bc:31:2e:18:c5:
53:7a:40:98:13:02:34:ea:3b:52:95:44:43:46:cb:23:52:8e:
24:21:f4:d0:aa:6d:95:a2:3d:d5:c2:11:cc:cb:fc:79:36:4b:
b0:21:86:ba:63:ed:bf:ce:d7:49:78:60:00:60:90:56:6d:20:
ba:54:be:ec:b0:b4:be:91:57:96:a0:b4:19:34:2c:97:7f:d5:
8c:59:c0:f2:5a:b4:55:3a:48:26:39:94:a5:a9:57:d1:25:48:
56:75:ed:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:59 2026 by rpki-client