Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/326130363a356563303a3a2f34382d3438203d3e20323034363933.roa
File: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (raw, json)
Hash identifier: S1/Y/6EPQQnfPCOtjeEUzrWHJ84koF95fYG1w/Kcp2o=
Subject key identifier: EA:3D:3C:F6:6C:6E:60:01:CF:CF:C0:AE:8E:44:3B:39:BE:9C:3C:36
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 4F20DFC200CA2F7A415591A0D1C6B015E18BD4A5
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/326130363a356563303a3a2f34382d3438203d3e20323034363933.roa
Signing time: Tue 08 Sep 2026 18:49:33 +0000
ROA not before: Tue 08 Sep 2026 18:44:33 +0000
ROA not after: Tue 07 Sep 2027 18:49:33 +0000
asID: 204693
IP address blocks: 2a06:5ec0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:41:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:20:df:c2:00:ca:2f:7a:41:55:91:a0:d1:c6:b0:15:e1:8b:d4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Sep 8 18:44:33 2026 GMT
Not After : Sep 7 18:49:33 2027 GMT
Subject: CN=EA3D3CF66C6E6001CFCFC0AE8E443B39BE9C3C36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:c9:b6:33:6e:1f:37:ff:fa:e4:eb:d4:e7:
5e:25:55:ca:ea:0e:d9:76:a1:da:fa:57:b8:8b:cb:
8c:5c:5c:d8:d2:e4:10:11:cd:12:8e:4f:9f:76:85:
27:40:e3:0f:d7:7d:46:fd:54:cb:e8:f1:72:f0:ba:
37:28:a4:3f:07:6f:59:4c:3e:19:98:05:96:44:c4:
24:eb:42:fd:2d:06:ca:70:6a:cc:3b:16:4f:b9:40:
96:22:c0:e5:df:e8:96:5b:c6:72:db:6a:5b:fc:63:
38:11:b3:0a:6f:25:dd:f7:e9:0b:c1:5b:da:5f:c9:
38:12:bb:5d:81:a7:d3:46:56:f0:e8:1d:63:39:8d:
16:19:c3:ec:e9:27:ef:5a:e6:0a:e8:29:55:59:d5:
28:90:1e:90:2e:30:1a:0f:9e:15:b7:d5:ab:3c:64:
07:fb:2a:08:51:23:8c:94:d4:dd:a8:35:ba:84:5e:
0a:5c:fb:75:c1:cf:f3:6b:8c:65:26:a8:54:f2:3c:
5b:02:2f:b9:04:ee:d4:fb:85:be:2e:9b:8e:0e:70:
4d:b3:1a:c7:37:10:c2:d4:98:c4:9c:bb:45:b9:16:
cc:58:76:37:36:45:2a:ef:73:06:69:9f:39:fb:1f:
74:0d:d5:ee:9d:10:00:60:4e:c6:e1:54:a1:29:b1:
0a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3D:3C:F6:6C:6E:60:01:CF:CF:C0:AE:8E:44:3B:39:BE:9C:3C:36
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/326130363a356563303a3a2f34382d3438203d3e20323034363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5ec0::/48
Signature Algorithm: sha256WithRSAEncryption
33:72:59:d2:97:d3:12:64:fd:32:71:1e:9c:a5:9c:f5:8c:a0:
f5:da:ac:2b:79:bf:7f:cb:4f:4e:42:28:27:ac:4f:4a:94:80:
dd:48:91:bc:92:b1:89:51:a3:47:8e:13:13:eb:92:62:8f:04:
bb:1a:25:65:f9:8b:6d:5d:35:51:2d:0d:e8:59:06:ea:10:bf:
39:4a:ae:ec:5c:68:c3:79:89:2a:29:f3:ff:48:9c:aa:e3:83:
2b:b6:05:9e:9e:14:f5:0b:f3:58:a8:1c:1c:b7:74:1d:95:c8:
81:e1:51:8d:9c:1e:6a:2b:66:19:57:2f:ba:a7:a6:c9:a0:b9:
5d:03:2b:33:3b:ec:a6:e3:8d:77:f5:3e:ea:71:48:9e:e0:86:
97:09:d4:f3:e5:14:38:b1:06:12:18:0e:a5:84:38:1f:ff:cd:
9f:e4:26:5c:a2:6b:39:5b:8c:f2:0f:a6:18:6b:6c:a3:6f:e2:
d7:67:12:61:00:3c:61:30:71:4c:18:75:c0:90:2a:cf:4a:8e:
a1:e1:92:3c:03:02:87:c1:c0:76:9c:3d:52:de:ee:33:cb:65:
d1:4f:14:b3:a0:a8:fc:10:d6:d1:67:30:30:3d:3f:b6:a5:34:
c8:0f:0a:62:c1:39:4c:59:66:64:f6:bd:15:db:34:97:f0:e7:
15:d9:87:92
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUTyDfwgDKL3pBVZGg0cawFeGL1KUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm
Yjc3YjRhOTAeFw0yNjA5MDgxODQ0MzNaFw0yNzA5MDcxODQ5MzNaMDMxMTAvBgNV
BAMTKEVBM0QzQ0Y2NkM2RTYwMDFDRkNGQzBBRThFNDQzQjM5QkU5QzNDMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxc8m2M24fN//65OvU514lVcrq
Dtl2odr6V7iLy4xcXNjS5BARzRKOT592hSdA4w/XfUb9VMvo8XLwujcopD8Hb1lM
PhmYBZZExCTrQv0tBspwasw7Fk+5QJYiwOXf6JZbxnLbalv8YzgRswpvJd336QvB
W9pfyTgSu12Bp9NGVvDoHWM5jRYZw+zpJ+9a5groKVVZ1SiQHpAuMBoPnhW31as8
ZAf7KghRI4yU1N2oNbqEXgpc+3XBz/NrjGUmqFTyPFsCL7kE7tT7hb4um44OcE2z
Gsc3EMLUmMScu0W5FsxYdjc2RSrvcwZpnzn7H3QN1e6dEABgTsbhVKEpsQq9AgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQU6j089mxuYAHPz8CujkQ7Ob6cPDYwHwYDVR0j
BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy
Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190
M3RLay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzVkMThlODIt
NGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQyMjc5LzAvMzI2MTMwMzYzYTM1NjU2MzMw
M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMDM0MzYzOTMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcA
KgZewAAAMA0GCSqGSIb3DQEBCwUAA4IBAQAzclnSl9MSZP0ycR6cpZz1jKD12qwr
eb9/y09OQignrE9KlIDdSJG8krGJUaNHjhMT65JijwS7GiVl+YttXTVRLQ3oWQbq
EL85Sq7sXGjDeYkqKfP/SJyq44MrtgWenhT1C/NYqBwct3QdlciB4VGNnB5qK2YZ
Vy+6p6bJoLldAyszO+ym44139T7qcUie4IaXCdTz5RQ4sQYSGA6lhDgf/82f5CZc
oms5W4zyD6YYa2yjb+LXZxJhADxhMHFMGHXAkCrPSo6h4ZI8AwKHwcB2nD1S3u4z
y2XRTxSzoKj8ENbRZzAwPT+2pTTIDwpiwTlMWWZk9r0V2zSX8OcV2YeS
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:02:23 2026 by rpki-client