Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/326131343a623430303a3a2f34382d3438203d3e20323133323739.roa
File: 326131343a623430303a3a2f34382d3438203d3e20323133323739.roa (raw, json)
Hash identifier: qNVwAoNW+7s0+MjZgIZI2Rwnidleg3JKmPVxodfFqdI=
Subject key identifier: 60:B0:FB:A8:3B:17:60:E3:14:FD:F6:38:0D:9A:7C:79:A3:27:DA:DF
Certificate issuer: /CN=a1e4de695d846c0e5864e4c865d9bd5e80e5f694
Certificate serial: 0BC7C988DCF5236D25616A6FDDC168E66DEE5677
Authority key identifier: A1:E4:DE:69:5D:84:6C:0E:58:64:E4:C8:65:D9:BD:5E:80:E5:F6:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/326131343a623430303a3a2f34382d3438203d3e20323133323739.roa
Signing time: Thu 30 Apr 2026 09:15:17 +0000
ROA not before: Thu 30 Apr 2026 09:10:17 +0000
ROA not after: Thu 29 Apr 2027 09:15:17 +0000
asID: 213279
IP address blocks: 2a14:b400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft
rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:c7:c9:88:dc:f5:23:6d:25:61:6a:6f:dd:c1:68:e6:6d:ee:56:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e4de695d846c0e5864e4c865d9bd5e80e5f694
Validity
Not Before: Apr 30 09:10:17 2026 GMT
Not After : Apr 29 09:15:17 2027 GMT
Subject: CN=60B0FBA83B1760E314FDF6380D9A7C79A327DADF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:dc:be:02:49:4e:e7:2b:ed:e0:8b:46:2a:b8:
42:66:90:53:00:a5:19:56:e8:11:19:70:2f:1e:47:
9f:9a:e2:d6:75:c4:51:95:d5:21:3d:ee:73:e1:68:
a3:36:17:17:e1:fc:c4:33:57:74:22:a3:32:27:a6:
f3:89:44:f3:10:d2:b8:67:b4:c9:80:40:63:24:98:
e2:e9:2e:06:72:d9:ec:86:cb:7f:f3:f3:e3:22:5c:
82:6f:ff:66:f8:5e:61:0f:3d:ec:ad:9d:42:3e:4e:
c0:b2:28:37:70:65:4c:d4:83:cd:9d:78:0b:f8:00:
1d:7a:91:53:f2:f0:2f:e4:cd:c5:5c:94:0e:b7:47:
47:ee:2d:78:0f:7b:63:fc:8a:4d:20:c9:81:ed:3a:
5f:1c:a5:f9:af:e0:43:73:34:9f:9d:4e:3a:51:13:
ba:58:3a:28:fa:06:7e:f4:09:0d:44:64:dd:59:93:
01:9a:26:13:69:0f:6a:8c:fa:a8:fe:29:1d:f7:ad:
56:c0:cd:63:a6:89:6f:27:4b:75:e8:8a:10:2e:36:
ff:33:e3:ae:d6:bf:19:72:d7:e0:2e:7a:79:31:b7:
dd:bb:5a:b4:38:58:e4:12:67:f8:68:1d:8e:69:37:
99:6f:61:c6:2a:19:78:aa:00:94:ba:f9:93:7d:51:
1b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B0:FB:A8:3B:17:60:E3:14:FD:F6:38:0D:9A:7C:79:A3:27:DA:DF
X509v3 Authority Key Identifier:
keyid:A1:E4:DE:69:5D:84:6C:0E:58:64:E4:C8:65:D9:BD:5E:80:E5:F6:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/326131343a623430303a3a2f34382d3438203d3e20323133323739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:b400::/48
Signature Algorithm: sha256WithRSAEncryption
86:cc:b3:e0:50:27:04:21:90:fc:ff:a6:38:90:7c:cc:8f:a8:
f9:1a:b6:67:a1:b4:d7:01:62:a5:51:65:cd:10:0b:77:86:62:
d3:f2:67:c1:f7:14:b3:87:a4:de:70:9f:81:4b:2a:75:6b:32:
8c:16:de:18:d6:64:dd:7b:03:92:01:08:6a:2f:5f:8c:29:69:
b0:93:c5:ab:db:18:b4:ea:36:1a:43:92:ca:d4:81:ee:fa:00:
08:a9:bd:49:06:9c:32:ad:45:e5:2e:bd:b9:84:24:50:3d:ed:
4d:b9:a2:27:b1:e9:d5:63:b5:8e:2f:11:14:2a:fd:57:25:30:
b4:95:47:4f:18:9d:e9:c1:4d:a5:23:ed:7a:fb:82:da:5a:de:
c2:0f:ab:a3:4f:08:8d:55:fa:55:9b:99:24:db:5a:62:f2:06:
07:78:1d:4a:30:3b:67:7d:13:b4:0d:3b:62:80:67:a4:2f:1e:
64:58:c0:06:04:ea:d4:8b:48:b4:5d:b4:4a:a8:e1:27:a1:db:
8d:31:c2:e7:8b:43:66:93:52:47:41:7d:67:02:0d:3d:3b:fd:
82:3a:6f:95:20:47:e9:b1:c9:e2:f4:74:8b:8c:0b:48:fb:0d:
2d:4f:cf:57:28:1e:ad:19:00:07:57:d9:94:2f:fe:01:e6:7b:
22:48:8a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:43:37 2026 by rpki-client