Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/323030313a3637633a316237303a3a2f34382d3438203d3e2032343838.roa
File: 323030313a3637633a316237303a3a2f34382d3438203d3e2032343838.roa (raw, json)
Hash identifier: JghDzh6hXB4+YPEpLXLUlfn6KF7mye34eZHABuI4jUM=
Subject key identifier: 59:32:B1:49:86:58:75:50:DF:93:81:97:F5:06:BC:67:CE:06:CD:AC
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 2CBF41579587756F2ACC2661454C52752F9A833A
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/323030313a3637633a316237303a3a2f34382d3438203d3e2032343838.roa
Signing time: Tue 21 Apr 2026 09:09:09 +0000
ROA not before: Tue 21 Apr 2026 09:04:09 +0000
ROA not after: Tue 20 Apr 2027 09:09:09 +0000
asID: 2488
IP address blocks: 2001:67c:1b70::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:bf:41:57:95:87:75:6f:2a:cc:26:61:45:4c:52:75:2f:9a:83:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Apr 21 09:04:09 2026 GMT
Not After : Apr 20 09:09:09 2027 GMT
Subject: CN=5932B14986587550DF938197F506BC67CE06CDAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ee:fe:3d:5e:9b:1b:e4:0e:6e:ed:9e:23:58:
23:3a:b8:5a:89:51:99:31:b1:2f:4f:37:61:e9:f5:
49:cb:31:a2:52:60:ff:e3:78:e2:aa:46:e5:bb:eb:
7e:eb:1b:78:e5:32:c2:ec:2a:81:33:ae:ca:04:dc:
43:b8:81:94:32:50:e6:b3:fc:be:f9:21:d0:5a:8e:
8c:48:6a:2e:02:89:bc:5e:b4:ff:95:26:40:3a:41:
e4:bf:fd:eb:e0:a0:dd:88:6a:43:5f:42:e6:ae:67:
8a:70:f4:0e:b5:1c:d5:3d:e5:bb:7f:a9:27:fd:83:
0e:fb:05:a8:75:e2:bb:6a:17:bd:11:f1:37:69:d1:
e8:7f:d1:df:c8:49:8e:8b:ba:2e:ca:85:ae:d2:9a:
c5:c8:2c:f9:c4:9c:e9:cf:1d:91:01:76:2b:a9:30:
e3:0b:3c:9a:46:ea:07:86:1f:d7:0f:41:17:f0:f8:
08:bf:ef:59:73:63:64:9d:64:20:99:46:de:13:16:
01:87:10:d4:31:f4:6e:7b:78:b2:c6:c0:93:26:20:
b0:51:74:95:52:e0:47:24:30:7c:20:fd:83:27:cd:
b0:e4:c5:f3:5d:d1:3c:fb:4b:6a:bd:c3:07:ba:fb:
2c:52:96:e3:15:42:d1:76:70:7f:c8:d2:a2:b9:8e:
84:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:32:B1:49:86:58:75:50:DF:93:81:97:F5:06:BC:67:CE:06:CD:AC
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/323030313a3637633a316237303a3a2f34382d3438203d3e2032343838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1b70::/48
Signature Algorithm: sha256WithRSAEncryption
70:92:c6:66:b9:ef:ad:5f:4c:58:57:3c:6b:89:ec:4a:19:89:
5c:13:b3:64:19:0a:aa:f9:77:3b:5a:6c:df:c4:a8:88:70:f4:
c0:e6:be:49:8c:03:82:c7:dd:83:28:1f:f2:68:06:95:4d:27:
f8:15:6a:29:3a:7c:22:b3:cf:15:ef:a7:dc:73:20:ed:7a:99:
85:b5:4f:5f:e3:9e:f5:1b:ed:d0:15:45:e6:1a:39:1f:a2:bb:
d8:06:2a:04:50:79:29:77:01:d0:22:3c:af:d2:1f:e6:89:e4:
a4:1a:b1:5f:e0:04:88:70:c2:ed:a7:77:be:c8:bf:59:97:04:
ed:30:d6:17:94:c1:34:68:80:fb:c7:db:5e:4b:4c:11:92:65:
0a:e4:30:67:97:83:ff:91:e1:fc:e5:21:75:41:70:a5:f4:a1:
ed:cb:13:06:52:f3:e7:1a:64:25:1a:08:2c:98:a1:f5:5a:b5:
18:ff:b8:d7:6f:9a:5e:c3:d5:dc:c2:de:c4:73:fb:63:7b:82:
c9:50:98:29:f9:f2:e7:83:99:82:cf:ba:b0:b1:ff:86:d3:3a:
b7:c1:b8:22:c5:2c:c6:8a:65:fd:8d:8a:d6:97:47:5b:47:e9:
fe:5d:a9:b8:79:07:86:f2:57:6c:00:b0:ad:03:c8:28:11:ef:
0d:19:84:22
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 12:17:22 2026 by rpki-client