Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa
File: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (raw, json)
Hash identifier: uK0Qd/USy59AqNTwWN3wPV3irBo5HSGqpruSyYVoTWs=
Subject key identifier: E8:72:17:8B:44:C1:0C:2F:FD:F3:1F:FD:BB:15:6F:2B:17:DF:80:A6
Certificate issuer: /CN=926cb33722a3493216283dc80cae0ee9d58874f2
Certificate serial: 224279533FF7D21BFEF097BAC61807B6E9703BC4
Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa
Signing time: Sat 22 Aug 2026 01:21:59 +0000
ROA not before: Sat 22 Aug 2026 01:16:59 +0000
ROA not after: Sat 21 Aug 2027 01:21:59 +0000
asID: 210089
IP address blocks: 2001:67c:1190::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl
rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Aug 2026 17:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:42:79:53:3f:f7:d2:1b:fe:f0:97:ba:c6:18:07:b6:e9:70:3b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2
Validity
Not Before: Aug 22 01:16:59 2026 GMT
Not After : Aug 21 01:21:59 2027 GMT
Subject: CN=E872178B44C10C2FFDF31FFDBB156F2B17DF80A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:21:48:3d:cf:55:00:93:4b:d2:44:ef:ef:7e:
2a:b4:8c:15:0b:b4:a7:d2:67:13:02:e4:52:db:21:
47:ae:39:28:2f:55:79:5d:5d:fe:da:75:99:ef:94:
69:55:53:72:7f:8b:e5:63:06:88:03:75:40:b4:b3:
91:90:d1:4a:bb:f7:cd:c2:ea:d6:77:58:a5:2d:04:
8f:bf:4a:9d:dd:a6:b0:f4:15:28:5c:4f:9e:2b:70:
5e:4d:32:fb:3e:ac:6d:64:9c:b1:35:27:6f:9d:61:
f8:76:98:50:3b:4f:42:6e:41:69:b7:f6:84:a9:b3:
07:59:b0:62:c8:46:2c:85:9f:1f:5c:50:4e:ce:64:
97:34:b7:24:37:93:04:f2:12:31:25:c8:8b:a3:3b:
2a:33:31:02:74:c2:f2:c3:b6:7a:bd:e2:33:ad:2f:
87:60:95:e4:bc:4d:7f:2d:ea:a9:ac:f8:92:23:f1:
86:fc:56:ad:15:18:e3:cb:f3:3d:60:f1:b2:fb:89:
84:08:00:16:78:c6:a4:8c:02:eb:59:d6:64:4a:d4:
ae:8d:be:05:98:5a:bc:fa:d5:b9:d8:ca:5e:d1:1b:
b5:fc:05:1d:37:5b:21:28:94:bc:a6:0d:9c:16:9b:
f7:7a:3c:17:05:f0:83:51:71:28:a4:d0:12:c6:38:
71:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:72:17:8B:44:C1:0C:2F:FD:F3:1F:FD:BB:15:6F:2B:17:DF:80:A6
X509v3 Authority Key Identifier:
keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1190::/48
Signature Algorithm: sha256WithRSAEncryption
63:8d:29:0c:b3:18:de:db:d6:b6:90:fe:cd:f5:6c:cc:f0:d3:
18:3f:56:c3:5d:a6:f2:85:80:7e:19:83:1c:5c:dc:80:15:ec:
b7:ed:1a:a3:d5:94:5a:dc:2b:de:31:07:24:a0:97:fa:65:53:
77:26:5f:92:1d:24:d8:af:8e:26:2e:b0:4c:30:3a:6d:e8:c2:
37:31:fa:34:c6:d0:4f:77:db:a1:ea:28:20:de:c0:ba:01:ac:
f6:67:82:c7:4b:e8:2e:2f:9a:15:04:17:2b:b4:78:70:85:8d:
b6:bd:44:dc:11:3e:6c:e9:53:86:93:f1:f8:8f:98:6a:a1:6a:
f0:b3:8a:f2:7e:26:5a:83:a0:9c:33:5c:f3:2b:9b:95:b3:d4:
d9:8d:28:d1:d9:73:ba:a7:1d:c9:87:e3:69:22:ec:94:ec:50:
27:f6:75:5d:58:cc:47:1c:76:f2:69:5a:c7:1a:1d:6d:98:4f:
b6:86:8e:f9:ab:ed:fd:82:b2:af:b1:a3:97:bc:d1:4b:d8:d5:
09:81:38:12:4c:86:09:bc:f5:08:ea:4a:98:48:78:c5:8d:3b:
fa:a2:02:d4:82:10:fb:e4:86:b7:81:08:c8:da:0a:1d:45:ad:
4c:02:b5:c2:d7:e4:9b:a3:a7:51:2f:0e:6e:9d:a5:13:f7:e5:
3c:00:0a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 21:55:13 2026 by rpki-client