Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/326131313a353730373a61613a3a2f34382d3438203d3e203438303730.roa
File: 326131313a353730373a61613a3a2f34382d3438203d3e203438303730.roa (raw, json)
Hash identifier: Zefj/e0JMuu7oq2XsOjhFgJLIE9NkoqPwbvxoxEQNE4=
Subject key identifier: B4:86:C4:3B:D3:15:F1:E2:2B:87:3D:5E:1C:76:53:23:7F:A9:F4:2C
Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8
Certificate serial: 1D63080355FE254299024ACA87D3F4891446BD86
Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/326131313a353730373a61613a3a2f34382d3438203d3e203438303730.roa
Signing time: Tue 15 Sep 2026 11:07:19 +0000
ROA not before: Tue 15 Sep 2026 11:02:19 +0000
ROA not after: Tue 14 Sep 2027 11:07:19 +0000
asID: 48070
IP address blocks: 2a11:5707:aa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 14:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:63:08:03:55:fe:25:42:99:02:4a:ca:87:d3:f4:89:14:46:bd:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8
Validity
Not Before: Sep 15 11:02:19 2026 GMT
Not After : Sep 14 11:07:19 2027 GMT
Subject: CN=B486C43BD315F1E22B873D5E1C7653237FA9F42C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:51:70:d0:44:c6:73:d0:49:96:92:4b:f9:e1:
28:f1:00:3c:ae:6e:01:50:06:ae:f4:99:82:3e:b4:
7a:6c:31:31:d2:ba:09:95:bb:b6:27:4d:3d:d0:26:
95:e5:2d:ab:4a:71:64:f9:25:18:2a:1b:cc:f2:c2:
b0:d9:7d:ea:7c:5f:49:f2:b1:96:c0:e4:ee:88:be:
7e:5c:0a:cd:7a:68:04:d8:ba:e4:b6:35:6b:7d:1e:
e4:07:7f:ff:39:9f:4e:7b:2c:40:79:cb:18:99:1b:
66:4c:6e:93:22:e9:08:54:97:04:6d:1c:2c:1d:c8:
1e:94:ce:9f:02:46:00:33:43:68:5e:66:9a:2b:d6:
97:55:0a:af:71:02:91:6d:44:a1:27:ad:07:28:3d:
2e:1f:9d:93:21:b3:ff:75:8a:47:a5:fb:76:e3:f9:
a6:e7:3c:5a:a2:10:7f:4c:1c:13:7f:72:9c:dc:20:
d6:80:54:8b:1d:a4:c1:04:49:d9:0d:64:60:56:30:
e8:95:11:86:ad:08:c9:c1:f8:a0:dd:03:69:fa:5e:
69:c8:a4:6d:e1:65:72:04:a2:bc:99:0d:43:ae:5d:
3b:df:87:66:c0:08:2b:35:4b:05:c8:f7:ef:a0:12:
73:92:f0:6f:ed:ed:b4:bd:aa:bf:48:39:5c:db:b0:
b5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:86:C4:3B:D3:15:F1:E2:2B:87:3D:5E:1C:76:53:23:7F:A9:F4:2C
X509v3 Authority Key Identifier:
keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/326131313a353730373a61613a3a2f34382d3438203d3e203438303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5707:aa::/48
Signature Algorithm: sha256WithRSAEncryption
92:18:be:01:b5:a7:52:c7:2b:c1:4a:23:78:0c:58:ce:c8:2d:
87:21:01:f5:f8:56:66:a6:86:7d:db:95:da:e4:20:2a:df:b6:
ee:95:7a:74:84:fc:ec:a2:b6:f1:0e:fd:39:d5:f8:c5:25:f9:
70:0d:91:6e:b2:73:9e:82:4d:35:f8:db:2e:22:c7:28:6d:05:
51:ef:f5:e9:96:4a:7f:57:12:e2:39:f8:aa:3e:c1:e9:99:bb:
5d:80:0f:f1:36:33:5e:af:99:88:05:4d:41:c1:ad:f9:a3:d9:
47:56:be:10:24:58:76:88:ca:11:71:ef:ce:e0:2a:e4:ff:1f:
ae:6d:bd:57:e8:57:e3:7a:10:60:6e:75:98:ae:a4:2a:46:1b:
e3:65:f9:6b:3c:47:8c:49:92:3a:72:02:00:bf:26:47:af:21:
f9:cc:67:3e:ef:f3:2c:b8:a2:f4:98:22:cb:d6:48:f5:87:fa:
67:36:4f:40:d9:86:23:c9:a8:b8:86:90:59:84:c0:01:02:db:
ba:de:2c:0e:43:e8:d1:83:10:28:db:22:a7:52:77:2b:9a:81:
1d:b0:34:fd:3e:2b:6c:97:b3:e8:c8:f0:0b:e8:c2:a7:a3:65:
9d:d3:ba:8b:da:0e:a5:4c:26:0e:46:cb:57:40:cc:0a:c2:07:
3f:06:35:b9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 23:58:12 2026 by rpki-client