Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a616430303a3a2f34302d3430203d3e20323032313934.roa
File: 326131313a663263303a616430303a3a2f34302d3430203d3e20323032313934.roa (raw, json)
Hash identifier: mxxuzZB0xQb3QguYNqQB0YqS+eIqkRmOnfTnMeNs6Bg=
Subject key identifier: E4:AC:99:63:8B:92:EE:6D:CA:F4:F2:28:10:DD:72:1D:F9:9C:A0:05
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 7C6E99A29E48E7D23FDA834230DE1326F366E0BF
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a616430303a3a2f34302d3430203d3e20323032313934.roa
Signing time: Fri 04 Sep 2026 22:00:21 +0000
ROA not before: Fri 04 Sep 2026 21:55:21 +0000
ROA not after: Fri 03 Sep 2027 22:00:21 +0000
asID: 202194
IP address blocks: 2a11:f2c0:ad00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 14:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:6e:99:a2:9e:48:e7:d2:3f:da:83:42:30:de:13:26:f3:66:e0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Sep 4 21:55:21 2026 GMT
Not After : Sep 3 22:00:21 2027 GMT
Subject: CN=E4AC99638B92EE6DCAF4F22810DD721DF99CA005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:db:ca:f4:ab:09:c6:d5:f9:8a:50:ab:38:
74:be:be:7f:6b:e5:af:ac:68:69:d9:bf:31:5a:04:
2c:bb:80:37:52:96:15:ef:bb:67:38:71:d3:bf:e5:
77:42:ea:b0:88:94:5b:6f:1b:f4:62:c6:b2:c2:54:
3e:83:dc:27:43:d8:a0:2e:a2:77:e1:cd:f0:53:a9:
52:51:3a:83:43:c5:06:37:6f:8e:26:6f:c3:87:40:
ca:8f:03:39:80:26:c0:97:c3:9b:b9:a7:a9:37:0d:
46:43:db:b4:e2:2d:96:c6:60:e3:57:6e:46:fd:26:
c0:1a:94:80:5f:5d:07:64:d1:2c:08:e9:5d:a7:28:
bf:7c:46:80:f6:40:70:cd:01:b9:a4:89:1d:96:55:
f5:3c:44:17:dd:66:d2:13:7f:28:a3:0c:ef:f5:e8:
c9:28:1b:c2:f7:bb:7e:87:12:83:5b:42:41:24:9a:
46:aa:53:ba:9b:54:9c:da:d9:4b:74:d6:78:39:6b:
8c:8d:f8:b6:74:25:34:ef:f3:f5:d8:90:f2:76:6c:
98:97:40:68:2d:4d:25:81:43:6f:ba:9b:a9:49:bb:
6e:cd:91:e2:b1:8b:0d:36:2f:99:ec:cb:2c:62:26:
86:4e:18:2f:c1:51:90:36:6c:b1:72:f9:93:2a:8a:
19:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AC:99:63:8B:92:EE:6D:CA:F4:F2:28:10:DD:72:1D:F9:9C:A0:05
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a616430303a3a2f34302d3430203d3e20323032313934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ad00::/40
Signature Algorithm: sha256WithRSAEncryption
9e:9c:6f:6e:d5:b6:84:18:95:a8:e5:42:d9:95:db:65:f6:99:
ba:77:4c:0c:49:61:9b:8e:e6:a2:2a:78:70:be:c1:8e:be:f5:
52:c6:6c:ca:22:2c:e3:05:c5:fa:03:26:cf:1c:36:d5:1b:96:
31:aa:7b:65:81:e6:77:1d:fd:6f:09:99:76:97:76:79:d8:34:
d2:86:12:59:e7:8a:d5:50:8d:c1:fc:9b:18:92:5c:e6:c0:8c:
15:15:66:af:d5:8b:e4:db:74:b8:dd:d3:4c:a7:c5:5d:6e:ad:
dd:8a:c4:9a:1d:79:72:0a:ac:94:24:b2:94:59:a5:5e:66:b0:
a5:3b:75:e2:e2:2c:bc:c9:a4:5d:4b:51:c1:47:c3:d6:5b:e5:
04:19:fe:e3:7f:af:43:be:49:ec:24:46:1d:3a:9b:bc:1b:30:
d5:ae:72:63:c5:83:12:17:75:b6:ea:36:86:ca:a6:5b:73:c3:
3a:5c:b7:b8:47:49:d8:d1:a9:92:28:36:53:96:94:d8:bc:2b:
c5:71:dc:c5:4e:ef:76:62:a4:a5:d8:6c:7e:08:89:e0:83:e3:
a5:37:30:57:dc:83:43:c5:67:3b:98:4d:a6:e7:d3:90:3a:10:
7f:ba:12:0d:f0:5d:5f:97:a8:db:b9:f9:0f:13:54:0a:9e:8b:
67:3e:76:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 22:43:25 2026 by rpki-client