Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a3430303a3a2f34302d3438203d3e20323033393233.roa
File: 326130663a316363353a3430303a3a2f34302d3438203d3e20323033393233.roa (raw, json)
Hash identifier: qeN/E1Ymr9f8+XIqFPYW2GeQxX4pruGGOL2s106wxhs=
Subject key identifier: 63:34:7F:A4:0F:9A:8C:FE:B6:BE:E9:0A:A1:FC:CE:88:94:BF:48:18
Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e
Certificate serial: 25001217BE39D1B8386CE555A1B445FB8408358A
Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a3430303a3a2f34302d3438203d3e20323033393233.roa
Signing time: Mon 10 Nov 2025 16:27:10 +0000
ROA not before: Mon 10 Nov 2025 16:22:10 +0000
ROA not after: Mon 09 Nov 2026 16:27:10 +0000
asID: 203923
IP address blocks: 2a0f:1cc5:400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl
rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:00:12:17:be:39:d1:b8:38:6c:e5:55:a1:b4:45:fb:84:08:35:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e
Validity
Not Before: Nov 10 16:22:10 2025 GMT
Not After : Nov 9 16:27:10 2026 GMT
Subject: CN=63347FA40F9A8CFEB6BEE90AA1FCCE8894BF4818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f7:28:d7:f7:d8:20:2b:f8:ae:04:ff:e2:6f:
b7:d7:0a:ac:52:e5:a4:4a:c8:80:ec:a6:7f:b0:78:
4d:f2:5b:47:24:c7:74:1a:45:79:11:33:c3:81:f6:
9b:42:11:0d:16:0c:f8:17:15:fa:f1:26:ec:6a:18:
9b:b8:ac:07:2a:e3:c2:99:c6:e6:7b:21:f6:e1:eb:
64:2e:0f:e9:28:39:22:47:c8:d6:13:c5:84:0d:39:
72:e5:9b:bf:f7:50:53:bd:55:ad:6d:09:95:28:c0:
14:1c:21:a3:14:a8:a8:b3:c8:99:e7:10:85:67:10:
d0:3e:43:04:58:1b:cf:e8:fb:25:27:f0:51:1b:5d:
27:b3:b1:d3:95:a1:d9:ae:f8:f5:75:c4:f1:97:23:
2c:3b:f2:31:6f:75:e5:ab:c1:82:65:b9:50:33:c3:
1e:d3:69:35:88:9c:1b:89:f4:1d:f2:c9:16:c3:f7:
dd:0b:39:c4:a2:23:e4:34:d0:71:5b:d4:9b:4f:f9:
d7:fc:0e:3f:ef:ab:4e:fb:6f:c0:7f:c3:79:4d:16:
ce:cc:49:2d:ef:a7:e2:65:f5:35:d1:74:84:0b:72:
bf:61:24:10:6f:07:48:41:66:7b:13:0b:f3:29:09:
31:92:2b:48:56:5d:f5:7c:14:15:b5:c3:e0:ef:ec:
2f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:34:7F:A4:0F:9A:8C:FE:B6:BE:E9:0A:A1:FC:CE:88:94:BF:48:18
X509v3 Authority Key Identifier:
keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a3430303a3a2f34302d3438203d3e20323033393233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:400::/40
Signature Algorithm: sha256WithRSAEncryption
4e:32:e2:d2:ba:6c:09:61:54:18:96:37:a3:64:b7:d9:c4:63:
47:33:89:ad:31:5a:06:82:44:f6:1e:0b:60:ff:91:37:b6:0a:
83:88:13:15:3c:a1:09:25:eb:f2:d1:af:c1:69:ef:d1:95:e1:
c7:68:aa:3c:83:59:49:37:bf:78:12:f5:0b:32:17:e4:8c:76:
b5:3b:df:24:ec:e1:8f:79:c4:99:d4:d1:f4:1e:d0:cb:1c:b0:
b4:fc:56:90:43:4d:a4:4f:c4:d5:12:b0:e7:93:aa:c6:6f:95:
61:28:08:3a:e6:3c:79:03:c4:d8:a4:bd:0e:2e:b3:3c:79:17:
be:3d:26:d2:82:b9:d0:d1:b6:5c:c1:e6:2d:ce:6b:f0:88:3d:
e2:97:28:ec:22:2b:a8:8b:e1:39:cf:87:6b:1a:d9:48:03:54:
60:63:5b:9e:60:c7:ac:ee:98:ad:03:00:a1:5c:36:6c:6c:b1:
d2:26:4b:60:c8:8b:38:f5:7b:8b:32:e2:98:55:d5:59:db:29:
e5:cd:25:9c:2b:0e:89:43:41:a7:a9:a6:e7:e1:81:55:7b:29:
cc:27:1a:5d:20:cc:30:d9:4a:e0:dd:a5:71:9c:48:f1:7b:1f:
ac:3d:f5:18:18:52:fb:c1:93:f9:a4:59:64:29:a7:e6:e6:4b:
11:ef:bf:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 19:37:29 2025 by rpki-client