Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa
File: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (raw, json)
Hash identifier: KmE4Ra4RNXxBeAk9rV4T92zm3sto8pmIbD9YJoj2hJY=
Subject key identifier: 09:37:06:55:76:DB:80:63:37:A9:52:87:4B:11:0C:B2:48:A9:CA:3B
Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial: 7CF237C2EF7B94A538FABCF410739881F4AD370B
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa
Signing time: Sun 23 Aug 2026 15:42:22 +0000
ROA not before: Sun 23 Aug 2026 15:37:22 +0000
ROA not after: Sun 22 Aug 2027 15:42:22 +0000
asID: 215146
IP address blocks: 2a0d:b287:da00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:f2:37:c2:ef:7b:94:a5:38:fa:bc:f4:10:73:98:81:f4:ad:37:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Validity
Not Before: Aug 23 15:37:22 2026 GMT
Not After : Aug 22 15:42:22 2027 GMT
Subject: CN=0937065576DB806337A952874B110CB248A9CA3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c3:03:3c:60:ac:26:0b:fc:b7:16:27:ce:d4:
f0:8a:69:26:4c:44:b7:bd:63:75:05:7d:4e:60:62:
e9:89:38:be:b7:72:bf:95:1e:67:3b:5f:03:c3:4e:
14:55:4b:50:ca:4c:38:00:4f:69:e2:d7:93:95:71:
e0:be:d0:fd:e9:58:d4:79:1b:a4:51:c5:38:4e:c3:
6a:95:11:3f:96:33:a8:c7:53:a5:33:5a:9b:12:76:
59:bd:c4:9f:16:9b:fe:7f:30:46:62:eb:0d:d0:73:
18:a4:02:6f:7a:12:f9:97:26:05:f8:7f:4d:79:fd:
98:28:6a:cf:8a:19:61:36:34:25:03:38:13:ed:b0:
9d:96:65:f3:c9:d1:46:ea:e8:3e:40:74:6e:2a:c1:
c4:71:18:8f:b1:20:71:d5:75:98:32:66:e0:4b:fd:
00:9d:f6:af:10:c7:31:c7:9a:d4:42:12:8c:8d:58:
2f:4a:bb:7e:30:89:e3:69:69:b9:52:4c:7a:c0:18:
84:cd:f3:4a:8d:76:a7:4f:5a:43:51:e8:39:57:ba:
b0:59:fa:a9:b7:05:90:b0:8b:7f:35:94:d4:cc:d1:
f3:c3:8c:28:4a:7c:59:a7:f2:f2:47:99:25:c7:50:
72:2f:72:4c:fd:e9:fc:9c:64:1b:7d:d8:96:4b:42:
70:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:37:06:55:76:DB:80:63:37:A9:52:87:4B:11:0C:B2:48:A9:CA:3B
X509v3 Authority Key Identifier:
keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b287:da00::/48
Signature Algorithm: sha256WithRSAEncryption
71:5d:98:46:ca:d9:96:82:7d:ac:eb:97:95:e9:0c:d7:ff:89:
c4:49:2c:22:8e:49:d4:85:d3:ff:cc:cd:1f:f2:96:16:f3:bf:
34:c6:03:df:84:f9:77:02:22:dd:87:45:e5:75:17:e7:52:6c:
5f:f8:fb:33:57:c6:f1:f1:4a:72:4b:be:d3:f6:fa:ca:04:2a:
da:4a:af:14:70:7c:a7:64:d0:42:aa:93:f4:eb:46:e7:3f:c4:
48:4c:30:64:36:42:51:75:9e:bc:f5:f3:43:d6:f2:79:a9:ad:
ca:fb:8a:5f:31:aa:82:b5:f0:57:c0:2b:7b:34:f7:a8:63:d6:
65:8b:ca:05:f0:a6:d0:57:e0:72:82:45:ad:1b:23:09:ba:ec:
30:cc:d0:00:1e:22:2b:28:4a:d3:f2:64:02:39:82:84:f5:02:
c0:9e:bb:be:bb:6c:d1:16:73:b2:8a:5f:30:29:06:77:4c:03:
af:09:ba:5b:99:e3:c0:34:6b:eb:59:56:5d:f3:1a:b7:b6:97:
52:17:52:2d:14:9c:da:b6:57:03:73:cf:03:19:ad:0b:b0:75:
d7:a9:01:32:e5:47:f3:ca:10:2f:cd:80:02:fa:b8:39:de:9f:
bc:c4:30:b9:5a:e7:a6:cc:e3:97:e2:ff:5c:2a:7e:4e:b1:ff:
71:a5:8c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:46:42 2026 by rpki-client