Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a646464643a3a2f34382d3438203d3e20323139333038.roa
File: 326130643a623238373a646464643a3a2f34382d3438203d3e20323139333038.roa (raw, json)
Hash identifier: lhnf24+d+KsCQOPaVipDtlRXOcDvUPxkqrOPn+C77uU=
Subject key identifier: B3:25:6E:15:7D:7A:B8:C7:AB:6E:20:D6:E2:6E:D1:B3:48:78:25:1B
Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial: 6ECB2340354F0995013974B408E4A9FA1748416D
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a646464643a3a2f34382d3438203d3e20323139333038.roa
Signing time: Fri 28 Aug 2026 17:40:58 +0000
ROA not before: Fri 28 Aug 2026 17:35:58 +0000
ROA not after: Fri 27 Aug 2027 17:40:58 +0000
asID: 219308
IP address blocks: 2a0d:b287:dddd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:cb:23:40:35:4f:09:95:01:39:74:b4:08:e4:a9:fa:17:48:41:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Validity
Not Before: Aug 28 17:35:58 2026 GMT
Not After : Aug 27 17:40:58 2027 GMT
Subject: CN=B3256E157D7AB8C7AB6E20D6E26ED1B34878251B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5c:4b:38:ac:10:50:55:7b:b1:a9:19:2e:cd:
fc:dc:a7:3c:52:df:48:98:3c:ab:c8:52:f3:69:bb:
8d:1a:50:91:20:0a:2d:6b:a8:91:f2:96:82:46:c4:
90:78:db:6e:9b:1f:15:2c:c3:b2:f3:e8:21:c1:ec:
31:df:91:ba:2a:f3:5a:49:e0:e6:f0:57:39:24:7f:
79:0b:94:b5:34:c2:f2:3b:86:dd:1d:97:33:f7:df:
15:fa:c5:99:df:a4:ee:5e:d1:cf:50:90:ed:8b:3b:
09:58:49:9f:7e:e9:66:f5:1d:e3:c0:93:45:ce:c6:
5c:b3:45:b2:ac:00:0a:e2:a6:56:f3:3b:91:97:97:
e9:c2:66:3f:b1:e6:6a:d4:1c:75:a7:ae:0e:f7:83:
5d:26:f7:f4:53:95:fc:c5:0a:c3:99:0a:4e:26:94:
ff:a4:06:69:34:ad:c7:36:64:37:08:9d:f4:42:2c:
05:c7:78:d4:ca:0d:03:5b:b1:0e:43:83:48:cf:a4:
39:54:43:73:32:87:0e:18:50:5d:50:63:16:ea:06:
0e:43:b7:ea:e7:e6:c5:8b:88:c2:57:74:78:d7:68:
3a:3a:ba:05:92:a5:41:33:d0:95:0b:0c:d7:18:a8:
74:11:49:70:78:2a:ca:22:53:65:e4:ea:50:36:f0:
cc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:25:6E:15:7D:7A:B8:C7:AB:6E:20:D6:E2:6E:D1:B3:48:78:25:1B
X509v3 Authority Key Identifier:
keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a646464643a3a2f34382d3438203d3e20323139333038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b287:dddd::/48
Signature Algorithm: sha256WithRSAEncryption
a1:a2:a6:b0:d3:35:0a:f9:b1:9a:b1:fe:d0:c8:4b:29:56:a9:
fd:d4:c8:8c:5a:63:70:0f:30:84:d5:eb:8b:2e:86:35:ca:e4:
70:a3:f7:94:b3:71:f1:17:98:09:14:6c:04:8d:51:83:be:c4:
c5:57:ba:87:09:30:2a:c9:61:40:07:85:13:f8:a3:e4:a1:2a:
3a:c6:ca:4d:b5:1b:c0:16:30:b3:93:f0:07:30:68:72:7d:c8:
84:98:ec:04:e4:42:c4:b7:6c:56:e3:3e:df:89:77:36:d0:a7:
c3:f9:df:28:84:60:8f:fb:65:90:54:1e:70:f4:ea:05:3d:3f:
98:e0:50:32:52:c8:fd:a2:9a:1e:10:9e:29:36:09:35:0f:7d:
b9:af:b4:65:e4:02:16:22:27:c2:dd:29:20:95:7f:f5:fe:69:
fb:84:34:02:a5:3b:70:4b:2f:86:d9:4c:f2:b9:24:50:55:d5:
f8:8b:d9:71:36:ce:09:ed:a9:6f:92:35:7d:24:bc:7c:c6:27:
32:45:5c:c9:1c:d9:58:3b:0f:f9:31:a3:e6:7d:31:f8:50:94:
b0:56:e1:da:b1:95:39:52:b4:6a:5b:be:86:02:cc:75:f3:f5:
5e:69:af:49:41:76:24:eb:a0:1d:01:9c:45:87:d6:20:7a:63:
e8:26:4e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:29:48 2026 by rpki-client