Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/326130313a3666303a613130303a3a2f34302d3438203d3e203432333636.roa
File: 326130313a3666303a613130303a3a2f34302d3438203d3e203432333636.roa (raw, json)
Hash identifier: ezOkh1SlBQAwmobIQb+ybWxJ2QK1smryQXR5+f9OK2s=
Subject key identifier: 93:19:34:B1:7D:85:D2:AF:1D:2A:DE:85:F3:7C:1F:A1:22:0B:E7:A5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 75F3BEC9ABDB629E29F6C653A7D6AD4E3A1AF05D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/326130313a3666303a613130303a3a2f34302d3438203d3e203432333636.roa
Signing time: Fri 17 Jul 2026 16:26:19 +0000
ROA not before: Fri 17 Jul 2026 16:21:19 +0000
ROA not after: Fri 16 Jul 2027 16:26:19 +0000
asID: 42366
IP address blocks: 2a01:6f0:a100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:f3:be:c9:ab:db:62:9e:29:f6:c6:53:a7:d6:ad:4e:3a:1a:f0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 17 16:21:19 2026 GMT
Not After : Jul 16 16:26:19 2027 GMT
Subject: CN=931934B17D85D2AF1D2ADE85F37C1FA1220BE7A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:aa:93:e5:a9:89:7c:66:25:52:c4:9d:c6:db:
d1:41:10:89:04:a4:41:bb:6c:5d:ca:94:da:3f:e7:
47:60:a4:02:f9:6b:cc:22:8e:c7:78:20:18:bc:bc:
17:7e:9c:ea:0e:d7:f2:1d:49:ac:a9:9f:41:96:06:
1b:a5:ec:6b:40:9b:59:01:6e:ee:c2:a7:18:a0:12:
c9:04:03:a3:61:fc:ec:5a:c1:3c:80:93:38:6c:c0:
98:6c:27:dc:ef:53:7c:84:46:1b:2a:65:ad:ec:a0:
ab:12:7e:1a:0d:95:90:ff:47:a3:94:08:09:8a:fa:
4b:2f:db:6f:56:f7:70:cb:5d:b3:1c:fe:f4:82:f2:
c3:72:2d:6a:e3:1e:1b:4e:57:c9:12:b7:3c:7c:50:
c7:c0:a9:4c:d3:ea:5e:75:49:a5:bc:d1:19:07:5f:
5c:da:ee:60:4a:78:68:bd:2d:7f:9b:d1:7e:d9:5d:
51:ba:11:20:f6:46:79:15:08:c2:a1:3b:48:b5:2c:
f7:8f:c6:8f:bc:6e:4e:a5:6b:60:11:0b:06:0b:3f:
a2:2a:c6:a7:14:7e:28:34:49:be:0f:a4:d6:0b:34:
c7:60:76:46:17:3a:c2:ab:d6:6a:64:b8:49:f7:3b:
47:40:5e:1e:3c:1a:97:18:dc:ed:0d:85:ae:ca:31:
a9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:19:34:B1:7D:85:D2:AF:1D:2A:DE:85:F3:7C:1F:A1:22:0B:E7:A5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/326130313a3666303a613130303a3a2f34302d3438203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:6f0:a100::/40
Signature Algorithm: sha256WithRSAEncryption
08:5c:f3:1f:42:33:7c:31:b0:c6:c7:25:31:99:e4:b5:2b:bb:
a7:48:39:9c:53:e6:dd:9a:ed:3d:ee:7a:37:8f:6f:71:24:64:
10:c8:3d:4c:60:e0:3e:1e:7e:dc:4d:97:93:b6:4e:1a:16:51:
f1:67:35:4f:b6:55:a7:99:75:8c:67:3c:4c:0a:32:9c:d6:d8:
b1:8d:61:b7:0f:a9:5f:1f:73:dc:d9:7f:7e:c8:31:ed:49:a6:
cd:89:42:24:5b:d4:20:be:1f:8f:94:66:fd:e1:78:05:e9:c2:
37:3b:0b:9e:32:e4:46:80:14:1b:a3:76:b2:60:a8:5c:df:47:
0c:d1:e6:79:89:8f:ca:5e:e5:ff:71:53:98:fc:5d:26:09:ed:
3c:32:3a:7b:fb:fe:e9:90:a7:65:77:69:e4:19:8c:a4:d2:27:
7c:bf:a3:76:3c:c4:e4:4e:f0:0c:aa:9b:93:bd:e3:50:7b:2a:
17:91:31:bc:d1:1a:d3:93:59:d7:0a:c6:c6:ec:11:9e:21:d1:
b1:99:9d:af:bc:0a:a4:04:06:fc:5e:d4:7c:13:d4:f1:b6:39:
16:61:68:71:8c:0e:38:ca:b2:e0:7a:ee:12:17:e8:ea:cb:5d:
86:6d:6d:e3:fc:8b:a4:4d:82:42:fc:43:98:e0:3f:05:1b:2b:
ab:82:7b:59
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:57:39 2026 by rpki-client