Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/326130313a3666303a666530303a3a2f34302d3438203d3e203432333636.roa
File: 326130313a3666303a666530303a3a2f34302d3438203d3e203432333636.roa (raw, json)
Hash identifier: BW2qDPp596JPwlQNfPlOytDcuTLvNL1fRmGkyn2EXnI=
Subject key identifier: 29:91:80:F3:F4:B3:A7:F9:B8:BC:43:E9:53:2D:48:18:36:63:59:AD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 24BDE1B5575BD8A7BC72FF390B88B0D7B9222B53
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/326130313a3666303a666530303a3a2f34302d3438203d3e203432333636.roa
Signing time: Fri 17 Jul 2026 16:26:19 +0000
ROA not before: Fri 17 Jul 2026 16:21:19 +0000
ROA not after: Fri 16 Jul 2027 16:26:19 +0000
asID: 42366
IP address blocks: 2a01:6f0:fe00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:bd:e1:b5:57:5b:d8:a7:bc:72:ff:39:0b:88:b0:d7:b9:22:2b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 17 16:21:19 2026 GMT
Not After : Jul 16 16:26:19 2027 GMT
Subject: CN=299180F3F4B3A7F9B8BC43E9532D4818366359AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3c:61:f6:2c:95:17:35:ca:1f:85:4a:f1:13:
6d:58:25:5f:31:8f:3d:b5:2b:59:87:12:bf:39:27:
ed:cd:f5:bc:a5:d9:6c:71:1c:af:4d:fc:46:89:d4:
02:3c:50:8c:de:2c:ad:bb:e7:d3:96:b7:fb:70:d7:
11:27:57:d2:f2:32:98:06:cf:55:66:bf:dc:42:fb:
ff:a7:ea:62:f1:4b:28:24:43:f7:2f:19:8c:2e:71:
e3:e6:6e:bf:7e:51:2f:2f:40:6d:ec:c9:e5:14:ca:
98:82:f5:63:6f:b0:ac:cb:e5:61:34:20:fc:4c:a1:
e6:08:e6:b7:3d:06:0b:da:89:6e:21:83:d6:eb:3c:
68:99:4a:45:8b:52:82:cd:e1:3e:42:d3:a9:7e:a6:
2e:3e:58:af:25:62:23:cc:47:7e:2e:60:a7:1a:29:
bf:36:33:7b:5b:79:80:12:8d:f4:00:d5:d0:5c:76:
e8:20:bd:45:49:78:3a:bd:97:e0:5a:99:ba:6f:cb:
28:5d:d5:81:03:1c:a5:dc:28:95:55:7f:19:a3:6b:
11:c3:d4:cf:60:6f:29:9d:d0:9b:63:d1:d4:18:06:
94:d2:72:e2:6d:6c:2b:a4:6b:31:aa:c3:84:96:0f:
24:56:c6:93:e7:b7:0d:e1:eb:11:8f:7d:39:09:88:
29:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:91:80:F3:F4:B3:A7:F9:B8:BC:43:E9:53:2D:48:18:36:63:59:AD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/326130313a3666303a666530303a3a2f34302d3438203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:6f0:fe00::/40
Signature Algorithm: sha256WithRSAEncryption
07:5c:77:c0:1e:74:64:ee:c6:29:4e:6c:ba:a3:0e:39:a7:c5:
a3:0e:e3:ee:9a:a0:f3:b2:27:dd:e0:a4:a9:ea:42:6e:ba:a9:
b2:bb:46:c1:25:88:21:40:8f:d7:f1:1e:75:4e:be:fc:67:f5:
88:48:65:8d:fc:f3:6c:73:2b:48:28:a4:9f:4a:cf:3d:e5:70:
04:b6:21:14:9e:0b:d9:b7:f1:b3:b7:4a:05:65:0e:e5:1b:63:
fb:59:85:2b:3a:ac:30:cf:35:9c:63:3f:66:24:1d:54:32:16:
04:9c:65:14:43:15:19:68:66:31:1c:c0:41:0f:5a:51:b7:5e:
bf:3c:11:4c:ea:e1:7b:04:38:cc:33:4a:af:fd:9e:2e:cf:fb:
10:d6:65:7f:6f:32:af:84:ba:10:d0:3e:ba:88:bf:7b:04:be:
4f:4d:8c:a6:12:ca:98:18:86:de:0b:47:8a:4e:2e:39:ee:ec:
34:67:8b:d8:fd:a3:7f:85:7f:88:13:60:b6:6a:fc:83:7f:fc:
d1:cf:fe:a1:2e:c2:c1:f8:c0:6a:7a:a2:5b:b6:c6:8c:f4:ef:
2e:13:05:86:ee:3f:68:97:cd:ff:42:5f:1f:d3:ba:73:7a:63:
ca:a5:50:9c:e5:77:ee:a0:81:b5:c7:4c:b9:4c:3c:d6:e5:d3:
57:21:45:f1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:57:42 2026 by rpki-client