Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/326130323a323633303a3a2f32392d3239203d3e203135343139.roa
File: 326130323a323633303a3a2f32392d3239203d3e203135343139.roa (raw, json)
Hash identifier: 57eeXg7j+oXHRFh1XtK1fw7OXcY8daCIezixmAfkJcw=
Subject key identifier: 9C:80:B6:FD:6A:93:A8:A8:CC:57:6C:AB:E1:7C:C5:F0:EB:36:03:1F
Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Certificate serial: 4B52BAF0BD7F446F2CE06C9A80F8B2C0F9916BA1
Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/326130323a323633303a3a2f32392d3239203d3e203135343139.roa
Signing time: Fri 10 Apr 2026 10:11:01 +0000
ROA not before: Fri 10 Apr 2026 10:06:01 +0000
ROA not after: Fri 09 Apr 2027 10:11:01 +0000
asID: 15419
IP address blocks: 2a02:2630::/29 maxlen: 29
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:52:ba:f0:bd:7f:44:6f:2c:e0:6c:9a:80:f8:b2:c0:f9:91:6b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Validity
Not Before: Apr 10 10:06:01 2026 GMT
Not After : Apr 9 10:11:01 2027 GMT
Subject: CN=9C80B6FD6A93A8A8CC576CABE17CC5F0EB36031F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4c:64:ff:8c:fa:56:0c:1c:0a:8f:6a:f3:c9:
84:02:f6:48:99:3b:1e:b4:7c:33:9e:d7:bb:4d:49:
5e:97:5d:ac:8b:83:9d:ba:af:7f:54:48:40:69:94:
63:71:5d:09:03:41:41:28:8c:27:b4:c2:7a:4f:4d:
42:b2:35:5f:cf:14:82:3f:34:ce:62:80:1e:fa:ce:
2c:46:dd:6d:e6:54:b6:e8:c5:cb:60:e9:40:ed:45:
e6:7a:7e:7d:3e:a9:bc:e4:0a:8d:f3:75:a9:0f:69:
3d:a4:c3:7c:65:63:80:b5:2b:f4:9f:8d:20:91:78:
e2:a1:7b:3c:38:ca:3d:87:af:0e:29:b3:b6:70:13:
0d:ba:44:11:68:0c:e6:9c:69:ee:9d:3e:bb:20:03:
a8:df:38:32:5e:f6:85:16:dd:bb:2a:2b:c7:18:fb:
fc:a0:9a:c1:62:1a:7f:0d:a0:85:ec:6b:89:2a:70:
da:1c:3a:f5:6f:74:33:b0:e9:fe:1e:65:46:3b:c8:
0e:b2:ea:e5:8f:fa:0f:f1:cd:81:ca:34:e6:36:6f:
c7:35:80:f9:9f:6b:a5:5d:52:d8:46:b7:e6:43:7d:
0e:df:3c:0f:05:22:40:53:fd:22:8d:6c:b4:01:5b:
87:05:d1:f9:b3:35:a0:e7:46:04:c6:af:49:18:91:
82:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:80:B6:FD:6A:93:A8:A8:CC:57:6C:AB:E1:7C:C5:F0:EB:36:03:1F
X509v3 Authority Key Identifier:
keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/326130323a323633303a3a2f32392d3239203d3e203135343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2630::/29
Signature Algorithm: sha256WithRSAEncryption
a5:c4:42:27:c0:a7:18:d8:a7:c3:34:70:ab:96:7c:9f:56:a1:
d7:6e:31:af:0f:d9:0e:6c:a3:aa:4c:e0:36:b7:f2:a4:a4:be:
19:a4:13:b7:c6:18:c0:36:fa:fb:4f:b6:01:2a:2e:e6:61:30:
28:b1:46:4b:d9:aa:a2:b3:4d:67:3f:55:5f:d2:0a:e4:d4:25:
8c:3e:ff:47:54:ef:0e:f1:94:52:a5:2b:f4:63:77:6a:5d:6a:
9c:e9:91:5c:48:30:56:37:6c:81:64:7e:f3:a1:05:69:6c:f9:
a7:93:18:bd:14:29:26:7a:93:3b:5c:5b:60:76:6f:c6:e1:53:
06:f9:72:94:7b:25:cd:5f:95:83:75:6f:8e:bc:10:12:ec:bf:
b1:4b:ae:ef:10:7b:84:8e:db:cf:1b:d3:3b:14:ae:04:66:4a:
f9:d9:92:94:2c:e1:22:c5:53:84:74:9e:11:92:05:3d:87:d7:
d5:19:1f:cd:a1:9a:5b:b4:8f:a3:05:9d:06:58:7b:28:af:3d:
51:da:3d:fc:2c:1f:1c:80:f4:fe:aa:0c:26:ac:60:21:e5:06:
63:79:03:b1:8e:dc:de:f8:2a:3f:ee:f3:a7:50:6a:db:c3:24:
26:2b:18:a0:2e:dc:8d:0b:6b:fd:35:35:76:1e:68:6a:fc:4d:
19:05:a1:f1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUS1K68L1/RG8s4GyagPiywPmRa6EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWRmODU5OTdiMWI5YjM1OGUxYzQzZjM2NzY1YWEwYTRh
MDIxNDRhZTAeFw0yNjA0MTAxMDA2MDFaFw0yNzA0MDkxMDExMDFaMDMxMTAvBgNV
BAMTKDlDODBCNkZENkE5M0E4QThDQzU3NkNBQkUxN0NDNUYwRUIzNjAzMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOTGT/jPpWDBwKj2rzyYQC9kiZ
Ox60fDOe17tNSV6XXayLg526r39USEBplGNxXQkDQUEojCe0wnpPTUKyNV/PFII/
NM5igB76zixG3W3mVLboxctg6UDtReZ6fn0+qbzkCo3zdakPaT2kw3xlY4C1K/Sf
jSCReOKhezw4yj2Hrw4ps7ZwEw26RBFoDOacae6dPrsgA6jfODJe9oUW3bsqK8cY
+/ygmsFiGn8NoIXsa4kqcNocOvVvdDOw6f4eZUY7yA6y6uWP+g/xzYHKNOY2b8c1
gPmfa6VdUthGt+ZDfQ7fPA8FIkBT/SKNbLQBW4cF0fmzNaDnRgTGr0kYkYI/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUnIC2/WqTqKjMV2yr4XzF8Os2Ax8wHwYDVR0j
BBgwFoAUnfhZl7G5s1jhxD82dlqgpKAhRK4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDAyZTBiYTMtZmU2MC00NWIxLTkxNjAtODY4YTJmOGE0
M2IxLzMvOURGODU5OTdCMUI5QjM1OEUxQzQzRjM2NzY1QUEwQTRBMDIxNDRBRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25maFpsN0c1czFqaHhEODJkbHFncEtB
aFJLNC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDAyZTBiYTMt
ZmU2MC00NWIxLTkxNjAtODY4YTJmOGE0M2IxLzMvMzI2MTMwMzIzYTMyMzYzMzMw
M2EzYTJmMzIzOTJkMzIzOTIwM2QzZTIwMzEzNTM0MzEzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoC
JjAwDQYJKoZIhvcNAQELBQADggEBAKXEQifApxjYp8M0cKuWfJ9WodduMa8P2Q5s
o6pM4Da38qSkvhmkE7fGGMA2+vtPtgEqLuZhMCixRkvZqqKzTWc/VV/SCuTUJYw+
/0dU7w7xlFKlK/Rjd2pdapzpkVxIMFY3bIFkfvOhBWls+aeTGL0UKSZ6kztcW2B2
b8bhUwb5cpR7Jc1flYN1b468EBLsv7FLru8Qe4SO288b0zsUrgRmSvnZkpQs4SLF
U4R0nhGSBT2H19UZH82hmlu0j6MFnQZYeyivPVHaPfwsHxyA9P6qDCasYCHlBmN5
A7GO3N74Kj/u86dQatvDJCYrGKAu3I0La/01NXYeaGr8TRkFofE=
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:23:18 2026 by rpki-client