Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/326130323a326262383a3a2f33322d3332203d3e203234383531.roa
File: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (raw, json)
Hash identifier: BuhfFgtRTp/LhChrJJ7gXGS5nezfXNeNFzgZfKbE68g=
Subject key identifier: 14:74:B5:50:9D:48:99:67:86:73:B3:48:20:A6:96:6B:80:ED:9F:51
Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial: 710FD79BC8EF5F9802037AE745CD074E110C6F50
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/326130323a326262383a3a2f33322d3332203d3e203234383531.roa
Signing time: Fri 02 Oct 2026 14:49:35 +0000
ROA not before: Fri 02 Oct 2026 14:44:35 +0000
ROA not after: Fri 01 Oct 2027 14:49:35 +0000
asID: 24851
IP address blocks: 2a02:2bb8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 18:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:0f:d7:9b:c8:ef:5f:98:02:03:7a:e7:45:cd:07:4e:11:0c:6f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Validity
Not Before: Oct 2 14:44:35 2026 GMT
Not After : Oct 1 14:49:35 2027 GMT
Subject: CN=1474B5509D4899678673B34820A6966B80ED9F51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a7:88:3f:a8:07:68:c5:41:d0:f1:7e:fd:07:
f0:1f:03:8e:75:c0:2f:34:1b:c1:71:9e:94:69:df:
83:c7:ae:8c:50:a8:87:43:6e:94:3c:d4:f0:4b:05:
7e:24:5c:32:21:da:39:a1:c7:f1:c8:5f:ee:c3:4c:
1d:de:34:6d:b9:a2:6b:3d:e7:74:45:18:26:d9:c2:
64:78:96:84:61:f0:dc:6c:40:db:99:ff:07:a7:58:
e1:ed:5a:77:9d:ca:8a:95:06:25:bb:a2:ed:bc:5a:
9b:94:91:2a:5a:87:23:0e:f5:e7:c8:cf:23:5d:69:
35:3b:b1:d4:98:76:a8:26:ef:f0:05:b8:47:fa:db:
45:c3:fc:78:16:f2:98:d2:47:f4:1f:49:13:1b:16:
f1:69:0b:2d:5b:d6:e7:b5:9e:f9:0a:10:7e:e2:28:
b7:d3:38:bf:b0:fc:3c:4d:8a:ce:e2:f5:59:d2:75:
49:a5:88:f2:f2:26:11:ce:e8:cd:b4:e6:02:04:23:
e3:0b:c6:3f:e1:40:94:ca:81:5a:0b:7c:94:67:ad:
2b:ee:24:fd:f9:39:e8:b8:aa:55:f1:8d:25:08:56:
99:32:81:ae:75:65:ed:f3:53:c2:1b:a2:58:9f:27:
66:c6:79:09:a7:74:a1:62:40:34:4a:e6:98:e1:9c:
5a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:74:B5:50:9D:48:99:67:86:73:B3:48:20:A6:96:6B:80:ED:9F:51
X509v3 Authority Key Identifier:
keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/326130323a326262383a3a2f33322d3332203d3e203234383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2bb8::/32
Signature Algorithm: sha256WithRSAEncryption
4a:37:50:ec:58:1a:00:1e:b1:bd:9a:4f:d6:d2:9b:71:54:07:
f6:71:ce:fb:ad:60:89:fa:a5:7d:ee:67:ff:4d:03:09:65:88:
b7:9e:6b:af:4b:39:69:3d:f7:04:f1:b3:8d:11:50:4c:63:9a:
94:e5:53:91:68:09:e6:71:b3:92:53:76:7f:74:e5:26:a9:fd:
1c:60:55:6d:0f:92:24:6a:b9:bc:87:0a:52:58:4b:55:39:59:
93:de:96:1b:fa:2e:95:d0:ed:e8:d3:3c:a8:66:c5:44:e9:5e:
5e:24:5f:79:21:1d:d8:c5:e9:f7:36:45:be:74:13:dd:96:24:
58:1e:22:a0:7a:0c:5a:7c:cd:eb:25:bb:2e:d8:20:df:b6:01:
18:33:a6:97:a2:8a:63:51:54:7b:3d:64:a3:85:0b:81:bb:f6:
50:a0:53:e9:bf:59:38:35:49:6c:6f:b0:2d:1d:a6:73:4e:2b:
46:56:a1:fc:37:72:3e:f3:9f:9d:6e:b8:68:3c:e9:79:fd:5e:
0b:fc:3b:02:6c:fe:5f:de:3e:19:72:b0:03:77:ad:43:88:c5:
81:55:0f:c1:26:69:35:f0:97:29:6c:50:4e:f3:ad:85:07:63:
b2:74:6c:2d:e8:83:8a:ce:86:8d:29:96:19:90:7c:bb:9b:00:
75:3d:34:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:40:10 2026 by rpki-client