Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/326130323a326262383a3a2f33322d3332203d3e203234383531.roa
File: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (raw, json)
Hash identifier: TbGFvgtgWSAZHxb3hPH46QipjihxuX4FrvDSW9hazIY=
Subject key identifier: 94:96:6D:0E:66:99:CB:30:F8:44:97:54:BB:A6:93:D3:90:6D:2B:A8
Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial: 08D950F53D8AF9787B2E332401CBAAC9B029870A
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/326130323a326262383a3a2f33322d3332203d3e203234383531.roa
Signing time: Fri 31 Oct 2025 13:55:11 +0000
ROA not before: Fri 31 Oct 2025 13:50:11 +0000
ROA not after: Fri 30 Oct 2026 13:55:11 +0000
asID: 24851
IP address blocks: 2a02:2bb8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:d9:50:f5:3d:8a:f9:78:7b:2e:33:24:01:cb:aa:c9:b0:29:87:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Validity
Not Before: Oct 31 13:50:11 2025 GMT
Not After : Oct 30 13:55:11 2026 GMT
Subject: CN=94966D0E6699CB30F8449754BBA693D3906D2BA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:b3:07:63:89:c2:4a:00:62:43:cf:5d:11:
82:9e:7a:f4:dd:2e:97:3b:80:86:2f:43:ae:0a:b6:
45:1a:2f:a0:92:c2:84:bb:6a:8f:21:2f:7e:62:c2:
25:48:c8:cd:32:06:fe:af:29:69:76:99:1c:f1:24:
fe:f5:24:16:74:22:dc:71:fb:c3:52:82:91:4a:01:
cb:15:63:11:c9:a2:1b:53:db:ee:a9:e0:66:3c:58:
47:87:6f:ff:47:be:c9:05:34:e6:5a:f6:27:65:98:
98:03:3e:c0:74:af:c6:19:7a:d8:24:6c:a5:45:3e:
9d:f6:6d:ee:b3:e3:d3:4b:bb:96:64:29:9d:a4:67:
26:8b:c6:2e:3e:9c:e3:95:92:09:0a:17:c6:0d:69:
27:30:89:e7:9d:a6:37:d5:a8:9d:18:5a:8f:51:7b:
db:db:a8:b6:58:6b:b6:a5:4f:4f:36:d5:cd:0b:50:
d7:de:f4:4c:75:ed:5c:0c:6d:8c:69:54:9e:87:39:
8f:c1:7c:d0:c6:58:89:33:0d:96:15:7d:51:eb:11:
f6:25:03:5f:44:64:f4:5e:8a:f8:1f:99:f7:fc:de:
bd:bc:3c:36:4e:8d:70:c4:a2:b6:dd:8e:8b:c1:f2:
b6:20:2e:eb:24:1f:eb:cd:88:7a:5c:a9:6d:04:54:
5a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:96:6D:0E:66:99:CB:30:F8:44:97:54:BB:A6:93:D3:90:6D:2B:A8
X509v3 Authority Key Identifier:
keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/326130323a326262383a3a2f33322d3332203d3e203234383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2bb8::/32
Signature Algorithm: sha256WithRSAEncryption
9f:a9:47:2c:c3:88:62:96:88:6f:95:23:d4:e7:1b:a9:a3:f0:
cf:54:81:b2:6d:f3:0d:de:27:42:15:3c:77:b4:31:dd:88:94:
d4:0e:70:31:a2:06:34:ab:d6:c0:65:3c:a7:3e:8e:75:f5:0f:
84:d3:b8:99:20:5b:0d:6a:2b:c7:1f:a5:7a:24:73:0c:e6:83:
1f:4f:5c:65:e9:cd:60:a9:23:6c:d5:2f:60:55:17:ad:bb:4e:
df:cf:cc:c4:03:d5:a9:db:19:e6:57:5b:e2:1c:52:a2:8d:a1:
47:71:3b:fd:a2:1a:90:9a:d2:6a:85:9d:c5:d9:93:18:40:03:
5e:2f:45:f5:8f:c4:13:72:3a:fb:35:d8:0f:ad:c6:f9:e7:5c:
31:8f:84:fd:ad:82:1c:1e:aa:3e:56:24:2c:37:d0:b8:2e:d4:
ec:10:8c:59:9f:9a:98:20:73:76:e1:bf:63:79:e5:75:fb:45:
b0:2c:f9:ea:8f:4b:ba:e5:da:bc:ce:a4:46:c5:4b:5a:d7:d6:
17:57:51:88:05:9a:e0:73:08:9d:04:fa:72:cb:e5:15:0f:6a:
a0:66:86:41:6a:da:35:5c:5f:ee:04:6b:65:63:91:de:ca:36:
8c:01:a1:66:34:4f:0e:3e:c3:4b:ad:ae:9a:69:e2:94:22:4e:
1b:f2:59:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:28 2025 by rpki-client