Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/326130313a6234303a3a2f32392d3438203d3e203134363138.roa
File: 326130313a6234303a3a2f32392d3438203d3e203134363138.roa (raw, json)
Hash identifier: aQ7Zs1GXD2YhsOFRwSIq/T9v5bNh9rH0xnn29aQh438=
Subject key identifier: 12:40:17:3B:4A:76:DF:52:A0:E6:06:41:DB:1E:C4:5F:A5:C1:B5:CC
Certificate issuer: /CN=295b60bb0cbb4a53d9545bc20b774ffa036b4a46
Certificate serial: 33EE3D8FE5EB8F9ED57B64534AB5426E21874732
Authority key identifier: 29:5B:60:BB:0C:BB:4A:53:D9:54:5B:C2:0B:77:4F:FA:03:6B:4A:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/326130313a6234303a3a2f32392d3438203d3e203134363138.roa
Signing time: Thu 04 Jun 2026 12:24:04 +0000
ROA not before: Thu 04 Jun 2026 12:19:04 +0000
ROA not after: Thu 03 Jun 2027 12:24:04 +0000
asID: 14618
IP address blocks: 2a01:b40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.crl
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:ee:3d:8f:e5:eb:8f:9e:d5:7b:64:53:4a:b5:42:6e:21:87:47:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295b60bb0cbb4a53d9545bc20b774ffa036b4a46
Validity
Not Before: Jun 4 12:19:04 2026 GMT
Not After : Jun 3 12:24:04 2027 GMT
Subject: CN=1240173B4A76DF52A0E60641DB1EC45FA5C1B5CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:32:ea:ec:e6:c5:c5:4e:3e:91:1e:c2:eb:54:
38:3b:4b:50:0f:e7:29:20:29:15:71:ae:e3:47:d8:
d4:46:85:71:36:42:9f:4f:98:5b:17:92:4c:10:b1:
82:c1:8c:d9:18:32:8c:ed:ab:3c:4e:b6:46:6f:5b:
32:fe:4f:4c:2d:8e:68:1e:7b:17:d8:f8:a5:9d:89:
aa:3a:dd:f2:3a:d6:15:db:2b:c5:61:0f:58:44:51:
a2:7c:5e:b2:30:c5:c2:56:d9:6c:9e:90:a2:f4:9a:
a9:3b:c2:5f:67:30:21:00:38:a9:00:62:70:0b:57:
9f:18:18:4c:30:a6:60:b4:0b:7b:e9:11:d5:e2:9f:
d9:23:84:27:ec:ec:fa:dc:17:58:a4:2b:cf:70:3b:
67:34:d6:3f:7e:79:73:57:42:38:e6:a8:63:07:1e:
d2:b3:a9:6c:d7:a0:19:9c:39:51:bb:d5:a5:07:18:
48:6d:bb:44:f0:7f:7f:fe:53:20:1f:98:ed:45:e5:
8c:52:44:e3:ff:50:2b:a0:58:21:bc:cd:65:64:ac:
33:ab:de:e0:90:2f:e3:d2:24:f6:29:96:fd:cf:9c:
7c:d8:d1:b5:56:dc:ec:68:25:7a:c0:82:08:40:3f:
12:17:fd:2b:5e:32:75:33:75:e1:95:8c:dc:0e:7f:
ab:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:40:17:3B:4A:76:DF:52:A0:E6:06:41:DB:1E:C4:5F:A5:C1:B5:CC
X509v3 Authority Key Identifier:
keyid:29:5B:60:BB:0C:BB:4A:53:D9:54:5B:C2:0B:77:4F:FA:03:6B:4A:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/326130313a6234303a3a2f32392d3438203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:b40::/29
Signature Algorithm: sha256WithRSAEncryption
5c:5a:ae:9a:59:d0:c6:45:a0:c7:29:86:6a:51:c6:17:a3:4f:
f1:f9:9b:be:ef:21:88:f0:bd:08:b7:de:58:dd:d0:4c:6f:63:
24:df:74:3e:d6:74:14:28:1d:55:87:0a:22:1f:de:36:1d:fd:
6a:bf:5b:89:fc:9a:d8:02:59:cf:06:ea:ae:ab:01:4b:8c:ad:
aa:fd:0f:f6:39:2c:12:12:a7:c9:86:8e:c4:c7:7e:c9:cb:99:
7d:74:e4:23:49:1a:5a:8c:a9:ce:1a:17:7d:8a:4d:77:e2:88:
1b:37:d9:9f:8b:d4:a8:21:cb:68:de:b9:41:aa:fb:1c:67:ff:
ae:1b:79:59:a2:ed:6c:23:e4:47:46:86:44:d8:72:85:04:59:
eb:44:5a:b9:77:06:22:98:4c:e7:9e:52:b2:26:e6:81:8e:0c:
a6:27:6b:a8:5e:18:49:46:89:96:c7:b1:68:3a:a7:ed:06:31:
d8:8b:67:f0:48:8c:f6:27:a4:52:6e:cf:be:ab:0a:14:ed:fb:
03:9d:86:fa:9a:8d:88:75:2e:b5:8d:97:96:de:d3:3e:4a:b9:
7f:0c:1e:f1:cf:06:f4:7b:2d:3a:79:9e:5e:8f:a3:f5:0a:05:
ab:d2:43:b0:c6:fe:ed:16:a0:ae:4e:10:a6:ff:2f:c5:1a:0c:
c0:11:f3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:28:46 2026 by rpki-client