Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/326130653a666434353a326633303a3a2f34382d3438203d3e20323039333130.roa
File: 326130653a666434353a326633303a3a2f34382d3438203d3e20323039333130.roa (raw, json)
Hash identifier: zBck4nOfVGigqbE1M8GwahkpZT+TSOG3sW4XnkW/DN0=
Subject key identifier: 24:8F:2D:7B:9A:7F:E0:29:6B:ED:84:28:2F:59:53:7F:BC:1A:71:63
Certificate issuer: /CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985
Certificate serial: 7D9119CEBA9D2DA7B7CCEFC0EDD1D08E6164C3E2
Authority key identifier: 7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/326130653a666434353a326633303a3a2f34382d3438203d3e20323039333130.roa
Signing time: Tue 25 Aug 2026 08:41:54 +0000
ROA not before: Tue 25 Aug 2026 08:36:54 +0000
ROA not after: Tue 24 Aug 2027 08:41:54 +0000
asID: 209310
IP address blocks: 2a0e:fd45:2f30::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl
rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft
rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:46:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:91:19:ce:ba:9d:2d:a7:b7:cc:ef:c0:ed:d1:d0:8e:61:64:c3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985
Validity
Not Before: Aug 25 08:36:54 2026 GMT
Not After : Aug 24 08:41:54 2027 GMT
Subject: CN=248F2D7B9A7FE0296BED84282F59537FBC1A7163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:9d:59:3e:2b:8f:29:c2:76:48:b4:e6:dd:
2c:9d:e3:e7:ef:c7:dd:5f:aa:7e:2a:ba:d6:8a:9e:
52:9c:16:36:65:ce:e4:90:c9:c1:6e:c9:5e:66:7c:
eb:37:97:eb:b0:5b:f2:84:45:2a:41:98:79:17:f4:
1b:6c:b0:15:12:5a:7c:9d:59:7a:79:11:f4:54:51:
21:62:ab:6e:9c:9c:7d:ed:b6:b9:b5:1c:08:3e:b9:
3f:e6:08:3f:fa:fe:7b:41:ed:9a:1b:9f:49:13:41:
b0:a8:8c:e5:87:38:95:63:43:c1:00:36:2e:5c:26:
c6:21:f6:5f:0c:a5:d6:8b:6a:84:bc:79:04:8d:e8:
00:25:5c:04:02:3e:0e:ac:5c:0f:f1:b1:72:67:86:
14:7b:02:2d:8b:18:29:1b:72:38:1f:79:3b:8b:ab:
3a:b8:88:a6:ba:3e:2f:60:6d:c5:db:bf:ff:1d:ae:
a4:dc:8c:04:77:dc:6a:f2:59:0a:02:a8:c9:38:bb:
40:fe:14:9a:d9:7c:91:81:dc:b5:7c:5a:cd:3c:3a:
f0:4d:e7:55:49:ab:a0:fc:b4:0c:3a:e7:04:54:17:
8e:30:19:1e:03:97:13:28:08:fe:b2:d3:bc:d3:6a:
a9:b3:ca:4d:af:2f:08:40:f1:4b:b7:40:07:68:1c:
69:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8F:2D:7B:9A:7F:E0:29:6B:ED:84:28:2F:59:53:7F:BC:1A:71:63
X509v3 Authority Key Identifier:
keyid:7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/326130653a666434353a326633303a3a2f34382d3438203d3e20323039333130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:fd45:2f30::/48
Signature Algorithm: sha256WithRSAEncryption
b9:dc:6b:e4:3b:bc:da:e1:40:40:53:3f:d0:79:e3:a0:bf:a3:
06:90:bd:c8:3f:5d:94:1e:cd:fc:c9:06:7a:6e:51:ce:90:d0:
b6:c5:1c:4b:d3:91:15:4f:63:19:8d:f1:15:a7:02:9f:b1:dd:
d1:1d:b2:fc:dc:8a:e5:01:6d:5d:ae:37:98:37:7c:06:ee:07:
24:a2:69:9c:de:03:13:17:a9:f1:a4:76:80:5d:c6:95:c6:d0:
ba:73:8d:01:3e:58:d0:ec:b6:43:76:99:ce:20:0e:57:b1:63:
95:00:5e:dc:94:76:08:89:1d:ac:eb:71:62:aa:21:57:18:30:
49:84:f7:dd:4b:f5:cd:b3:b4:7c:df:6a:28:bf:1b:9f:8e:a4:
05:7e:b9:50:d2:18:b9:5d:8d:6b:c1:15:be:86:0b:16:ab:4c:
a4:c6:b7:cf:4b:8a:fb:0d:47:f9:e7:6d:2e:07:50:92:f5:85:
a7:94:9a:e8:90:9b:a0:b8:dc:b3:33:af:e5:a8:bc:4f:7f:d0:
fc:dc:b4:d1:3a:d6:f2:47:5d:1e:3e:f0:16:e0:6f:65:aa:ee:
2c:50:e7:0b:3c:11:66:fb:0b:67:08:a8:f6:ff:c0:2a:9d:6f:
b8:28:d5:2b:ea:da:fa:d4:b5:40:87:80:f3:4c:75:8c:57:90:
36:8a:b3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:16:12 2026 by rpki-client