Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/326130653a666434353a353030303a3a2f34302d3438203d3e20323034383330.roa
File: 326130653a666434353a353030303a3a2f34302d3438203d3e20323034383330.roa (raw, json)
Hash identifier: 4VMWXKcIo6/p9ijIu9IEM7e/uFISrba097G5zVjTr4E=
Subject key identifier: D1:A5:0B:4B:DF:BD:FC:C5:BB:06:A4:FF:FA:B1:DB:D9:F6:7A:0A:86
Certificate issuer: /CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985
Certificate serial: 1218CE6FB0179AB60AD3B3054276715BD21CBC9E
Authority key identifier: 7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/326130653a666434353a353030303a3a2f34302d3438203d3e20323034383330.roa
Signing time: Thu 17 Sep 2026 09:41:54 +0000
ROA not before: Thu 17 Sep 2026 09:36:54 +0000
ROA not after: Thu 16 Sep 2027 09:41:54 +0000
asID: 204830
IP address blocks: 2a0e:fd45:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl
rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft
rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 20:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:18:ce:6f:b0:17:9a:b6:0a:d3:b3:05:42:76:71:5b:d2:1c:bc:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985
Validity
Not Before: Sep 17 09:36:54 2026 GMT
Not After : Sep 16 09:41:54 2027 GMT
Subject: CN=D1A50B4BDFBDFCC5BB06A4FFFAB1DBD9F67A0A86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:99:4f:b6:8f:f3:b1:10:74:3a:a4:db:49:c8:
a6:d7:c4:8b:f5:e8:e7:0e:32:45:93:41:05:1b:12:
48:05:20:7b:1c:62:c9:e0:69:48:4d:df:6d:f6:e9:
d1:db:dc:ea:43:ce:b6:52:42:93:3a:6e:70:94:cd:
9a:09:72:29:e4:c7:ce:fa:65:33:05:0d:25:56:99:
c1:91:3b:4a:0a:6f:5a:80:35:4c:e2:59:3e:03:8c:
f6:57:91:f8:bd:d2:75:46:c3:41:cf:5f:09:67:84:
93:33:ea:0e:27:94:82:8a:1b:b4:ae:49:23:7a:46:
4e:f1:fa:e4:5d:0c:a6:38:04:3e:c8:bd:c4:5c:90:
e8:f7:36:19:a6:de:10:a1:b1:7e:01:fe:39:b1:de:
2c:42:5a:d3:3b:e6:af:3f:86:db:f8:a7:bf:76:a8:
cc:ad:84:a9:d2:17:08:66:e0:73:dd:0f:8d:ed:2b:
d3:bf:f1:02:b9:23:c9:4e:17:74:f4:17:be:d9:f7:
96:62:1e:2e:67:f2:fc:52:95:e0:8a:f0:3f:a1:aa:
05:56:11:ef:ea:67:7f:ad:8b:22:a7:d6:ce:4d:f7:
b1:ba:fe:6e:ae:45:fb:1d:92:35:31:9c:91:1d:5e:
0a:94:fe:ab:82:ec:b7:97:d0:41:84:e2:c7:e2:0d:
2f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A5:0B:4B:DF:BD:FC:C5:BB:06:A4:FF:FA:B1:DB:D9:F6:7A:0A:86
X509v3 Authority Key Identifier:
keyid:7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/326130653a666434353a353030303a3a2f34302d3438203d3e20323034383330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:fd45:5000::/40
Signature Algorithm: sha256WithRSAEncryption
08:a6:57:0d:25:ac:27:72:2f:d9:49:68:e4:69:f2:ee:12:a2:
3c:cf:17:9d:f7:49:9c:e1:b7:d5:0c:3e:6b:2e:6b:41:54:1b:
80:c2:2b:aa:0f:02:ba:b1:38:83:04:f3:8b:88:0e:e8:3e:5d:
80:7e:64:34:4a:b3:e0:36:2d:ac:82:55:d6:48:ea:97:39:ca:
fa:f1:10:89:e5:9c:69:40:9f:4d:e7:43:26:fc:db:b2:12:87:
8b:59:00:38:84:ee:57:ce:21:22:95:12:b4:63:1b:5f:9d:77:
6e:a5:18:9f:51:f7:e5:dd:7b:5e:f9:6f:03:9e:1a:a4:05:08:
a2:4e:9e:d5:94:69:55:bb:51:f0:a0:a9:fb:ce:05:15:44:10:
d8:e2:39:f1:18:20:83:37:f4:2a:99:7b:da:01:3d:28:0f:a6:
0b:de:aa:bb:5c:9b:ed:ce:58:64:b8:73:78:04:0d:11:ef:9f:
8e:2c:6d:71:9c:7b:d2:32:00:3a:53:4c:6d:f1:2b:63:c9:77:
12:17:be:29:32:12:6a:61:79:25:53:a4:84:99:ef:2f:ad:b1:
95:de:cc:9f:1c:f5:93:8c:c1:98:84:13:64:2c:85:7f:12:97:
12:da:a1:68:e2:db:ea:26:3c:ab:22:90:5f:84:9f:12:51:9a:
d0:24:fb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:49:38 2026 by rpki-client