Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a623930303a3a2f33322d3332203d3e2035363530.roa
File: 326131333a623930303a3a2f33322d3332203d3e2035363530.roa (raw, json)
Hash identifier: IEXWaXuV3w8kiyUSn8Xb9ocu7wGkZqq6FHmShe2ilR0=
Subject key identifier: 2B:FE:C1:30:59:0D:EA:9C:A1:27:7D:C2:E6:07:2B:17:BC:59:8D:D2
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 1D76F3CD05F8A06AA0997B4B4986BE51D973A0A7
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a623930303a3a2f33322d3332203d3e2035363530.roa
Signing time: Mon 09 Feb 2026 18:55:37 +0000
ROA not before: Mon 09 Feb 2026 18:50:37 +0000
ROA not after: Mon 08 Feb 2027 18:55:37 +0000
asID: 5650
IP address blocks: 2a13:b900::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:76:f3:cd:05:f8:a0:6a:a0:99:7b:4b:49:86:be:51:d9:73:a0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Feb 9 18:50:37 2026 GMT
Not After : Feb 8 18:55:37 2027 GMT
Subject: CN=2BFEC130590DEA9CA1277DC2E6072B17BC598DD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c2:df:a8:f3:7e:86:20:cb:8c:7e:bc:ab:69:
43:70:81:35:b0:15:ac:30:fd:16:e1:c1:55:fa:0e:
c0:58:28:e8:a5:b2:1b:50:29:70:ea:64:64:d3:5e:
08:cf:06:d1:58:5a:a9:44:1d:9a:d4:88:59:47:c4:
9b:25:cc:d4:f1:4b:6f:aa:45:ec:8a:42:ca:cd:c3:
69:79:42:d8:59:8e:bd:5a:ad:f8:ef:56:3d:84:9c:
dd:40:6d:1f:68:e4:60:b1:31:f8:ef:10:e6:15:b3:
18:1b:3b:23:8b:cd:3a:35:14:29:9d:f7:ea:dc:96:
24:00:25:2d:42:56:cd:5c:55:49:c1:ee:6f:b3:6c:
0a:f5:e7:52:af:e2:64:d8:20:54:e6:a1:e5:2b:1f:
a1:c5:7d:d2:d4:ac:55:07:6f:d5:88:32:c3:1d:8b:
95:78:29:fb:8f:3c:ec:1b:4a:25:2f:25:9b:37:31:
31:53:8a:dd:64:d7:42:59:0b:85:99:74:85:f6:12:
48:a7:70:50:58:97:d4:99:f9:1e:da:47:97:d0:81:
55:83:c4:23:94:a3:85:2f:ec:fc:44:b6:d7:a9:cc:
f2:72:18:e7:ba:3c:df:53:cf:83:f1:f0:ac:e5:2c:
6b:e8:23:9d:6f:cf:21:9d:ea:08:e5:63:b0:ee:4d:
8a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FE:C1:30:59:0D:EA:9C:A1:27:7D:C2:E6:07:2B:17:BC:59:8D:D2
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a623930303a3a2f33322d3332203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b900::/32
Signature Algorithm: sha256WithRSAEncryption
2e:d1:da:6e:9d:1f:13:1a:3b:0f:23:cf:7c:a8:b6:2a:12:5f:
e8:f5:5e:3d:77:a9:ec:f1:85:62:25:d2:7a:fb:a5:16:d9:bc:
d2:45:07:04:99:bb:3d:73:9a:bb:4a:df:c6:b6:3d:d3:c6:63:
ef:b1:24:0a:3e:d0:9d:8f:f0:2c:83:74:00:17:b4:05:31:c1:
fc:86:62:ab:f0:fe:d9:e3:54:3d:1c:53:71:94:90:30:9a:c5:
17:24:db:0f:29:6d:ee:f3:5f:82:5c:a7:cc:cc:42:07:fe:a8:
9b:44:17:1c:c3:f3:46:1c:56:75:fa:6a:da:f7:c5:01:c7:72:
8d:23:05:27:01:c8:5b:84:4e:71:e8:4f:da:31:0e:c8:12:13:
1a:a5:70:fb:e3:47:51:ef:0e:a0:e6:85:7e:88:d7:d9:8f:26:
2c:b5:af:cd:8b:ee:fc:a3:18:db:a5:46:c3:1a:20:b6:09:c7:
d1:b5:1b:5d:07:d8:06:f3:cb:65:76:49:6d:36:63:f6:96:74:
d8:f5:81:a7:57:e7:9a:42:3c:14:dc:62:0b:f3:83:38:6a:00:
61:89:8f:2a:18:47:12:a3:2b:3d:82:56:54:1b:38:71:56:10:
ef:87:ee:df:7a:09:8e:7b:5a:9a:37:5e:4c:9c:94:90:7b:93:
20:6d:8f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:03:01 2026 by rpki-client