Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a646130303a3a2f33322d3332203d3e203530353830.roa
File: 326131333a646130303a3a2f33322d3332203d3e203530353830.roa (raw, json)
Hash identifier: XjKzqWNr7Btvkj5JImVNsEp2dFZjVAsUHydrIsbVUoU=
Subject key identifier: B7:92:63:2B:F0:E3:6D:9D:67:99:D5:D5:22:D2:E3:F8:95:08:95:DA
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 473C541A2C3BFD885C99C26BA98CFC7CCA847336
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a646130303a3a2f33322d3332203d3e203530353830.roa
Signing time: Mon 09 Feb 2026 18:55:38 +0000
ROA not before: Mon 09 Feb 2026 18:50:38 +0000
ROA not after: Mon 08 Feb 2027 18:55:38 +0000
asID: 50580
IP address blocks: 2a13:da00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:26:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:3c:54:1a:2c:3b:fd:88:5c:99:c2:6b:a9:8c:fc:7c:ca:84:73:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Feb 9 18:50:38 2026 GMT
Not After : Feb 8 18:55:38 2027 GMT
Subject: CN=B792632BF0E36D9D6799D5D522D2E3F8950895DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:74:74:a5:5f:5f:d9:de:b7:4b:c9:4e:3e:
e4:88:63:43:ab:40:6b:a9:b5:3f:9f:d9:ef:e7:82:
3b:33:f0:ec:95:b9:05:f8:bc:cb:5b:97:98:7e:32:
e0:99:b7:3a:8e:39:2a:7b:28:68:d3:99:3c:3c:d8:
53:37:41:cc:8d:65:d5:49:c6:f0:b7:d4:9a:3b:33:
ea:dc:e2:43:8f:ee:51:de:37:93:b7:64:81:e2:94:
82:5e:4e:d0:de:75:ac:46:3c:0d:ff:a3:ec:92:69:
af:a9:a3:d4:e0:3c:56:d1:3e:e2:8e:b6:ee:eb:e8:
c1:6c:f1:46:55:46:0f:3f:09:05:01:c1:e3:88:d2:
f3:3b:15:db:d9:9f:c5:ee:19:d5:be:9f:90:47:df:
1f:22:3c:14:45:2e:0d:fa:18:b6:ce:65:11:d8:31:
b5:25:5b:65:87:10:87:f3:ee:15:0d:55:a0:b8:18:
30:51:79:0c:aa:9d:71:8b:7a:5d:ee:f1:90:12:82:
f4:74:52:bd:9a:36:68:b5:69:4f:66:d1:e3:6f:75:
3a:2b:66:5e:12:df:79:06:d3:af:fc:92:72:ae:ac:
7c:a6:4b:87:94:ca:c6:de:09:f9:98:cb:e3:de:e2:
f2:80:07:db:12:37:48:a9:33:1e:3d:05:c8:f9:21:
45:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:92:63:2B:F0:E3:6D:9D:67:99:D5:D5:22:D2:E3:F8:95:08:95:DA
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a646130303a3a2f33322d3332203d3e203530353830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:da00::/32
Signature Algorithm: sha256WithRSAEncryption
09:18:26:a9:11:23:70:8b:92:75:06:7a:70:96:5a:99:e4:19:
89:93:cf:f3:a2:49:a3:77:f0:9b:71:fa:34:ea:77:fa:bb:6e:
4a:6d:76:5d:84:61:a1:92:00:62:82:1e:50:10:9e:91:bb:29:
a3:bb:96:b3:f7:2f:a3:b0:14:50:27:52:a3:aa:90:63:87:a5:
43:a0:7c:b6:4e:bc:89:a5:63:b2:70:09:2e:1e:a1:84:38:35:
60:e5:74:15:94:45:4d:21:e4:d4:5e:73:ad:46:40:53:cb:eb:
b6:2d:2f:60:ef:78:42:d5:15:d4:db:56:6c:86:dc:fe:da:27:
99:2f:01:de:a0:f3:f8:0c:1f:9e:6e:c2:f2:7a:5a:3a:02:e6:
13:b5:04:cc:df:93:e2:c7:79:c9:4e:f6:75:4b:a9:a6:26:b7:
10:58:04:c6:b1:2f:d0:75:df:18:fb:b8:c5:28:a1:dc:b3:61:
85:e4:b8:e0:c3:25:83:92:19:eb:a8:90:ed:10:72:59:4d:21:
cf:c0:e3:92:ac:59:91:5b:ba:1e:16:5f:f8:f5:7e:9d:99:2b:
91:6a:52:27:4d:fe:fd:25:05:cd:b9:a0:de:71:64:18:93:9f:
8a:db:59:81:c1:3e:68:5d:8e:87:1d:ec:d3:2d:2b:97:db:a5:
b5:d0:56:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:41 2026 by rpki-client