Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a646130353a3a2f33322d3332203d3e20323134393430.roa
File: 326131333a646130353a3a2f33322d3332203d3e20323134393430.roa (raw, json)
Hash identifier: SgkiaXA0IAiBax3MkrFfX1tZ3ARWy+WsqwuwSIqr97Y=
Subject key identifier: 42:C0:B3:05:F5:D2:1C:32:58:39:96:14:C2:D5:EE:73:50:7D:EC:18
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 6F77DCE21F6125CD4B97A383AFA8AAC6AA644309
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a646130353a3a2f33322d3332203d3e20323134393430.roa
Signing time: Mon 09 Feb 2026 18:55:37 +0000
ROA not before: Mon 09 Feb 2026 18:50:37 +0000
ROA not after: Mon 08 Feb 2027 18:55:37 +0000
asID: 214940
IP address blocks: 2a13:da05::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:77:dc:e2:1f:61:25:cd:4b:97:a3:83:af:a8:aa:c6:aa:64:43:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Feb 9 18:50:37 2026 GMT
Not After : Feb 8 18:55:37 2027 GMT
Subject: CN=42C0B305F5D21C3258399614C2D5EE73507DEC18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:17:24:98:f1:ef:59:26:1e:cb:78:75:43:cd:
2b:ee:c2:1f:9b:99:6c:ad:9f:7e:50:cb:eb:bf:b8:
7a:d5:12:ba:e5:f2:f2:fb:28:ee:86:4a:56:13:73:
50:ef:58:9a:ef:38:65:f7:71:d8:7b:c1:48:14:b8:
53:28:84:ac:5c:43:ee:91:7a:32:d9:59:6c:08:30:
85:30:a9:60:bb:d9:dc:58:87:d3:b4:c5:6f:5f:d1:
ed:96:02:b7:5f:6a:7f:5d:da:71:15:2b:0d:46:fa:
97:21:db:c5:71:e6:a1:39:f2:d4:f8:3b:24:0a:fc:
18:54:93:22:03:31:bb:c4:eb:1b:ac:3d:9f:de:82:
e1:62:85:77:a2:57:29:3a:86:07:dd:80:27:21:ce:
cd:e8:49:a6:84:61:1d:2c:65:76:f0:01:19:7d:65:
a2:4f:e4:ae:93:20:7c:1e:ee:20:b9:0a:ec:19:44:
80:b7:1a:c4:e5:69:c6:6e:b3:30:65:44:0e:6f:64:
09:d9:e4:69:29:a2:d7:c0:76:ac:a8:e3:b7:e9:ed:
dd:37:02:b8:8b:ab:ad:ee:b6:27:51:9d:8f:2b:d6:
e9:89:21:09:b1:85:92:60:b6:99:eb:ae:76:ef:af:
2f:76:b1:a2:1c:ab:48:ec:af:53:88:4d:b5:70:e2:
65:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C0:B3:05:F5:D2:1C:32:58:39:96:14:C2:D5:EE:73:50:7D:EC:18
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a646130353a3a2f33322d3332203d3e20323134393430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:da05::/32
Signature Algorithm: sha256WithRSAEncryption
1e:1e:80:ef:f7:a8:8d:94:63:aa:79:92:c7:98:bb:45:ee:18:
fa:4e:a8:49:8d:65:fb:b4:f3:95:4c:bc:0b:6b:07:a2:dd:2b:
7b:47:64:b0:24:24:69:fb:63:25:e1:cf:b6:e9:57:a0:91:f8:
33:c4:02:8c:c8:c9:fa:b6:c8:7d:be:1b:d8:3e:23:bf:22:30:
b9:11:8f:5b:c0:0f:c8:bd:a7:ff:4a:94:79:7d:cc:4c:87:7b:
61:19:25:c7:b3:83:3d:32:9b:12:02:12:fd:c6:6b:b6:4d:a4:
5c:ef:69:14:c8:38:8e:15:ae:94:be:0b:92:a9:41:7f:9c:d0:
78:6a:ee:5d:51:b5:8b:0a:b9:63:4a:65:6c:00:5c:c8:49:d1:
b1:0d:82:91:02:67:f0:d2:14:6a:fe:eb:e8:99:52:fe:f2:4f:
4d:8e:b7:02:93:c4:6c:c3:cb:73:3f:74:13:ed:17:ff:28:dc:
d9:f7:cd:07:1e:24:78:04:f7:96:d1:5a:4b:ac:34:cb:a6:10:
64:4a:f2:c1:c7:2c:56:84:df:86:46:a4:1d:75:c5:20:58:a8:
1a:39:9f:d3:16:8f:8f:06:f9:27:e0:b0:d7:d5:2c:b1:94:89:
d9:37:26:b9:0a:77:b7:2d:62:62:75:61:63:dd:60:7e:58:89:
19:3b:e2:f2
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUb3fc4h9hJc1Ll6ODr6iqxqpkQwkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmY0MjZmMTliYTY3YmM4OWRlNWFlNmRmNDg3YzFjOGMx
ZTc1MmUyNzAeFw0yNjAyMDkxODUwMzdaFw0yNzAyMDgxODU1MzdaMDMxMTAvBgNV
BAMTKDQyQzBCMzA1RjVEMjFDMzI1ODM5OTYxNEMyRDVFRTczNTA3REVDMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGFySY8e9ZJh7LeHVDzSvuwh+b
mWytn35Qy+u/uHrVErrl8vL7KO6GSlYTc1DvWJrvOGX3cdh7wUgUuFMohKxcQ+6R
ejLZWWwIMIUwqWC72dxYh9O0xW9f0e2WArdfan9d2nEVKw1G+pch28Vx5qE58tT4
OyQK/BhUkyIDMbvE6xusPZ/eguFihXeiVyk6hgfdgCchzs3oSaaEYR0sZXbwARl9
ZaJP5K6TIHwe7iC5CuwZRIC3GsTlacZuszBlRA5vZAnZ5GkpotfAdqyo47fp7d03
AriLq63utidRnY8r1umJIQmxhZJgtpnrrnbvry92saIcq0jsr1OITbVw4mU5AgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUQsCzBfXSHDJYOZYUwtXuc1B97BgwHwYDVR0j
BBgwFoAU/0JvGbpnvIneWubfSHwcjB51LicwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDY4YjA4MWUtYmE5My00NjVmLTliNmUtN2ZiZDYzYmRm
ZjYzLzAvRkY0MjZGMTlCQTY3QkM4OURFNUFFNkRGNDg3QzFDOEMxRTc1MkUyNy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL18wSnZHYnBudkluZVd1YmZTSHdjakI1
MUxpYy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDY4YjA4MWUt
YmE5My00NjVmLTliNmUtN2ZiZDYzYmRmZjYzLzAvMzI2MTMxMzMzYTY0NjEzMDM1
M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzMTM0MzkzNDMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA
KhPaBTANBgkqhkiG9w0BAQsFAAOCAQEAHh6A7/eojZRjqnmSx5i7Re4Y+k6oSY1l
+7TzlUy8C2sHot0re0dksCQkaftjJeHPtulXoJH4M8QCjMjJ+rbIfb4b2D4jvyIw
uRGPW8APyL2n/0qUeX3MTId7YRklx7ODPTKbEgIS/cZrtk2kXO9pFMg4jhWulL4L
kqlBf5zQeGruXVG1iwq5Y0plbABcyEnRsQ2CkQJn8NIUav7r6JlS/vJPTY63ApPE
bMPLcz90E+0X/yjc2ffNBx4keAT3ltFaS6w0y6YQZErywccsVoTfhkakHXXFIFio
Gjmf0xaPjwb5J+Cw19UssZSJ2TcmuQp3ty1iYnVhY91gfliJGTvi8g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:42:13 2026 by rpki-client