Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a653430303a3a2f33322d3332203d3e203530353830.roa
File: 326131333a653430303a3a2f33322d3332203d3e203530353830.roa (raw, json)
Hash identifier: er+oPQhykc6ayg3rrrwvJra3JupeKvjV54bYH7L2tTg=
Subject key identifier: D1:77:AB:DD:26:93:E7:53:13:1A:4F:ED:33:49:6A:16:64:81:5A:AB
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 1FEE4AC2EDBE0F8EC3C4B9C7A04ADBF406599551
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a653430303a3a2f33322d3332203d3e203530353830.roa
Signing time: Mon 09 Feb 2026 18:55:38 +0000
ROA not before: Mon 09 Feb 2026 18:50:38 +0000
ROA not after: Mon 08 Feb 2027 18:55:38 +0000
asID: 50580
IP address blocks: 2a13:e400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:ee:4a:c2:ed:be:0f:8e:c3:c4:b9:c7:a0:4a:db:f4:06:59:95:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Feb 9 18:50:38 2026 GMT
Not After : Feb 8 18:55:38 2027 GMT
Subject: CN=D177ABDD2693E753131A4FED33496A1664815AAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bb:ae:5f:ea:73:03:80:a1:51:55:2e:5f:49:
8d:c9:ba:ba:d2:d4:f8:f3:cf:a2:8c:e2:82:b5:f8:
14:f3:be:f5:cb:97:84:3f:2d:71:ad:fb:ec:6b:f5:
17:08:91:be:85:2f:4e:d0:9c:b7:e7:60:53:91:84:
5b:f5:66:f2:b0:cf:31:22:21:9e:97:97:77:79:29:
cb:8b:10:dd:19:7c:b6:f8:20:38:44:8b:8f:86:15:
9f:62:a8:25:65:cb:fe:62:1f:fe:37:8b:36:74:1b:
54:f1:db:a0:62:76:79:50:ad:7b:13:15:cf:53:3e:
64:c8:a2:e2:0b:03:cc:56:77:22:6d:82:f8:1c:ac:
fc:3d:f3:61:a4:39:38:fa:75:f3:32:bc:73:a4:b5:
e3:93:ff:5c:1a:6f:27:04:40:40:65:70:f0:df:e2:
e7:aa:f2:e8:23:c2:b4:53:4b:f5:8f:3b:7c:3f:3c:
d4:3f:70:65:d2:6b:e1:ff:c4:a5:1a:1f:2f:b0:da:
87:53:ac:9a:80:bd:ff:ef:42:90:f6:73:cc:2a:09:
5a:e1:58:f4:32:1d:e5:23:45:85:71:b2:ff:44:45:
3c:ca:95:0e:12:0f:17:ee:8a:20:23:8a:97:a1:1d:
0a:d3:cb:c8:30:c4:fb:de:b9:16:d5:64:20:50:dc:
96:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:77:AB:DD:26:93:E7:53:13:1A:4F:ED:33:49:6A:16:64:81:5A:AB
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a653430303a3a2f33322d3332203d3e203530353830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e400::/32
Signature Algorithm: sha256WithRSAEncryption
79:a7:86:ea:98:60:0c:8b:f9:eb:c1:4c:3d:5d:75:77:be:a3:
e4:4c:be:c5:73:0b:2c:6a:53:a6:87:03:fc:e6:9a:93:9b:05:
bc:ef:d2:41:c3:81:80:49:0e:1d:cd:1d:cd:71:78:3d:56:5a:
2d:c0:97:5a:79:26:96:e2:6b:4f:21:93:69:99:9a:b5:d2:90:
83:0c:c0:36:01:21:27:70:76:72:cb:7d:32:7c:30:e1:4b:fd:
c2:d7:55:b7:02:a5:b0:17:03:7c:a7:10:42:c4:60:b3:04:d8:
79:a4:4e:71:97:0c:72:a2:0d:c4:83:cb:d3:fb:ed:f9:5c:19:
86:d1:b9:a7:f5:7c:b6:33:a3:9f:c8:96:7f:e8:2e:53:61:b7:
20:30:ca:90:24:ea:9d:c6:09:ff:d7:eb:3d:4f:77:a5:33:8e:
c4:8b:20:0a:9e:ce:d4:a7:58:4c:9f:ab:8e:15:5c:34:d2:ee:
04:9d:52:9e:b9:5b:ec:78:ae:38:7b:3e:f8:3e:c8:c0:85:39:
26:be:fb:37:59:89:21:97:b2:bf:87:03:1c:89:7b:0e:e5:58:
a0:cf:63:1e:8a:68:08:96:dc:21:8d:7d:8b:08:76:e6:fc:1f:
7f:28:38:d1:ce:a4:af:d4:9b:18:d2:4e:b9:d4:03:a2:1c:07:
84:b1:c8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:44 2026 by rpki-client