Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a653430353a3a2f33322d3332203d3e20323134393430.roa
File: 326131333a653430353a3a2f33322d3332203d3e20323134393430.roa (raw, json)
Hash identifier: Zjl5KzSbAzkvfaUcwe5cs8ZLZxM+i+5YDJPhsvemvlM=
Subject key identifier: FF:E2:14:F0:E3:50:FC:30:F4:54:2B:B6:59:F0:2B:87:7D:EA:C6:C0
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 405507C3996CFF04BCFB650735EBB46E051013B3
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a653430353a3a2f33322d3332203d3e20323134393430.roa
Signing time: Mon 09 Feb 2026 18:55:38 +0000
ROA not before: Mon 09 Feb 2026 18:50:38 +0000
ROA not after: Mon 08 Feb 2027 18:55:38 +0000
asID: 214940
IP address blocks: 2a13:e405::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:55:07:c3:99:6c:ff:04:bc:fb:65:07:35:eb:b4:6e:05:10:13:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Feb 9 18:50:38 2026 GMT
Not After : Feb 8 18:55:38 2027 GMT
Subject: CN=FFE214F0E350FC30F4542BB659F02B877DEAC6C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:eb:cc:ae:8e:de:84:75:cc:7f:ae:92:d2:
38:5a:45:88:52:98:2d:bf:7e:85:b6:37:69:37:be:
f6:7a:50:c8:45:23:31:a7:a4:ab:a3:fd:3c:fc:37:
c8:29:cb:d7:65:bc:e6:bc:43:60:1a:ce:50:e6:f6:
60:a8:aa:c3:ca:86:ce:23:4c:31:1e:f3:b8:d9:ab:
df:b3:90:51:4c:76:9d:be:f3:0e:5d:32:d3:b6:e8:
cb:90:95:fb:3c:fb:98:84:e8:37:8b:da:b6:b1:1f:
48:bf:62:8e:c6:0e:4c:99:23:4e:2e:a5:ad:86:83:
b4:83:f4:9d:07:86:b8:c7:ed:e7:62:66:32:c8:28:
c4:b7:02:9f:40:4b:31:a4:54:f4:b2:6c:cc:cb:11:
7b:d6:e8:aa:a6:83:cf:b9:cd:88:da:aa:3d:1f:d1:
d0:c8:29:d4:4c:4c:55:5b:45:1e:1f:30:62:ea:c3:
bb:03:d8:9a:70:72:58:70:f6:6e:de:fc:cd:ff:51:
f9:b2:82:8b:4f:e4:b7:72:63:6b:a9:d3:ac:4f:23:
24:91:cc:ef:e4:08:35:a1:9a:6e:20:ea:12:67:35:
5e:46:15:31:af:f4:1d:17:29:c2:e1:73:f5:09:09:
f7:72:17:d2:b3:3d:aa:66:d3:db:c8:6e:f4:b2:e7:
5e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E2:14:F0:E3:50:FC:30:F4:54:2B:B6:59:F0:2B:87:7D:EA:C6:C0
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a653430353a3a2f33322d3332203d3e20323134393430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e405::/32
Signature Algorithm: sha256WithRSAEncryption
14:4a:c0:b9:11:20:b9:b9:4b:b0:e0:a7:6c:63:73:23:8f:79:
1e:68:b5:d6:3c:4f:ca:ae:cf:3a:ea:aa:76:dd:0d:15:02:71:
55:7e:5f:4c:eb:6e:9e:ff:a8:94:4d:e1:47:5b:03:ed:c1:c8:
c2:80:3d:74:d1:e7:f3:9a:ac:6b:57:96:b9:41:e7:cc:73:fb:
33:5d:b3:1f:d2:e6:2f:cd:7f:5c:fc:9f:23:07:34:8a:0e:a8:
e9:05:66:9c:08:c2:50:82:3f:87:81:8f:3f:a8:af:5b:22:5e:
af:7a:fa:c8:bb:2d:3a:1e:5b:80:e5:9c:1c:91:8e:dd:71:44:
4b:f0:14:7f:f8:29:59:d3:69:7e:50:dd:9a:c7:bf:a5:18:63:
fb:47:5d:bb:f1:ec:d8:a1:21:49:37:eb:5d:bd:88:be:3c:52:
a9:87:26:93:cc:4a:9b:04:ec:49:f1:8b:72:ea:59:9f:f8:b8:
3b:68:0b:ed:70:f6:42:13:bf:da:87:ac:9e:03:e4:7a:08:f8:
17:23:79:3f:5b:36:5c:00:53:88:5a:c4:77:ae:58:b8:a6:fa:
82:e5:69:b0:25:eb:d6:dd:52:32:1c:5d:f3:e5:02:e9:1a:b4:
6f:a8:fb:e5:85:dd:4c:96:dc:db:4e:4f:d6:b4:2c:d4:02:99:
0f:ce:a3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:26:16 2026 by rpki-client