Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/326130623a346530343a646561643a3a2f34382d3438203d3e203236393534.roa
File: 326130623a346530343a646561643a3a2f34382d3438203d3e203236393534.roa (raw, json)
Hash identifier: baWQi1OtzFs3EXfopwYbyPRpvtk3lpDNhJaB1/yO3UE=
Subject key identifier: 56:DE:CD:FD:F7:48:81:AC:98:26:5B:44:C7:1F:3F:E6:1D:FD:2F:F1
Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057
Certificate serial: 2F6E5DFC78CC9000F7BA06B46EDDC1613D855807
Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/326130623a346530343a646561643a3a2f34382d3438203d3e203236393534.roa
Signing time: Thu 26 Feb 2026 00:40:54 +0000
ROA not before: Thu 26 Feb 2026 00:35:54 +0000
ROA not after: Thu 25 Feb 2027 00:40:54 +0000
asID: 26954
IP address blocks: 2a0b:4e04:dead::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 05:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:6e:5d:fc:78:cc:90:00:f7:ba:06:b4:6e:dd:c1:61:3d:85:58:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057
Validity
Not Before: Feb 26 00:35:54 2026 GMT
Not After : Feb 25 00:40:54 2027 GMT
Subject: CN=56DECDFDF74881AC98265B44C71F3FE61DFD2FF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:45:65:0d:28:c9:6c:16:84:1f:c9:d6:48:ad:
4e:8e:50:26:09:7a:f4:36:f8:59:59:8a:d6:87:5b:
ff:b2:12:1a:e5:1b:a4:58:d6:f9:56:46:43:26:0b:
fa:96:15:38:b1:91:e6:1a:09:eb:3e:14:80:ef:e2:
e0:1a:44:60:6f:40:bb:c3:c5:b5:f5:5b:30:43:d5:
f3:cb:ee:da:bb:56:df:e4:20:14:de:a2:31:24:fd:
d1:75:53:0b:7c:14:6d:ad:d3:79:5e:aa:8b:c9:c4:
5a:54:62:5f:79:b5:6c:54:72:c3:ad:72:f1:d0:9f:
fe:27:4a:88:c4:43:e2:c1:0d:12:16:5f:4a:28:cf:
91:e7:92:3e:e2:eb:c9:95:ea:4b:55:fe:ed:20:5b:
58:3a:a6:90:27:59:67:0e:d7:77:7a:06:62:c5:ae:
4b:c6:e2:42:ce:74:ef:88:a2:7c:ff:17:5c:42:30:
b0:af:ea:75:b6:ae:ba:c7:80:54:c2:1e:02:c6:9a:
56:13:8f:61:d6:df:32:5c:41:d7:bc:03:a1:ba:6c:
68:5c:4a:b5:9c:3c:d9:d8:fc:27:1a:37:69:3b:67:
fc:7a:fc:67:41:82:72:b4:2b:89:19:1d:98:42:e3:
20:91:88:a6:cd:86:6d:56:e1:cf:f8:88:89:b6:db:
82:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DE:CD:FD:F7:48:81:AC:98:26:5B:44:C7:1F:3F:E6:1D:FD:2F:F1
X509v3 Authority Key Identifier:
keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/326130623a346530343a646561643a3a2f34382d3438203d3e203236393534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e04:dead::/48
Signature Algorithm: sha256WithRSAEncryption
05:6b:ee:1c:ad:fc:69:00:ba:7d:eb:dd:ae:9e:98:37:b0:ce:
3c:f6:df:51:65:3a:a8:18:d2:d6:31:b9:68:89:17:b6:57:a6:
11:77:8d:dc:5b:f4:b5:ea:c3:ef:73:f0:0f:04:97:fe:19:da:
e6:fc:c4:23:4c:27:03:ad:ea:c1:f6:52:34:9d:10:f1:3d:b3:
6c:47:ef:1d:f2:90:8d:3a:c7:f8:c1:8a:2e:f7:28:d6:57:d9:
58:3e:03:1a:d7:86:cc:72:4b:05:1d:67:0d:fb:5d:d1:03:35:
a6:f9:9a:5e:5e:ca:cd:16:7f:ca:7c:92:68:41:9f:22:f4:47:
02:6c:84:3b:cd:bb:44:7e:e4:57:15:30:58:d3:01:60:48:11:
18:fb:06:c7:1a:0e:ee:8c:6c:cf:06:3e:e0:f6:e2:79:45:cc:
c4:aa:75:72:42:06:89:35:f0:04:fb:c8:ac:7a:50:12:f8:5e:
79:20:45:9e:75:77:ff:fd:00:0b:76:68:ee:9c:80:0f:b6:83:
78:1b:34:68:50:8b:80:91:1a:38:75:82:6d:64:4e:27:e0:aa:
95:a8:5d:0c:3c:0d:cf:09:e1:a7:0b:71:ec:92:18:16:be:48:
07:76:d9:65:21:9e:ea:b5:58:bd:d8:68:12:72:f3:f4:2f:d4:
ca:35:14:90
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUL25d/HjMkAD3uga0bt3BYT2FWAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi
ZjNhODA1NzAeFw0yNjAyMjYwMDM1NTRaFw0yNzAyMjUwMDQwNTRaMDMxMTAvBgNV
BAMTKDU2REVDREZERjc0ODgxQUM5ODI2NUI0NEM3MUYzRkU2MURGRDJGRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqRWUNKMlsFoQfydZIrU6OUCYJ
evQ2+FlZitaHW/+yEhrlG6RY1vlWRkMmC/qWFTixkeYaCes+FIDv4uAaRGBvQLvD
xbX1WzBD1fPL7tq7Vt/kIBTeojEk/dF1Uwt8FG2t03leqovJxFpUYl95tWxUcsOt
cvHQn/4nSojEQ+LBDRIWX0ooz5Hnkj7i68mV6ktV/u0gW1g6ppAnWWcO13d6BmLF
rkvG4kLOdO+Ionz/F1xCMLCv6nW2rrrHgFTCHgLGmlYTj2HW3zJcQde8A6G6bGhc
SrWcPNnY/CcaN2k7Z/x6/GdBgnK0K4kZHZhC4yCRiKbNhm1W4c/4iIm224IdAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUVt7N/fdIgayYJltExx8/5h39L/EwHwYDVR0j
BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx
NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4
NmdGYy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEt
OGJhNS00NzlmLWEyMjktMGFiNzBlNDgxNWJiLzAvMzI2MTMwNjIzYTM0NjUzMDM0
M2E2NDY1NjE2NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzOTM1MzQucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqC04E3q0wDQYJKoZIhvcNAQELBQADggEBAAVr7hyt/GkAun3r3a6e
mDewzjz231FlOqgY0tYxuWiJF7ZXphF3jdxb9LXqw+9z8A8El/4Z2ub8xCNMJwOt
6sH2UjSdEPE9s2xH7x3ykI06x/jBii73KNZX2Vg+AxrXhsxySwUdZw37XdEDNab5
ml5eys0Wf8p8kmhBnyL0RwJshDvNu0R+5FcVMFjTAWBIERj7BscaDu6MbM8GPuD2
4nlFzMSqdXJCBok18AT7yKx6UBL4XnkgRZ51d//9AAt2aO6cgA+2g3gbNGhQi4CR
Gjh1gm1kTifgqpWoXQw8Dc8J4acLceySGBa+SAd22WUhnuq1WL3YaBJy8/Qv1Mo1
FJA=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:18:49 2026 by rpki-client