Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS26769.roa
File: AS26769.roa (raw, json)
Hash identifier: m10F71fFodzRfo1lUDB91sddc2sxEfv0GPKpGYSfVy4=
Subject key identifier: 35:A3:4A:B4:D6:5A:54:3B:36:07:98:2E:AB:C7:DC:0F:48:58:CA:21
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 10A83B1C53703474C17B30D271CAE5D48578CA3F
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS26769.roa
Signing time: Tue 10 Feb 2026 08:32:00 +0000
ROA not before: Tue 10 Feb 2026 08:27:00 +0000
ROA not after: Tue 09 Feb 2027 08:32:00 +0000
asID: 26769
IP address blocks: 193.164.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:a8:3b:1c:53:70:34:74:c1:7b:30:d2:71:ca:e5:d4:85:78:ca:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Feb 10 08:27:00 2026 GMT
Not After : Feb 9 08:32:00 2027 GMT
Subject: CN=35A34AB4D65A543B3607982EABC7DC0F4858CA21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2e:27:02:73:72:86:f0:5b:a6:3c:90:48:97:
c7:b5:0b:34:65:d5:a9:00:a7:5a:a3:25:16:ea:2b:
72:d2:48:58:19:3f:04:ff:d2:36:5b:02:15:38:4b:
85:3c:4b:4a:58:26:24:e6:08:35:3c:1f:f7:2f:81:
3f:c2:3e:78:75:68:7b:1e:db:86:20:b8:f5:93:cb:
0f:9d:de:cf:6d:a5:f5:e0:dd:7c:40:1d:25:07:05:
0e:5c:77:87:0d:f3:50:42:69:76:da:f9:45:8b:11:
bc:e5:f3:a2:8b:31:08:d2:56:92:18:6c:88:8c:b6:
ca:f6:11:7e:6d:44:53:f6:f2:1a:ec:f4:5f:8b:68:
ae:ff:ad:05:2a:47:53:a9:f5:33:80:db:03:f0:ea:
13:22:e5:e7:d6:07:5e:d7:90:4a:c3:89:7c:b5:df:
8d:dd:32:22:d0:d5:e9:73:84:17:d7:95:b0:98:dc:
43:68:7b:2c:c9:e5:8d:65:64:1f:9c:93:f7:94:6c:
99:e6:7f:a0:f4:43:4e:12:97:e6:23:b7:8c:8d:8f:
d3:9a:0f:55:35:85:3b:fd:df:1e:60:4f:32:dd:fd:
32:dc:da:1f:ae:ee:1c:75:c4:44:61:69:b2:2f:fb:
89:4c:a9:51:36:f1:45:21:de:65:2a:c6:8d:ff:ac:
22:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A3:4A:B4:D6:5A:54:3B:36:07:98:2E:AB:C7:DC:0F:48:58:CA:21
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS26769.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.1.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:91:2c:b6:42:63:fa:30:61:68:3f:52:d6:12:a4:1a:9b:29:
88:86:e5:2e:1e:02:4a:63:e6:be:23:0d:fa:29:4b:4c:e4:40:
50:5b:3c:d2:b1:de:d5:05:e5:03:98:18:a1:34:23:bc:2f:01:
8d:c9:6b:f3:b1:1f:db:35:27:f3:20:ae:88:cf:02:30:2b:f6:
55:73:a4:b4:5b:9c:d1:e4:d1:5d:e5:bd:e7:ed:4c:da:31:54:
ce:c7:a7:a5:50:cc:27:a2:16:86:32:55:dc:04:f0:03:7a:5e:
4c:0c:80:ea:d6:88:8a:de:95:64:95:c3:01:f6:8f:b1:88:bf:
41:4b:f7:d7:c5:4e:2d:7f:f4:7b:b8:e5:7a:ec:64:63:1e:8b:
f0:a1:c5:77:9e:a2:7c:5a:cf:ef:b3:56:d1:6a:b1:fe:2d:05:
bc:ad:ae:4d:3d:4b:09:cf:05:8e:6d:87:5e:70:5d:27:20:7d:
bb:d6:35:20:ec:5e:a3:cd:d9:31:f6:ca:4d:3f:ec:ea:5a:e2:
76:0d:33:6a:ce:c8:b6:9e:6a:10:79:a0:9d:b4:0a:d8:a5:e2:
d2:86:26:0f:76:79:71:89:6b:d0:05:5e:09:51:41:a0:5c:97:
52:62:e8:1a:82:48:e9:38:b4:9f:41:4f:2b:42:d1:e4:db:0b:
12:09:5e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:03 2026 by rpki-client