Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363303a3a2f33322d3438203d3e203434333234.roa
File: 326130663a316363303a3a2f33322d3438203d3e203434333234.roa (raw, json)
Hash identifier: OQYQ56G/w88d1A4QFiWCGj0wnFaG8A5kRizDgermpIY=
Subject key identifier: 6C:5E:BD:A9:15:F6:0A:2E:42:C0:B1:30:73:5A:AC:8A:45:B8:4B:7E
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 56BB9DE27CB555E3595D9515DCF22FF3E6787748
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363303a3a2f33322d3438203d3e203434333234.roa
Signing time: Tue 02 Jun 2026 12:18:07 +0000
ROA not before: Tue 02 Jun 2026 12:13:07 +0000
ROA not after: Tue 01 Jun 2027 12:18:07 +0000
asID: 44324
IP address blocks: 2a0f:1cc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:39:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:bb:9d:e2:7c:b5:55:e3:59:5d:95:15:dc:f2:2f:f3:e6:78:77:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jun 2 12:13:07 2026 GMT
Not After : Jun 1 12:18:07 2027 GMT
Subject: CN=6C5EBDA915F60A2E42C0B130735AAC8A45B84B7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fe:24:78:01:ee:16:fa:c3:7c:0c:6b:14:1b:
2b:35:f7:f7:10:6b:b3:42:94:4a:36:69:2e:49:43:
7a:72:f8:88:a8:06:e9:7c:63:08:dd:65:3a:72:1a:
6d:69:98:cb:8e:9f:cf:74:67:37:ff:6d:fd:1f:32:
94:db:c8:76:b9:e4:12:6a:30:43:74:e2:ec:c3:28:
71:cf:2f:0f:35:2a:b4:ae:91:d3:ac:4d:e1:d1:d5:
fb:6f:bf:46:7c:76:6d:a6:e5:df:96:f2:9f:19:37:
3d:74:3f:7b:e1:7f:6d:fa:53:b2:67:d8:10:06:53:
97:aa:a9:0c:17:8f:a5:af:3f:b3:95:2a:81:fa:de:
03:a6:ef:05:c5:f6:8f:14:69:a5:ec:10:15:bd:38:
6b:d8:db:ba:b6:89:a8:a8:45:e2:1c:e2:2d:1b:de:
8f:b0:75:74:f3:14:7f:25:c6:da:a8:1a:20:02:5e:
bd:f5:e1:c5:68:2c:c2:7d:2e:e3:8d:2e:2f:ea:9c:
b9:ec:d1:8c:2c:6d:bc:4c:95:fe:66:aa:37:2a:ae:
27:b0:8e:1c:70:e2:09:14:f1:fe:25:5a:d3:6b:e5:
de:0d:1a:bf:e5:1e:aa:5a:ec:17:b3:99:ee:32:fa:
c4:a8:8b:13:5f:7b:eb:fe:d4:8f:11:c9:a1:0d:12:
52:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5E:BD:A9:15:F6:0A:2E:42:C0:B1:30:73:5A:AC:8A:45:B8:4B:7E
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363303a3a2f33322d3438203d3e203434333234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc0::/32
Signature Algorithm: sha256WithRSAEncryption
79:f4:79:c6:c5:55:98:c6:02:0d:ba:6c:d7:08:94:47:88:fe:
88:56:e5:89:cb:f8:39:5f:f4:81:40:4b:cc:66:ec:d4:3e:d4:
41:a1:24:db:8c:6b:90:4f:d6:81:77:32:2e:14:f0:73:20:02:
2f:5b:88:40:d5:ee:d2:4b:64:37:57:21:e8:a7:0b:2e:8f:64:
71:96:24:f4:13:d5:6f:ca:30:64:5e:95:51:14:8f:7d:a2:d8:
8f:0d:f1:3a:d2:7d:f3:11:12:97:8c:32:52:b9:55:3b:c7:9e:
65:8f:50:b2:16:32:95:c2:31:20:cf:7c:2c:cf:f1:89:7d:6c:
73:d1:a1:d6:b8:a8:00:61:61:56:66:2b:84:1b:18:aa:70:60:
96:ef:1a:05:11:01:0b:f8:14:ea:71:3a:0e:38:f4:c4:ce:38:
05:7a:c3:8d:b5:3f:d2:3d:76:c3:c0:2d:84:21:c9:8c:aa:78:
4b:61:b3:76:5a:3d:cd:cb:87:42:63:39:f1:a0:84:ad:71:fd:
6f:9b:b0:6a:fd:5c:c8:fc:12:53:f1:2f:5c:9c:c6:ee:4f:e9:
3f:8b:8f:03:91:27:9e:f9:f9:3a:b9:e5:bc:f0:ed:b2:d6:69:
65:b6:42:33:f9:de:4d:e2:82:6b:25:18:b4:ea:e4:89:b6:ba:
19:0a:90:18
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVrud4ny1VeNZXZUV3PIv8+Z4d0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWJlMjQwMDIxYTI4N2YyOTg5NzNkOWVhMjhkZmM4MDcz
NWZkNTgwMDAeFw0yNjA2MDIxMjEzMDdaFw0yNzA2MDExMjE4MDdaMDMxMTAvBgNV
BAMTKDZDNUVCREE5MTVGNjBBMkU0MkMwQjEzMDczNUFBQzhBNDVCODRCN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX/iR4Ae4W+sN8DGsUGys19/cQ
a7NClEo2aS5JQ3py+IioBul8YwjdZTpyGm1pmMuOn890Zzf/bf0fMpTbyHa55BJq
MEN04uzDKHHPLw81KrSukdOsTeHR1ftvv0Z8dm2m5d+W8p8ZNz10P3vhf236U7Jn
2BAGU5eqqQwXj6WvP7OVKoH63gOm7wXF9o8UaaXsEBW9OGvY27q2iaioReIc4i0b
3o+wdXTzFH8lxtqoGiACXr314cVoLMJ9LuONLi/qnLns0YwsbbxMlf5mqjcqriew
jhxw4gkU8f4lWtNr5d4NGr/lHqpa7Bezme4y+sSoixNfe+v+1I8RyaENElKFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUbF69qRX2Ci5CwLEwc1qsikW4S34wHwYDVR0j
BBgwFoAUG+JAAhoofymJc9nqKN/IBzX9WAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0
ZjBlLzAvMUJFMjQwMDIxQTI4N0YyOTg5NzNEOUVBMjhERkM4MDczNUZENTgwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ctSkFBaG9vZnltSmM5bnFLTl9JQnpY
OVdBQS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt
M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzMw
M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzQzNDMzMzIzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoP
HMAwDQYJKoZIhvcNAQELBQADggEBAHn0ecbFVZjGAg26bNcIlEeI/ohW5YnL+Dlf
9IFAS8xm7NQ+1EGhJNuMa5BP1oF3Mi4U8HMgAi9biEDV7tJLZDdXIeinCy6PZHGW
JPQT1W/KMGRelVEUj32i2I8N8TrSffMREpeMMlK5VTvHnmWPULIWMpXCMSDPfCzP
8Yl9bHPRoda4qABhYVZmK4QbGKpwYJbvGgURAQv4FOpxOg449MTOOAV6w421P9I9
dsPALYQhyYyqeEths3ZaPc3Lh0JjOfGghK1x/W+bsGr9XMj8ElPxL1ycxu5P6T+L
jwORJ575+Tq55bzw7bLWaWW2QjP53k3igmslGLTq5Im2uhkKkBg=
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:58:35 2026 by rpki-client