Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a323330303a3a2f34302d3438203d3e20323031373635.roa
File: 326130663a316363353a323330303a3a2f34302d3438203d3e20323031373635.roa (raw, json)
Hash identifier: 0mufkKNz+35ID25JmWy4iw3ddzarlEtW5ptpwnxBezU=
Subject key identifier: F7:D7:2E:9F:61:D9:D4:DC:24:47:84:87:23:90:5C:25:B6:03:90:66
Certificate issuer: /CN=411e2d411d687bcb4449c3df45beedc041007d94
Certificate serial: 7141EAC373DD1FB7BB9CDEBF85CD2409EB637B6F
Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a323330303a3a2f34302d3438203d3e20323031373635.roa
Signing time: Mon 02 Feb 2026 15:45:26 +0000
ROA not before: Mon 02 Feb 2026 15:40:26 +0000
ROA not after: Mon 01 Feb 2027 15:45:26 +0000
asID: 201765
IP address blocks: 2a0f:1cc5:2300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:41:ea:c3:73:dd:1f:b7:bb:9c:de:bf:85:cd:24:09:eb:63:7b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94
Validity
Not Before: Feb 2 15:40:26 2026 GMT
Not After : Feb 1 15:45:26 2027 GMT
Subject: CN=F7D72E9F61D9D4DC2447848723905C25B6039066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:99:ca:46:97:cf:10:68:33:17:70:27:4a:fe:
4d:03:fd:41:a8:8b:ca:26:ab:9a:f1:8d:4c:51:7a:
18:c2:0d:31:e6:f8:76:03:ec:5c:df:58:92:c7:58:
fd:61:22:1b:ef:b9:35:08:47:3d:eb:5e:6c:b1:fd:
48:51:c4:b0:db:4d:bc:a7:a9:a6:8d:38:c3:3e:56:
1d:cd:32:9c:a5:4b:41:bd:33:27:29:17:71:73:f6:
c9:22:23:1f:4e:29:45:02:8a:39:dc:37:de:79:8c:
fd:c7:93:57:25:7f:27:7d:f4:ae:77:17:b4:47:6a:
ee:62:8e:18:d6:78:97:4c:22:b9:24:a2:8f:ae:ba:
7b:b9:ea:2d:52:be:3a:98:d6:04:94:af:c1:76:aa:
f3:8e:e0:1f:4c:e0:b9:54:c2:e2:60:51:13:82:d0:
ce:75:88:23:1b:fa:c3:88:ff:9b:6b:05:37:64:ca:
98:39:c0:81:72:17:bf:35:70:db:d4:3f:73:9d:a9:
8c:87:76:c4:b3:ad:76:c7:73:b4:ac:c2:39:4c:e9:
66:8a:46:3d:48:81:a1:71:e5:56:7e:06:91:2c:d6:
61:e8:51:6f:11:cb:6c:68:d2:c7:d7:42:cd:4c:c2:
1b:bd:fc:c7:9f:cf:a2:e8:5b:0b:8a:80:5c:1a:18:
ce:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D7:2E:9F:61:D9:D4:DC:24:47:84:87:23:90:5C:25:B6:03:90:66
X509v3 Authority Key Identifier:
keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a323330303a3a2f34302d3438203d3e20323031373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:2300::/40
Signature Algorithm: sha256WithRSAEncryption
11:bb:a9:67:78:18:a0:b0:fc:3a:0e:b4:dd:03:fa:d1:e6:48:
b8:73:f3:d7:a9:e8:c0:8a:44:f4:0d:b8:cf:16:b4:bd:62:fa:
f4:6b:8e:45:72:08:1c:38:96:57:fd:de:ab:b0:4d:cd:d8:64:
b2:c7:d0:7c:a9:4c:f3:20:34:0b:73:ad:bf:3e:c2:08:67:f1:
e3:c9:68:40:a8:59:77:b0:39:63:ff:2d:b7:37:51:3a:13:cc:
da:bd:52:b8:42:b9:15:86:4b:53:ff:34:51:c7:be:f5:79:a8:
33:64:f3:f7:40:20:22:b3:d5:24:48:c6:3f:97:08:f0:28:bd:
8c:63:ea:19:30:5e:74:75:38:73:cf:2e:45:77:ad:8a:86:b2:
53:a7:27:44:80:b8:dd:dd:43:92:db:a6:8b:72:75:c0:26:28:
8e:dc:40:34:31:31:bd:ca:ba:a2:54:2f:de:bf:40:1f:30:e2:
76:b6:c3:21:30:cd:34:80:37:ed:1b:db:87:cf:2f:c3:f7:2e:
76:10:c3:5b:04:c2:38:53:2f:5b:bd:ba:cb:33:fa:4f:36:1b:
b1:d8:9e:36:ed:a0:51:4d:16:8f:78:35:55:b7:73:c6:f1:68:
9e:bf:08:a8:06:eb:d9:3a:fe:99:b7:06:45:71:9a:7b:3a:4b:
f3:f8:f0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:15 2026 by rpki-client