Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a323930303a3a2f34302d3438203d3e20323030303738.roa
File: 326130663a316363353a323930303a3a2f34302d3438203d3e20323030303738.roa (raw, json)
Hash identifier: sFSbcOhESvk+nBhnjAi6W18zqpR67wH8mcnSvl/DnjA=
Subject key identifier: AF:71:EF:79:17:5D:35:54:BE:87:DF:3C:F0:01:93:C6:ED:52:BD:FA
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 1CBDC0F263A760DB66CCB9A09AFB52044766A27B
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a323930303a3a2f34302d3438203d3e20323030303738.roa
Signing time: Tue 02 Jun 2026 12:18:14 +0000
ROA not before: Tue 02 Jun 2026 12:13:14 +0000
ROA not after: Tue 01 Jun 2027 12:18:14 +0000
asID: 200078
IP address blocks: 2a0f:1cc5:2900::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:39:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:bd:c0:f2:63:a7:60:db:66:cc:b9:a0:9a:fb:52:04:47:66:a2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jun 2 12:13:14 2026 GMT
Not After : Jun 1 12:18:14 2027 GMT
Subject: CN=AF71EF79175D3554BE87DF3CF00193C6ED52BDFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c8:83:2e:14:a6:76:27:88:75:34:f4:0e:8d:
9c:0b:dc:7d:89:fa:05:6f:80:1e:78:fe:7e:f4:76:
ec:6b:69:14:31:49:80:b3:4d:ca:d1:e1:69:02:40:
eb:f9:7e:ab:96:54:4d:67:0d:4a:98:b7:3e:1c:cb:
55:1a:38:82:c1:57:2a:1a:b8:16:33:3d:4f:1e:43:
47:7d:45:15:38:bb:32:10:65:ef:29:f2:68:5f:17:
2d:e8:1d:e3:5a:30:7f:a9:09:8c:1c:1c:a3:d9:6a:
92:e9:29:98:33:7e:2a:1c:fc:00:58:2f:85:27:6a:
80:d8:21:3c:3b:06:64:3f:8d:f7:56:02:a3:4f:cf:
67:20:47:85:85:d7:d6:85:75:3e:ce:cc:03:86:ed:
7c:2c:e8:2e:d3:1d:f9:28:6c:81:91:29:17:da:62:
62:74:79:02:86:e8:ba:4e:a9:e1:54:ea:d9:53:d3:
84:06:88:3b:1d:44:e5:a3:de:04:3a:eb:79:13:ea:
04:f2:ae:e2:92:2a:cf:93:1e:c1:3d:9c:92:9f:35:
23:b8:1d:cb:f2:7c:4a:36:5f:2f:3b:b3:53:9d:de:
6f:2c:3a:34:bd:56:4d:a3:c4:25:05:52:d3:0b:de:
12:80:9e:d7:eb:d0:4a:c6:1d:6b:54:e1:ea:e9:52:
02:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:71:EF:79:17:5D:35:54:BE:87:DF:3C:F0:01:93:C6:ED:52:BD:FA
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a323930303a3a2f34302d3438203d3e20323030303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:2900::/40
Signature Algorithm: sha256WithRSAEncryption
48:36:ef:7d:f8:8c:4f:93:ae:69:9e:20:3e:ae:96:10:5a:ca:
18:64:34:dc:4f:44:64:68:80:3d:be:01:89:a3:90:c4:80:0a:
f2:d2:6d:40:db:17:45:b7:3f:c1:74:0d:4b:e9:02:6c:05:93:
28:9b:5a:f0:3f:5f:4a:44:1c:c2:fb:9b:e5:c8:77:81:a9:76:
3d:4c:19:13:6a:f9:3b:79:ad:e9:0f:ff:c0:0a:25:27:8c:54:
5d:cd:39:5d:cb:12:d4:3a:51:48:87:bd:1e:f2:e8:fc:59:f9:
e9:6f:67:b2:52:f3:94:a6:ad:be:63:ef:74:72:f2:ca:e7:40:
b6:e5:97:1d:19:40:98:73:6b:54:54:98:80:67:98:11:ec:57:
42:41:58:3e:04:9a:9c:e9:50:98:68:82:bc:cc:84:a8:63:36:
b9:0a:ff:8c:9c:ac:c2:cb:0e:4d:74:5a:cd:6e:c2:15:54:80:
a8:46:a2:17:8a:8d:dc:80:c6:c0:55:98:66:60:dd:4f:40:dd:
13:6f:63:fb:1e:07:e7:0b:03:ab:a3:58:a5:16:93:71:ef:dc:
26:cb:c1:cf:ad:cb:ed:10:c8:7a:fc:2d:8d:bb:b9:34:0f:57:
d5:28:ce:3b:59:ec:b2:ea:0d:63:98:df:7d:82:49:6f:e7:4d:
a4:41:e6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:39:43 2026 by rpki-client