Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3330303a3a2f34302d3438203d3e2030.roa
File: 326130663a316363353a3330303a3a2f34302d3438203d3e2030.roa (raw, json)
Hash identifier: 9I5xcVIJDDu0hoqCuM53RkYeZwXvG7bPT6+3h2Pi9AM=
Subject key identifier: CB:2E:FD:0B:D1:A7:A6:D2:A1:C9:FE:60:9B:31:83:B7:53:E8:84:99
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 11395B6DE1575A239872072B947A7C3AEA71E563
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3330303a3a2f34302d3438203d3e2030.roa
Signing time: Thu 29 Oct 2026 10:54:37 +0000
ROA not before: Thu 29 Oct 2026 10:49:37 +0000
ROA not after: Thu 28 Oct 2027 10:54:37 +0000
asID: 0
IP address blocks: 2a0f:1cc5:300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 16:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:39:5b:6d:e1:57:5a:23:98:72:07:2b:94:7a:7c:3a:ea:71:e5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Oct 29 10:49:37 2026 GMT
Not After : Oct 28 10:54:37 2027 GMT
Subject: CN=CB2EFD0BD1A7A6D2A1C9FE609B3183B753E88499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:da:5b:ba:23:7b:c3:92:79:1b:7e:60:93:
aa:37:9f:6e:2a:02:94:63:c3:07:a7:fc:8e:89:f4:
e7:a6:56:11:f6:17:b9:56:0d:88:82:45:83:ee:51:
78:cb:ca:60:5e:91:b6:69:03:f1:84:7c:cc:34:9b:
4f:b3:20:f0:ec:e4:e3:1f:c9:99:65:38:a1:5f:5f:
d5:4d:8a:e0:5d:95:03:7b:af:b5:48:ff:6b:07:01:
32:e3:48:6e:2a:f1:dc:ce:a1:3d:da:ef:4a:44:be:
2b:fb:b8:91:81:6c:f7:d9:53:b3:58:38:ad:fc:66:
51:e0:6e:5a:52:9e:8d:09:a2:de:77:f3:f9:d3:86:
3e:a0:36:1b:2d:1d:e5:ab:41:b6:b1:0d:2d:c2:6e:
0c:38:2a:31:cd:f5:63:98:ff:41:80:fb:39:83:b3:
42:de:7e:1e:1c:59:71:80:11:09:c3:c2:ea:6d:d0:
eb:db:94:61:a1:0e:14:57:d5:74:f1:61:53:2c:ba:
4a:41:ac:f3:80:22:e9:4e:bb:08:24:e6:5e:8a:c8:
35:57:3b:1e:ee:3c:6f:9f:ef:09:21:62:38:42:3f:
17:b5:3d:1e:8b:74:22:1a:37:f0:ea:00:f6:a2:6b:
94:a5:b9:db:1d:2a:43:f8:c9:8e:b9:0e:94:de:53:
9e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2E:FD:0B:D1:A7:A6:D2:A1:C9:FE:60:9B:31:83:B7:53:E8:84:99
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3330303a3a2f34302d3438203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:300::/40
Signature Algorithm: sha256WithRSAEncryption
63:e1:36:37:27:de:23:f8:6a:1a:be:9d:d0:11:8a:d1:bf:db:
ab:0d:55:c2:d1:59:78:7e:8f:47:88:71:67:52:68:49:f0:8c:
c1:82:9e:bd:aa:c0:7c:c1:0a:b9:58:5e:7f:d4:6a:18:25:95:
56:fd:67:b3:ab:30:12:d1:b5:06:7c:82:90:b2:d8:68:76:e9:
41:15:81:f0:95:e9:f2:e2:54:14:e4:df:34:e3:e3:ba:c2:5d:
d5:64:14:66:48:f9:4c:15:f9:6b:e6:86:1a:52:46:93:35:a2:
70:27:3e:fb:b3:34:dc:b2:d8:16:96:b4:4e:6d:33:d2:be:c6:
2c:0c:85:ba:99:33:9b:33:a3:20:38:9d:0a:aa:81:0d:3c:af:
d2:ce:fa:b0:62:93:c3:b0:20:17:97:71:14:0a:40:42:ee:87:
b0:63:3e:93:71:de:49:2f:77:3d:52:12:a1:49:fd:42:06:a8:
f2:3e:87:48:6b:7c:46:c5:98:0f:36:47:28:53:05:fc:52:e8:
9d:2e:9f:91:7b:95:96:9d:d2:e2:34:03:9e:ae:74:bb:52:80:
6b:bb:85:1d:41:c3:c4:7b:9d:5d:23:72:65:bd:21:ac:94:ff:
78:36:da:4b:15:d4:38:c1:08:a8:a5:1b:82:ca:66:b3:74:88:
26:55:d3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:09:39 2026 by rpki-client