Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a333430303a3a2f34302d3438203d3e20323037353239.roa
File: 326130663a316363353a333430303a3a2f34302d3438203d3e20323037353239.roa (raw, json)
Hash identifier: ZraCgsqwWS6MhgmJxR8cPKlsqUJ/fAGNNyOgViu/rys=
Subject key identifier: 13:34:39:68:08:FD:5F:F6:AA:B0:79:70:EA:D1:69:50:CC:D4:51:3B
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 486243981E11BAE0BCA4CBC4FF478A0D56B724F7
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a333430303a3a2f34302d3438203d3e20323037353239.roa
Signing time: Tue 02 Jun 2026 12:18:00 +0000
ROA not before: Tue 02 Jun 2026 12:13:00 +0000
ROA not after: Tue 01 Jun 2027 12:18:00 +0000
asID: 207529
IP address blocks: 2a0f:1cc5:3400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:39:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:62:43:98:1e:11:ba:e0:bc:a4:cb:c4:ff:47:8a:0d:56:b7:24:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jun 2 12:13:00 2026 GMT
Not After : Jun 1 12:18:00 2027 GMT
Subject: CN=1334396808FD5FF6AAB07970EAD16950CCD4513B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8a:ba:33:30:53:fd:ff:bb:19:0c:f1:6e:df:
8d:01:a6:81:3e:e3:5f:cf:c3:18:6d:28:3e:50:56:
0e:9f:83:71:f8:6c:4c:b1:f0:01:1c:48:6d:60:3e:
1a:5b:5e:42:6a:d4:57:42:8d:c3:a1:c5:df:35:fa:
93:eb:b5:ca:4e:fb:76:e0:f9:e2:bc:82:50:e4:03:
aa:69:58:fd:dc:30:a2:a4:61:c0:d7:1b:1e:28:41:
07:75:c8:25:ea:4f:ae:9b:00:80:07:bc:92:61:44:
ae:cb:12:14:19:4e:cd:98:54:f8:ac:12:cf:9f:6e:
5a:88:ce:e4:c7:56:e7:72:2c:40:29:e3:f8:a8:b9:
f9:37:9b:04:31:a2:12:6b:b0:f7:8e:32:5e:b4:2a:
77:aa:2f:2b:e5:c2:52:97:b1:df:fb:a2:c1:b0:ab:
4c:1f:d4:db:a3:b5:58:e3:76:b0:ac:38:2f:4a:4b:
52:ad:ee:c0:1f:23:83:60:e9:c1:90:aa:16:55:c7:
0b:11:d8:65:8c:ee:13:c8:59:97:79:cc:e7:2a:5f:
06:55:f8:de:99:b9:41:95:07:de:09:35:70:c6:e0:
db:93:38:d7:a8:b4:14:ba:9e:1d:05:63:ff:6e:0c:
4b:35:66:02:75:c4:d9:0c:d5:0c:31:6d:01:fa:d9:
90:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:34:39:68:08:FD:5F:F6:AA:B0:79:70:EA:D1:69:50:CC:D4:51:3B
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a333430303a3a2f34302d3438203d3e20323037353239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:3400::/40
Signature Algorithm: sha256WithRSAEncryption
15:eb:73:32:e5:0a:c7:42:46:38:47:08:8a:85:28:e7:5a:42:
30:c7:a1:4b:fc:3d:1d:88:a2:75:61:82:f3:19:0d:f0:82:98:
21:69:d5:9d:ee:a5:8b:60:b6:c8:9c:83:3f:d7:99:d2:85:a5:
13:3e:5f:3e:28:1a:e9:fa:3a:5e:ab:1a:9f:48:05:23:9c:f0:
dd:f9:b6:bf:bf:a2:ef:9a:0a:3b:a5:8c:ed:e9:a6:ce:2a:62:
cf:be:fc:87:f4:ce:95:e1:3b:8b:a5:46:ad:a5:57:06:56:3b:
e4:d4:45:4f:5f:16:26:41:7e:6a:be:90:46:b9:76:62:12:60:
c0:94:e8:8d:f2:0a:da:08:05:0c:f3:b7:aa:0d:fc:42:95:5e:
5e:be:35:1b:42:42:85:e6:fe:ad:18:e5:8e:9b:ce:63:1b:58:
39:92:a6:eb:33:9e:01:25:6c:ce:d7:6f:29:b1:7f:de:37:a0:
04:6a:b3:f9:b1:45:c1:7a:db:03:70:eb:4a:7f:0d:07:0b:59:
ef:b8:dc:a9:83:c7:3e:67:9c:8b:1e:a3:30:f0:12:bc:d9:99:
82:4d:77:66:34:e9:c2:a5:98:a2:f9:0e:32:e6:c5:f6:b5:41:
e6:6a:ae:d0:c0:7a:24:5a:8b:81:8f:87:e8:82:ec:b7:38:58:
11:81:0a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:04:57 2026 by rpki-client