Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3530303a3a2f34302d3438203d3e20323037333137.roa
File: 326130663a316363353a3530303a3a2f34302d3438203d3e20323037333137.roa (raw, json)
Hash identifier: oyAVFNl9jsWJK1BCWwctukK7d9sW88ThI9Sx4lAynJA=
Subject key identifier: 2B:C3:43:22:3D:0C:FD:65:87:04:29:66:07:18:61:A2:0D:76:F4:49
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 495C863D1FF0670D3893F3E8E6097A7162F469AC
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3530303a3a2f34302d3438203d3e20323037333137.roa
Signing time: Tue 02 Jun 2026 12:18:04 +0000
ROA not before: Tue 02 Jun 2026 12:13:04 +0000
ROA not after: Tue 01 Jun 2027 12:18:04 +0000
asID: 207317
IP address blocks: 2a0f:1cc5:500::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:39:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:5c:86:3d:1f:f0:67:0d:38:93:f3:e8:e6:09:7a:71:62:f4:69:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jun 2 12:13:04 2026 GMT
Not After : Jun 1 12:18:04 2027 GMT
Subject: CN=2BC343223D0CFD6587042966071861A20D76F449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:2a:bb:16:04:f6:8e:b9:13:a2:3f:97:da:
b5:ec:ce:35:f9:3e:2e:de:c0:7d:c8:33:49:bf:86:
f5:db:9f:1b:5a:68:54:f1:c2:44:34:f6:c9:99:97:
1c:68:44:eb:f7:4c:6e:78:38:36:1f:fc:bf:d6:c6:
41:34:3f:fe:5c:48:94:23:6f:19:6b:de:ab:c0:d7:
27:45:61:bc:f6:bc:e0:c6:32:fe:fc:47:9b:40:ac:
d8:ea:44:9d:91:9f:04:dc:1c:ec:4a:30:eb:ad:6e:
18:11:fa:b2:fd:bc:3b:d1:a7:5d:07:07:03:4e:54:
d9:01:22:0f:fe:a3:38:73:cb:74:7f:54:59:1d:af:
7e:e8:e0:75:c7:2b:81:8e:c7:5a:59:ae:9d:11:82:
43:55:0c:8c:3a:65:97:7a:13:21:15:bf:b9:3b:82:
7e:e4:0a:a9:8d:de:37:19:19:60:cc:0b:38:e6:90:
9b:fb:c2:9d:bd:bb:ee:dd:e9:2a:38:20:1a:71:00:
1f:7c:cc:8b:5e:cc:24:2a:b2:7c:80:ab:a7:61:c3:
4a:a4:b7:6c:14:ed:8c:be:9c:4d:79:3e:2b:e6:e5:
79:6b:35:e3:aa:78:48:82:79:87:57:2a:a3:fc:a2:
73:eb:f2:ff:7d:e1:39:61:c3:0f:b6:cf:55:40:30:
31:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C3:43:22:3D:0C:FD:65:87:04:29:66:07:18:61:A2:0D:76:F4:49
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3530303a3a2f34302d3438203d3e20323037333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:500::/40
Signature Algorithm: sha256WithRSAEncryption
33:da:60:cb:47:08:5f:02:65:91:b8:b7:de:c1:b8:6b:f6:46:
ab:46:bd:7b:3d:cf:64:40:e1:3a:af:73:db:5e:89:cd:66:2c:
3e:ab:9d:ca:c2:af:f7:74:60:5f:53:e4:57:1b:13:92:39:ab:
de:c2:4b:00:9e:7a:85:72:0e:e4:81:c8:27:39:68:2b:c5:3b:
b5:b3:6c:fd:6c:11:88:dd:13:63:d0:27:86:ed:33:ab:c0:af:
f9:3a:7e:f5:7f:34:8d:03:cc:f7:7b:04:33:11:6f:79:ea:4c:
be:3a:83:f6:e7:4e:41:cb:04:38:1b:2a:11:15:7a:54:99:23:
0e:a6:a3:49:28:f3:4b:cf:a0:72:9c:10:10:cc:9f:38:47:a4:
93:00:51:5b:3b:51:4e:82:8e:8e:ec:7c:3b:ac:7f:a5:63:0f:
56:14:35:73:35:8d:57:68:55:82:14:c5:11:ae:e9:66:bc:a4:
dd:d2:c7:ff:c6:71:18:98:d8:39:75:11:fe:8e:51:46:98:1b:
c3:2d:dd:51:41:cf:34:08:81:2b:03:9d:54:52:e7:7a:6c:93:
86:d2:a9:12:40:d1:66:59:ae:e2:0f:a8:7a:3d:c2:c8:a8:56:
e0:83:c4:de:92:53:f1:f9:45:37:f8:43:c1:fa:d1:62:9f:43:
90:a8:e2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:36:16 2026 by rpki-client