Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a35303a3a2f34342d3438203d3e20323036353430.roa
File: 326130663a316363353a35303a3a2f34342d3438203d3e20323036353430.roa (raw, json)
Hash identifier: OcD36U8XRUQJYg7sYV+zfteqM6vmsKMabX8mR7Sr0tk=
Subject key identifier: 13:E6:11:35:72:0A:BF:C4:CC:79:2F:93:3E:9A:80:FF:28:B6:3D:C3
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 6B2E02858272C9DB24A8756704FCE94E6F4C5C22
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a35303a3a2f34342d3438203d3e20323036353430.roa
Signing time: Tue 02 Jun 2026 12:18:13 +0000
ROA not before: Tue 02 Jun 2026 12:13:13 +0000
ROA not after: Tue 01 Jun 2027 12:18:13 +0000
asID: 206540
IP address blocks: 2a0f:1cc5:50::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:39:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:2e:02:85:82:72:c9:db:24:a8:75:67:04:fc:e9:4e:6f:4c:5c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jun 2 12:13:13 2026 GMT
Not After : Jun 1 12:18:13 2027 GMT
Subject: CN=13E61135720ABFC4CC792F933E9A80FF28B63DC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6d:76:e3:3f:2c:0a:4e:57:d2:7b:fd:eb:ba:
5b:e8:3a:b4:24:46:86:08:eb:33:31:2f:18:23:a5:
70:da:00:02:cd:c0:37:46:03:5d:84:d8:15:f1:56:
33:59:a2:11:b0:be:a3:90:12:75:a4:1d:31:e9:1d:
2f:86:9f:6d:24:3e:9a:c4:8c:fc:d1:26:26:e0:da:
29:49:fe:ff:cc:48:89:56:77:c1:9e:7b:02:41:d5:
52:41:14:a0:37:8d:6f:0b:4e:3e:0e:9a:ab:42:fa:
05:f9:0b:d3:b1:ae:ed:71:88:67:a8:e7:2b:7b:f0:
18:e3:81:75:05:82:2a:52:46:5a:48:fe:79:57:84:
48:0a:1b:0c:10:7e:c7:11:c9:f0:69:57:1e:c4:59:
4c:7c:3c:cb:b1:bb:61:25:57:7d:a6:2f:d5:67:7f:
65:6e:3e:2e:20:81:ee:a9:f1:08:a8:29:6c:9f:90:
0c:a6:67:dd:97:ca:29:13:b6:bb:0e:d3:54:a9:ca:
da:57:d4:94:91:1f:94:4e:b0:ff:28:b0:9c:2d:54:
3d:d7:57:be:a7:b5:bd:92:12:8f:ce:3a:6d:02:d4:
7d:3b:67:11:1f:47:bb:55:b6:af:f0:b4:fd:70:7f:
23:13:cf:a2:72:68:d3:7e:92:b8:94:f5:4a:0a:04:
3d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E6:11:35:72:0A:BF:C4:CC:79:2F:93:3E:9A:80:FF:28:B6:3D:C3
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a35303a3a2f34342d3438203d3e20323036353430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:50::/44
Signature Algorithm: sha256WithRSAEncryption
1d:35:99:06:3c:50:77:bc:1c:f3:67:67:59:2d:14:9d:c8:5b:
31:b4:4d:d4:31:91:9c:eb:a9:59:37:19:85:ed:ea:e9:d3:b1:
3c:22:a3:1b:dc:eb:00:5e:3e:28:32:a8:95:dd:4d:0e:a9:56:
36:c1:54:5f:e1:9d:62:9a:50:19:c6:ea:50:c6:36:e7:7c:3b:
02:c8:e6:80:43:db:d5:f8:3f:f7:27:3f:9d:c4:b4:66:e0:d1:
5e:26:78:6c:f9:42:2d:f0:03:31:9a:64:45:e0:bb:a7:27:a8:
a6:31:10:a7:50:24:1d:50:d8:0c:c6:ab:f1:fc:23:69:1a:ab:
10:d0:25:f7:9f:2d:24:ba:01:7b:65:51:3f:bd:a9:3d:89:91:
65:80:a6:1d:84:57:45:11:e9:96:78:a5:e2:94:ba:22:05:5c:
9e:94:6b:e2:d8:9d:45:bc:dd:ac:9c:4c:5a:94:ba:19:5f:82:
6d:26:ec:a3:8f:c6:36:24:8a:f3:7e:3b:b2:69:91:3f:7c:9b:
79:d1:de:b4:10:e5:d4:e9:ef:3b:cf:9d:24:3d:09:2a:1d:40:
5e:c8:4e:a5:1b:87:f3:a2:63:72:28:d5:35:1f:18:90:ac:fe:
50:d4:9e:c5:6e:8a:5d:9a:c8:7f:33:2d:ae:e7:67:da:4a:c3:
fb:ef:e0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:34:50 2026 by rpki-client