Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a353830303a3a2f34302d3438203d3e20323130373733.roa
File: 326130663a316363353a353830303a3a2f34302d3438203d3e20323130373733.roa (raw, json)
Hash identifier: pfzgev1YajHBag74VecsbRWlek4+Q2TnclXg2yH2Roc=
Subject key identifier: B2:E7:C9:9B:49:85:80:8E:89:3A:18:14:30:F6:C0:59:2F:AB:85:B1
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 760B7413239EADCF37A7AA9956049030D31D6D2D
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a353830303a3a2f34302d3438203d3e20323130373733.roa
Signing time: Sat 05 Sep 2026 04:50:48 +0000
ROA not before: Sat 05 Sep 2026 04:45:48 +0000
ROA not after: Sat 04 Sep 2027 04:50:48 +0000
asID: 210773
IP address blocks: 2a0f:1cc5:5800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:0b:74:13:23:9e:ad:cf:37:a7:aa:99:56:04:90:30:d3:1d:6d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Sep 5 04:45:48 2026 GMT
Not After : Sep 4 04:50:48 2027 GMT
Subject: CN=B2E7C99B4985808E893A181430F6C0592FAB85B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:22:e0:a6:58:6e:69:04:85:34:0e:43:85:
d5:f6:d9:90:06:e5:25:95:37:7c:60:65:11:fb:aa:
62:99:2c:59:76:9a:16:e6:ce:40:5f:3c:0b:af:21:
72:ab:43:16:14:87:3e:a0:5a:fd:6e:91:7b:d0:b7:
cf:51:6d:67:f0:b4:ba:5c:5a:cd:fa:a6:09:2d:d6:
89:3d:bc:4b:a3:3c:f1:ac:06:59:dd:99:c3:1a:ba:
1a:04:e1:85:0a:e7:61:92:fe:e2:ca:ac:d3:11:33:
6b:96:40:db:83:c0:de:db:14:56:d1:13:25:3a:68:
02:7a:00:3f:9b:af:25:fe:9a:f1:a6:f6:d6:d6:8c:
86:4b:42:57:7e:83:73:3b:f5:ca:bc:c0:bf:86:ba:
4b:5e:d7:14:dc:fe:c8:a4:7a:00:b9:a8:93:62:35:
0b:cc:8b:b0:de:37:60:fb:8b:d1:28:70:ec:b9:02:
ee:10:56:90:94:be:20:54:7d:7a:65:89:99:00:53:
1e:2c:03:30:a8:7e:18:f6:c6:1b:63:ed:ae:c6:bb:
df:b1:92:e7:0a:79:b1:54:86:8f:5f:27:3f:fa:24:
a0:be:16:04:23:96:1e:9a:10:2b:f7:66:3b:3e:4a:
6d:a8:1d:37:94:c0:d3:4a:b2:5a:b8:7f:62:82:61:
30:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E7:C9:9B:49:85:80:8E:89:3A:18:14:30:F6:C0:59:2F:AB:85:B1
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a353830303a3a2f34302d3438203d3e20323130373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:5800::/40
Signature Algorithm: sha256WithRSAEncryption
51:b2:df:48:5e:6c:e2:db:e3:20:99:ed:5d:7c:48:11:39:26:
c1:31:a3:4c:53:35:7e:17:89:57:2f:10:0b:ab:59:e9:5b:df:
d6:26:8b:c5:ff:64:e5:0b:9b:22:43:77:17:d3:57:04:35:af:
fe:7c:62:4b:17:a7:8d:8d:6a:41:c7:98:95:85:f3:e0:ed:a9:
12:f0:2d:b8:cb:6e:32:a7:4a:d0:e8:7e:6a:55:5a:f2:09:54:
f6:ab:86:b2:67:76:97:e5:fd:c4:e1:80:fb:d6:74:d8:4e:a1:
c6:68:f7:07:ff:58:97:57:a5:e2:fe:4e:9e:a8:8a:8f:47:8d:
a0:b7:0f:16:be:42:4e:f5:91:6e:0c:f4:a9:88:e9:5f:e6:49:
33:41:ed:bf:41:e8:47:0b:c6:41:a0:dc:60:9d:6c:89:3f:79:
78:83:40:f7:c1:41:0d:90:df:cb:fb:3a:6e:a1:ce:ec:55:fa:
18:c6:ff:d5:c6:b5:6a:e7:77:13:10:ae:1b:f8:59:66:a7:64:
26:12:bd:34:89:2d:e8:b4:63:a4:9d:16:07:05:a1:2c:83:9d:
07:51:7a:44:a4:b4:c8:e5:e3:4a:0b:a4:75:21:16:aa:87:2b:
a7:d6:1c:63:91:29:c2:8f:45:07:9e:20:8d:f2:a7:b1:ea:e3:
b3:77:60:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:53:12 2026 by rpki-client