Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3830303a3a2f34302d3438203d3e20313530323839.roa
File: 326130663a316363353a3830303a3a2f34302d3438203d3e20313530323839.roa (raw, json)
Hash identifier: KiWeFQtAON4fe4IeLOTyMD2/Ds4WLC9JJzEHcQEVRcE=
Subject key identifier: 0F:88:71:28:E8:68:50:C4:9E:62:78:FB:CD:AC:D7:61:4A:7F:9B:06
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 4672BD5DAA4CE164E58A19E11CF1BE2DA4059622
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3830303a3a2f34302d3438203d3e20313530323839.roa
Signing time: Tue 02 Jun 2026 12:18:02 +0000
ROA not before: Tue 02 Jun 2026 12:13:02 +0000
ROA not after: Tue 01 Jun 2027 12:18:02 +0000
asID: 150289
IP address blocks: 2a0f:1cc5:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:39:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:72:bd:5d:aa:4c:e1:64:e5:8a:19:e1:1c:f1:be:2d:a4:05:96:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jun 2 12:13:02 2026 GMT
Not After : Jun 1 12:18:02 2027 GMT
Subject: CN=0F887128E86850C49E6278FBCDACD7614A7F9B06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:95:ad:f8:a2:8a:f9:4b:75:fd:fd:01:16:18:
5d:b1:5b:cc:ba:76:0f:b4:ca:8f:d6:e1:6f:3e:b1:
f4:8a:ea:0b:dc:ee:c4:e8:cd:22:04:d6:ed:9b:72:
32:27:f7:04:5a:f8:e0:ee:2d:7e:d7:51:a3:6b:49:
f2:d8:20:89:22:3c:e5:87:05:36:3a:36:05:94:8f:
bd:75:f0:4d:ba:8d:7f:53:10:a2:36:7f:4b:66:87:
ff:d3:74:e6:61:86:07:aa:a8:58:37:49:d9:83:5f:
a5:0b:05:df:16:57:84:e5:a4:39:58:a7:b8:a3:ce:
ea:c5:21:a2:89:37:12:a0:2c:7b:10:99:d5:5e:d7:
25:87:2d:66:78:73:58:51:f8:9a:54:74:bf:82:26:
05:4a:4d:87:a6:b5:14:5e:2e:8d:36:1e:3f:42:d0:
4c:ab:2f:95:b7:da:c3:5e:86:2e:1e:49:9d:4d:00:
a3:38:36:0c:68:c4:8b:bd:86:37:c9:a5:98:5e:51:
bc:cc:a7:ae:ad:13:c6:02:0a:be:a1:3d:2a:d7:22:
46:4f:20:32:18:64:26:3e:31:72:06:c2:2f:c1:cb:
d9:bb:fd:5f:6b:c3:9d:c5:60:d8:94:48:be:f3:3a:
b7:0c:48:d1:6b:98:c3:6e:6c:2d:cb:18:5f:20:cb:
e8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:88:71:28:E8:68:50:C4:9E:62:78:FB:CD:AC:D7:61:4A:7F:9B:06
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3830303a3a2f34302d3438203d3e20313530323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:800::/40
Signature Algorithm: sha256WithRSAEncryption
79:54:20:4c:cc:5c:ac:4d:05:34:fa:e3:94:22:26:0a:c2:4e:
97:56:d3:70:ec:6e:0e:3d:00:cc:51:f4:b7:65:b6:39:ea:60:
3e:1a:ba:5a:7e:ad:35:5e:b4:ec:e0:94:30:89:7f:34:dd:c7:
f9:cf:af:aa:e6:76:e8:ff:e2:58:41:93:62:89:52:5c:d8:66:
42:62:1e:78:ce:17:a9:32:95:81:5e:4f:4c:4d:80:1c:ac:22:
5d:f7:32:4a:cf:4d:a3:7d:99:73:7d:3d:b6:4b:36:62:89:81:
5c:a2:cd:98:cb:b0:94:80:c4:1b:50:c5:77:01:9a:26:f9:13:
97:ed:f9:88:ad:59:71:c5:da:6d:6e:ef:60:72:b9:89:64:e5:
48:af:69:ae:af:13:b5:a9:da:de:14:f0:3f:d6:46:1d:21:04:
a6:04:03:d1:e0:88:2f:16:96:23:47:bf:dc:4f:e8:50:93:3f:
26:36:dd:d8:83:f3:5c:e0:65:60:df:7e:1c:50:5c:6b:46:9f:
89:9c:39:7d:b4:5d:7f:8c:20:5f:bd:b3:c8:fb:47:0b:27:b5:
80:0b:eb:b4:f8:3e:fc:59:6d:0a:88:ca:ba:db:64:12:d3:64:
05:d0:9c:b4:dd:34:97:94:13:b2:52:8e:53:e7:34:e3:fd:be:
74:a5:2c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:36:26 2026 by rpki-client