Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa
File: 326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa (raw, json)
Hash identifier: +arYAcKykAZ30iQJh3GzJ23ClqESKj4I1jBBcbR7zQY=
Subject key identifier: 99:F1:16:78:F2:07:B5:9D:B0:17:FC:24:A7:FA:3D:7C:96:C6:11:E0
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 26EC2586961E853708D151F2E61395C095785E19
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa
Signing time: Tue 02 Jun 2026 12:18:22 +0000
ROA not before: Tue 02 Jun 2026 12:13:22 +0000
ROA not after: Tue 01 Jun 2027 12:18:22 +0000
asID: 210352
IP address blocks: 2a0f:1cc5:f00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:39:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:ec:25:86:96:1e:85:37:08:d1:51:f2:e6:13:95:c0:95:78:5e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jun 2 12:13:22 2026 GMT
Not After : Jun 1 12:18:22 2027 GMT
Subject: CN=99F11678F207B59DB017FC24A7FA3D7C96C611E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3c:81:00:e2:97:16:18:3e:b7:af:2a:55:0e:
fc:43:2f:1f:55:f3:39:92:96:c2:27:f0:a8:86:50:
b9:6a:9b:4b:05:72:bd:7f:bd:a4:a3:83:b9:d7:dc:
7f:30:3c:04:e3:54:94:51:4d:35:11:e5:8a:aa:4b:
e3:ed:c4:0d:25:4a:4d:0c:f5:c2:69:dd:bf:7e:fb:
28:62:ac:9a:5b:d3:13:80:2b:e9:ee:5e:06:29:32:
1b:38:06:5c:91:19:ff:39:07:16:ee:df:dd:fb:f4:
28:92:59:06:4d:f8:ca:2f:ed:a9:dd:0d:d4:a7:f6:
e7:5a:63:59:42:3b:17:4d:75:66:67:25:f6:d9:16:
53:5a:9d:11:a5:06:87:f2:47:2a:26:e5:61:a4:74:
3b:0a:eb:ec:a6:87:60:8d:5a:f9:48:8b:cc:bc:49:
ba:97:30:a0:03:a7:25:e3:5c:61:a0:d5:38:9a:b8:
ab:fa:86:a5:8d:d4:7e:e7:ce:b2:a9:52:18:bd:20:
e2:8f:37:a5:d6:f2:92:c4:ac:aa:11:9e:38:d6:e1:
24:ca:4c:c8:54:f8:e8:a0:70:10:26:b2:93:39:dc:
bf:86:5c:95:ec:df:cb:5a:ae:43:41:e0:ae:a7:1a:
d5:29:e6:f6:27:f6:10:15:72:28:e0:aa:a6:da:72:
91:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F1:16:78:F2:07:B5:9D:B0:17:FC:24:A7:FA:3D:7C:96:C6:11:E0
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:f00::/40
Signature Algorithm: sha256WithRSAEncryption
0b:e6:34:07:e4:4a:4e:87:50:2e:fe:13:7d:d9:6d:ea:33:07:
f0:b2:f8:cc:1a:5b:bf:48:b1:ae:f0:a5:53:04:76:7d:98:51:
90:9c:8d:e6:08:40:29:53:bb:b6:a4:ba:64:e3:e4:95:00:94:
c0:12:24:22:11:a3:64:b0:fb:34:33:1c:34:8a:ff:6a:01:40:
11:c7:66:09:e4:9e:b4:1c:4c:3c:11:af:a0:fd:0b:6c:1b:2e:
20:26:46:08:55:52:d6:3b:ca:34:a2:8d:04:d8:25:c1:5c:59:
aa:11:78:5f:5a:fd:ac:8b:ff:76:3b:f4:92:9e:e2:d6:54:46:
dc:b2:ce:3e:9f:23:16:71:1c:ba:f1:bf:0a:1b:67:b9:54:c3:
60:33:34:cd:0d:34:c2:00:38:a7:eb:ee:78:35:40:ad:ea:08:
1f:cc:d7:a5:d2:10:b8:f1:c9:48:4b:db:6d:1f:c6:f5:95:ab:
85:27:c7:b0:f7:ef:b6:b1:72:22:43:ca:71:15:25:f4:0c:55:
1c:0a:73:68:97:28:d7:43:ea:a8:0e:73:2f:44:1f:50:21:2b:
4f:92:4a:9e:32:8a:94:18:92:5a:fa:9c:ff:fe:d2:94:dd:b1:
63:cb:1c:58:d7:26:f6:83:33:88:7c:fc:34:a8:97:a7:10:70:
1a:e7:14:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:57:22 2026 by rpki-client