Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638333a3a2f33322d3438203d3e203332313637.roa
File: 326130613a643638333a3a2f33322d3438203d3e203332313637.roa (raw, json)
Hash identifier: Ox6OBsQ7cXBgq/89tt/CcV/gSr4GXiFUyQ7Hq9smyZk=
Subject key identifier: 73:2B:77:80:12:CE:51:B4:57:9F:AE:C1:C3:6E:ED:F0:5F:74:96:5F
Certificate issuer: /CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Certificate serial: 78800DA4D098CB8F9D41EA64314C4C01ED927DCD
Authority key identifier: 0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638333a3a2f33322d3438203d3e203332313637.roa
Signing time: Fri 12 Jun 2026 14:45:20 +0000
ROA not before: Fri 12 Jun 2026 14:40:20 +0000
ROA not after: Fri 11 Jun 2027 14:45:20 +0000
asID: 32167
IP address blocks: 2a0a:d683::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 15:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:80:0d:a4:d0:98:cb:8f:9d:41:ea:64:31:4c:4c:01:ed:92:7d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Validity
Not Before: Jun 12 14:40:20 2026 GMT
Not After : Jun 11 14:45:20 2027 GMT
Subject: CN=732B778012CE51B4579FAEC1C36EEDF05F74965F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:68:d8:17:a9:3a:1c:43:51:ed:f5:7a:58:
29:bd:6c:19:3d:8d:94:c7:42:b1:02:15:7c:67:bc:
35:3a:95:9d:0d:b4:cb:80:b5:ec:30:1d:21:ad:9e:
61:9b:9b:4d:e2:e2:c6:32:22:74:36:74:fb:11:3f:
57:85:f0:c6:b6:c2:86:c1:eb:d7:34:1e:f2:66:7b:
ca:de:81:f1:3b:cf:02:4f:71:32:a3:ba:5e:7f:9f:
64:a6:c1:e5:d4:87:da:d3:cf:f7:8b:8c:38:50:5f:
dc:81:5d:25:d9:f7:ba:43:3d:c6:48:07:e9:67:80:
99:3a:96:c4:36:be:b1:18:5d:29:ec:1b:da:9e:78:
30:40:51:73:eb:4c:d7:a1:c5:02:03:48:0b:d6:41:
ca:63:33:ec:ff:73:cd:97:47:d0:97:c5:68:38:78:
67:44:3c:a9:60:da:c2:14:7f:ce:13:f4:da:b6:11:
84:bb:f7:61:3e:0d:0b:9f:9a:b5:a8:cb:19:38:cb:
b3:2e:96:9d:9e:53:78:07:a4:5f:64:7b:a4:4e:dc:
1a:30:2d:08:b0:15:88:ce:19:18:40:3d:00:f0:0a:
ae:e1:bf:1a:11:e3:ea:69:cc:5a:dd:52:2e:d1:9b:
8f:a5:82:a7:75:66:ae:57:4c:bb:05:d9:b4:d5:ab:
ed:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2B:77:80:12:CE:51:B4:57:9F:AE:C1:C3:6E:ED:F0:5F:74:96:5F
X509v3 Authority Key Identifier:
keyid:0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638333a3a2f33322d3438203d3e203332313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d683::/32
Signature Algorithm: sha256WithRSAEncryption
5c:bf:49:02:7b:89:38:6f:03:85:5a:60:a1:3d:36:50:b0:be:
c6:35:4e:26:ad:e2:e0:fe:f6:f7:62:c0:5d:29:16:d4:92:24:
12:5a:e4:58:b7:79:76:f8:51:cf:3b:31:eb:79:69:0f:eb:ad:
4a:4f:00:e5:c6:9e:cc:dd:de:9b:cf:ca:42:40:61:34:1b:35:
da:ec:df:30:81:27:35:5e:84:c5:79:03:db:4c:b7:b7:b4:8a:
d1:bd:2a:31:61:c7:79:4f:64:24:06:4b:09:87:c9:50:55:1f:
35:21:02:ec:02:81:e9:e1:52:65:b6:e4:bb:54:30:97:ac:fd:
6b:83:9e:65:c5:b8:03:21:95:cc:d1:7e:98:64:66:b4:55:a6:
56:c1:db:8a:7b:d5:ac:a6:0c:9a:c0:8f:fa:44:aa:8f:10:95:
16:77:de:87:3f:21:49:4d:54:95:8d:05:6f:3d:3c:30:cd:35:
ac:2d:6d:02:18:ac:4c:3a:2d:c7:3d:78:4d:b6:3e:1e:e5:fb:
01:36:39:d5:77:0f:4c:89:8e:06:61:8b:79:45:29:38:ba:4b:
29:68:2d:d6:ef:45:d3:9e:4e:d5:3c:db:6c:f3:42:88:6e:fc:
cc:48:52:e0:88:59:37:0f:fd:1d:f1:71:16:b9:56:c1:70:8e:
fd:2a:a7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:04:41 2026 by rpki-client