Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638373a666630363a3a2f34382d3438203d3e20323138373031.roa
File: 326130613a643638373a666630363a3a2f34382d3438203d3e20323138373031.roa (raw, json)
Hash identifier: 1T45wJGc9qWA/I6HYWiBwXOEkTOAa5L1s8+wvsXsnRY=
Subject key identifier: C4:E8:C8:8D:93:4C:5D:73:41:F0:93:24:B0:F6:14:79:21:ED:FB:03
Certificate issuer: /CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Certificate serial: 389E6C95172892AD33627E4AFC972641BC380279
Authority key identifier: 0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638373a666630363a3a2f34382d3438203d3e20323138373031.roa
Signing time: Thu 10 Sep 2026 13:43:20 +0000
ROA not before: Thu 10 Sep 2026 13:38:20 +0000
ROA not after: Thu 09 Sep 2027 13:43:20 +0000
asID: 218701
IP address blocks: 2a0a:d687:ff06::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 17:32:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:9e:6c:95:17:28:92:ad:33:62:7e:4a:fc:97:26:41:bc:38:02:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Validity
Not Before: Sep 10 13:38:20 2026 GMT
Not After : Sep 9 13:43:20 2027 GMT
Subject: CN=C4E8C88D934C5D7341F09324B0F6147921EDFB03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f7:81:1f:ff:72:25:0b:ff:8d:c6:b4:91:74:
17:01:99:6a:4a:8f:bf:9b:7f:e0:a3:e3:32:cb:09:
9a:5d:41:8f:c8:2c:62:6c:75:a3:96:a1:05:05:c7:
ed:0d:04:33:34:84:44:1d:39:ef:72:54:96:f4:47:
11:eb:74:00:e1:6d:48:54:ee:ff:e5:3b:a4:2d:f5:
91:4d:d3:0c:a5:dd:c3:2b:08:4e:84:50:95:80:8c:
d7:20:35:45:58:24:43:bf:07:69:b7:73:b7:41:be:
d3:96:f6:2b:ca:84:48:40:65:ef:65:a5:4c:b7:4b:
87:0e:89:5f:df:54:4c:8e:6b:27:7c:f0:41:26:03:
60:eb:11:ae:56:ad:43:d5:1f:09:d6:5c:91:9a:d1:
36:36:b7:fb:96:72:61:4b:bf:28:2b:be:c7:e8:a9:
5a:8a:8f:5c:aa:fc:d8:91:ec:d6:0d:cf:2a:3f:75:
87:9e:3f:e6:81:e8:0a:3e:e2:f0:d6:a5:73:e8:3c:
6e:9f:ba:46:93:59:ce:8c:80:98:b4:db:ec:ff:24:
4b:0c:82:68:46:1a:52:58:a2:71:9c:df:61:5b:eb:
4b:a9:24:a9:1d:9c:6d:60:81:1f:a8:23:cc:26:ec:
a2:9f:06:17:51:4a:32:82:4f:12:5b:98:3e:86:fb:
2c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E8:C8:8D:93:4C:5D:73:41:F0:93:24:B0:F6:14:79:21:ED:FB:03
X509v3 Authority Key Identifier:
keyid:0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638373a666630363a3a2f34382d3438203d3e20323138373031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d687:ff06::/48
Signature Algorithm: sha256WithRSAEncryption
28:4d:3d:56:49:f3:fd:2a:cd:5f:13:1c:a9:9d:f2:47:ee:e2:
f1:7d:6e:0d:cc:7c:87:4a:98:6b:24:47:10:13:94:95:db:45:
64:c7:f7:29:9f:4e:21:8b:47:bb:65:10:13:19:40:9d:d0:f4:
c8:13:76:00:16:f3:42:8b:70:77:3f:ac:a3:4b:7c:71:21:21:
38:de:a3:5e:fb:6b:05:f3:bf:af:dc:1f:f2:b1:61:a1:0b:55:
39:f2:83:6f:21:2e:72:c0:98:6f:21:af:8b:8f:4a:76:fe:80:
c1:a6:69:48:54:2c:be:39:d1:05:c4:f9:0f:cd:10:a9:95:ac:
95:07:e5:13:62:4c:03:76:a6:99:2b:7a:47:2f:9b:fb:b0:b7:
4f:19:75:94:6f:d4:cc:0e:d6:e0:da:4f:f3:37:8a:b2:bc:d9:
ec:64:cb:d8:06:66:4c:b0:82:82:6d:cb:77:4e:4a:97:e9:db:
ae:91:28:6a:a5:58:18:a4:bd:eb:65:f5:af:18:87:cb:a3:55:
9a:40:fb:f9:62:09:9a:08:41:ae:a2:6a:00:4b:d6:58:45:2d:
27:d3:4b:1d:f9:b6:7b:89:71:44:0f:38:51:6b:75:41:a6:c4:
96:4c:f3:88:e6:17:62:d7:d4:f1:a7:26:4d:71:08:a8:24:6c:
51:8e:22:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:48:51 2026 by rpki-client