Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363313a3a2f33322d3332203d3e20323037393336.roa
File: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (raw, json)
Hash identifier: b5xBss8x50/mTCwdi3YpTgkBRxgxQIEDRJCrw4DZBZw=
Subject key identifier: ED:26:2C:6A:65:B0:22:5E:91:EA:3C:66:DE:90:D6:EA:0A:BF:6E:2C
Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Certificate serial: 650E75A6E3878BC164E54BE155C7DA20F714B37F
Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363313a3a2f33322d3332203d3e20323037393336.roa
Signing time: Sun 01 Mar 2026 05:46:34 +0000
ROA not before: Sun 01 Mar 2026 05:41:34 +0000
ROA not after: Sun 28 Feb 2027 05:46:34 +0000
asID: 207936
IP address blocks: 2a0f:3cc1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl
rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:0e:75:a6:e3:87:8b:c1:64:e5:4b:e1:55:c7:da:20:f7:14:b3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Validity
Not Before: Mar 1 05:41:34 2026 GMT
Not After : Feb 28 05:46:34 2027 GMT
Subject: CN=ED262C6A65B0225E91EA3C66DE90D6EA0ABF6E2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4b:f2:f0:75:ee:3a:68:ac:28:c6:16:96:b5:
4a:93:94:11:a1:8b:4c:d6:b9:62:a5:61:59:ab:5d:
e3:05:e7:cb:67:34:32:ff:57:43:87:71:21:7e:98:
42:a6:20:da:ba:a3:8e:0e:51:45:22:55:20:06:6a:
2d:22:c4:0c:d2:70:f3:d5:4a:ad:fd:08:17:47:e4:
c3:ff:b4:e0:2d:ab:59:43:5a:a5:69:9f:27:12:8c:
32:79:99:cf:8b:5f:4b:d7:79:ba:01:23:ad:93:c1:
32:90:e4:e1:ef:0f:76:f8:04:a1:39:67:db:7a:1d:
5d:8b:97:c7:7c:77:65:d4:7b:26:b0:f6:5b:11:6e:
d3:c8:a2:fe:75:57:c0:1a:8c:b1:8e:56:07:34:8f:
9e:08:aa:f4:00:62:35:5a:6a:cb:1a:4e:62:ae:ed:
c0:e4:b1:bc:87:6d:7f:ab:25:8c:21:f0:73:d7:2f:
ed:22:1b:52:24:ea:7a:90:e4:6d:d1:eb:81:25:c9:
4c:5d:d5:ed:62:03:8a:15:90:dd:02:b7:4c:28:e6:
22:cf:37:29:04:19:86:a3:94:81:fb:6b:74:f3:cd:
02:4b:68:43:12:66:53:0f:e0:50:5e:7f:09:f1:24:
07:b2:87:44:ba:2a:3b:93:b5:d2:f1:dd:aa:46:6b:
c3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:26:2C:6A:65:B0:22:5E:91:EA:3C:66:DE:90:D6:EA:0A:BF:6E:2C
X509v3 Authority Key Identifier:
keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363313a3a2f33322d3332203d3e20323037393336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3cc1::/32
Signature Algorithm: sha256WithRSAEncryption
2a:b1:75:66:6b:03:ad:6c:06:bf:40:8a:02:5b:99:b8:6f:df:
bf:f7:ea:b3:55:49:f8:0b:31:fc:08:4b:7d:59:3c:fc:da:fb:
d9:e0:8d:04:06:17:57:87:b2:b0:5c:d9:23:71:16:2a:d9:77:
ca:07:73:fd:82:10:80:ac:8f:bf:1e:2a:89:81:73:0f:dd:24:
ff:e4:df:20:11:90:f3:5f:70:fd:41:d7:b7:bb:20:d2:2b:c8:
b5:f5:70:3a:89:c6:58:e9:46:99:94:30:01:a4:54:a4:2f:99:
1f:1c:e7:45:46:e7:cb:08:e8:14:99:53:a4:ba:98:c4:20:82:
e4:e6:55:0e:7a:43:44:53:1c:91:77:b9:90:20:1a:99:57:18:
99:19:c1:75:4c:30:76:45:f2:53:a3:3a:f6:8b:ae:46:99:55:
f1:11:1e:86:57:cb:dd:85:7f:00:07:f4:1b:96:e0:72:81:ac:
59:6b:79:63:50:4c:1f:06:f7:63:64:c4:2e:2e:d3:2b:d7:97:
e0:ad:ec:64:79:94:8a:1e:7a:92:ff:ee:2b:d7:0d:32:0b:c9:
f7:b8:39:a0:63:38:0b:c6:84:dd:54:f7:1a:2d:75:43:ce:f1:
b4:87:79:81:e1:70:aa:cd:ea:a7:a0:25:19:5b:08:65:f4:bc:
27:b8:7d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:49 2026 by rpki-client