Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363323a3a2f33322d3332203d3e20323037393336.roa
File: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (raw, json)
Hash identifier: vlI3tYFCLzWNGXLpIFZR5AHPwN6r5z5t+7vGqUPF4to=
Subject key identifier: CA:C1:8F:14:E4:1E:57:28:39:C7:19:73:C7:7B:0A:6B:FF:DE:FF:39
Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Certificate serial: 7D9756EFC5B8B0715D079BC63F9A00DF62232671
Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363323a3a2f33322d3332203d3e20323037393336.roa
Signing time: Sun 01 Mar 2026 05:46:33 +0000
ROA not before: Sun 01 Mar 2026 05:41:33 +0000
ROA not after: Sun 28 Feb 2027 05:46:33 +0000
asID: 207936
IP address blocks: 2a0f:3cc2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl
rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:97:56:ef:c5:b8:b0:71:5d:07:9b:c6:3f:9a:00:df:62:23:26:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Validity
Not Before: Mar 1 05:41:33 2026 GMT
Not After : Feb 28 05:46:33 2027 GMT
Subject: CN=CAC18F14E41E572839C71973C77B0A6BFFDEFF39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f1:3d:65:05:40:c4:df:3e:e8:5e:8f:30:d7:
a9:5b:fa:ca:31:67:b3:96:64:cd:9a:e4:6f:c5:ab:
94:ee:33:26:f4:ab:83:e8:be:57:a0:ff:b9:69:3c:
56:13:20:cb:81:9a:1b:c3:11:bb:d9:ec:b1:63:20:
f8:60:73:53:5c:3a:9a:2a:b9:cc:cf:c9:dc:0b:d8:
81:1c:1a:6e:3e:57:80:fe:68:a6:e0:73:3c:a5:d9:
49:26:23:65:31:e3:73:10:12:a3:52:73:5a:2b:a6:
be:0d:2c:aa:67:a7:67:76:9b:40:58:09:ea:94:57:
1c:ce:7f:b8:57:2a:ad:34:ab:d4:03:1e:e5:92:d8:
37:f4:99:37:c1:cd:f4:90:bd:71:3e:9c:e5:bb:50:
36:de:4b:79:8c:f5:b6:c5:98:71:04:99:0d:e9:6b:
86:84:d5:f7:e6:c0:95:af:b1:e0:c8:50:f6:54:a8:
61:15:aa:e5:89:6f:a1:22:db:ee:12:c8:1d:65:7f:
ba:fe:aa:5d:4c:ca:7a:b4:b9:f6:74:7e:94:9d:0f:
36:0c:b3:c0:6f:57:22:5e:58:b6:be:41:a3:b0:20:
45:66:cf:e0:cb:ef:b5:95:3a:f9:15:96:d5:04:7e:
3c:bb:82:3c:e0:e8:cd:80:79:c9:d6:38:6b:22:a8:
26:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C1:8F:14:E4:1E:57:28:39:C7:19:73:C7:7B:0A:6B:FF:DE:FF:39
X509v3 Authority Key Identifier:
keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363323a3a2f33322d3332203d3e20323037393336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3cc2::/32
Signature Algorithm: sha256WithRSAEncryption
5f:b6:c4:87:09:f0:fc:4c:48:d2:3a:53:13:1c:f7:d2:d5:05:
04:95:c8:2e:56:53:ca:ad:8a:1f:70:55:79:2d:0f:ab:89:0a:
86:44:1a:97:12:4a:43:35:94:44:64:f7:a0:d6:d7:f6:6c:1d:
ae:f3:22:4e:4d:f5:89:3f:d4:e6:33:80:cb:25:c8:ed:60:67:
e4:23:71:33:10:b7:f6:23:57:43:a9:7c:a5:22:74:19:17:35:
ef:67:4f:4e:b3:57:57:42:75:f2:af:c4:ec:fa:c8:68:36:4d:
57:08:70:29:2d:0f:51:00:9d:21:b0:73:f8:c1:6d:a0:8b:41:
0f:85:20:7a:ac:c0:08:e5:5b:2a:0c:11:a3:43:3e:ef:00:02:
b7:03:17:24:4d:2a:fc:8a:4f:4b:32:15:57:57:d1:93:78:e5:
6b:1b:5f:54:f3:b9:28:e4:c1:ee:c3:09:80:cc:da:0e:24:27:
75:36:58:7c:53:f8:b6:96:5a:40:2a:4c:50:56:c8:57:c7:85:
62:c5:6c:13:b7:e4:93:10:a0:4c:60:52:b2:51:0d:90:eb:bf:
49:c6:41:cf:50:67:40:4f:32:2a:1e:5c:cf:13:b3:9b:80:d1:
77:60:46:dc:06:6f:c9:6e:0b:ba:fc:27:50:b3:02:16:b8:73:
a4:12:57:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:56 2026 by rpki-client