Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa
File: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (raw, json)
Hash identifier: 7RbGKTX0T75GWL+U9cYx0V2iGn8DIPgdGtE6PSL/e9k=
Subject key identifier: 90:09:47:EA:16:C4:FD:3E:8A:9B:9F:2B:0E:BA:37:95:E2:0D:C7:61
Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Certificate serial: 58F688B9B4B2B2241C6FD5F31894D9D25C1D973A
Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa
Signing time: Sun 01 Mar 2026 05:46:33 +0000
ROA not before: Sun 01 Mar 2026 05:41:33 +0000
ROA not after: Sun 28 Feb 2027 05:46:33 +0000
asID: 60735
IP address blocks: 2a0f:3cc3:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl
rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:f6:88:b9:b4:b2:b2:24:1c:6f:d5:f3:18:94:d9:d2:5c:1d:97:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Validity
Not Before: Mar 1 05:41:33 2026 GMT
Not After : Feb 28 05:46:33 2027 GMT
Subject: CN=900947EA16C4FD3E8A9B9F2B0EBA3795E20DC761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:aa:b5:aa:b6:dd:47:94:00:8b:f8:1a:a7:dd:
c5:56:ac:0d:ff:84:2c:77:d0:8e:e8:c4:54:d2:b6:
2c:b1:d4:1e:19:0d:11:50:3e:56:cf:5c:05:c1:c3:
6b:30:ae:5c:51:98:76:54:93:b8:11:99:e5:3c:59:
5c:6a:62:7a:a9:7e:7b:8f:ce:80:4d:9e:11:8f:91:
fd:98:92:07:c4:43:cb:2e:62:40:29:b1:5e:53:f1:
6c:42:a1:3c:64:5c:13:54:4d:bf:6e:29:ac:8d:e6:
c9:99:20:47:e6:e6:63:0a:ac:00:54:a8:b6:a6:75:
21:7f:cd:be:26:48:f6:b9:f3:68:15:ba:87:1e:fa:
83:fb:f5:32:dd:a4:35:04:bc:b2:fe:da:a8:59:67:
76:8d:25:e1:fe:88:e2:7e:40:77:9c:a5:40:a7:6c:
86:2c:a1:27:d7:db:ca:e8:b7:92:a0:28:44:9c:94:
83:e9:49:a7:20:e0:54:26:14:d6:e6:9c:94:2f:87:
97:83:be:02:18:7f:5a:68:07:7a:e0:4b:0e:30:fd:
b7:e4:77:c9:dc:94:26:ee:27:0c:31:94:dd:3d:66:
4c:27:a4:63:cd:79:ab:e3:e9:9a:2b:46:b9:fd:cd:
ff:93:4a:5a:8a:43:2e:f9:57:dc:49:29:fc:1b:4a:
80:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:09:47:EA:16:C4:FD:3E:8A:9B:9F:2B:0E:BA:37:95:E2:0D:C7:61
X509v3 Authority Key Identifier:
keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3cc3:2000::/36
Signature Algorithm: sha256WithRSAEncryption
72:89:8d:fc:99:a8:e3:db:a1:d6:b9:e9:a7:d0:ed:6b:52:c3:
d5:50:18:b8:7e:01:0e:0d:af:62:77:cf:cd:e3:82:a3:df:cc:
b8:0a:c2:52:de:0b:95:8d:f8:67:66:1d:7e:47:2c:c6:70:e6:
85:3d:fd:73:d2:e5:6d:50:a1:b8:aa:86:48:7f:b3:a7:d6:52:
74:db:45:47:ce:fc:6f:e1:30:a0:b7:e7:aa:4a:c2:9d:5a:3a:
c9:96:13:64:9e:8b:1b:b4:95:87:3a:21:bc:49:ce:60:8f:6b:
d6:16:d8:12:d8:00:f0:ad:2a:fd:55:81:71:a6:6e:e7:75:e8:
d6:87:e8:c8:8c:47:78:84:a6:d0:b7:f7:8b:2e:e9:c3:a2:9d:
50:53:28:e7:3f:8d:21:30:50:ed:c1:1c:e0:2b:37:f0:7b:11:
c1:4b:1f:42:2c:9c:47:32:c8:40:2a:88:07:8e:21:c8:de:91:
9a:6a:69:49:b0:37:e4:77:c3:a6:76:0a:d0:79:bc:57:37:c3:
28:5d:f7:0e:71:fb:cf:88:89:dd:ee:9c:4f:f7:cc:b8:5b:96:
32:30:f9:23:7f:f3:d3:36:c6:7d:ef:fe:f4:6a:25:6d:91:76:
e2:63:5e:6a:7e:99:7a:d8:d3:7b:1a:7d:2f:a4:42:20:7a:71:
46:2a:2e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:34:12 2026 by rpki-client