Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363333a3a2f33362d3336203d3e203630373335.roa
File: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (raw, json)
Hash identifier: NZmbB1AD2okfoNYoNRF6VSo9hkwhlpFlsxSprSq+6Jk=
Subject key identifier: 03:44:0B:F5:9D:3A:D9:E2:D8:76:C0:3D:48:FD:FA:5C:60:99:72:AE
Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Certificate serial: 62DBD6D008C7A3782735132DDF5CBBDF75252344
Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363333a3a2f33362d3336203d3e203630373335.roa
Signing time: Sun 01 Mar 2026 05:46:34 +0000
ROA not before: Sun 01 Mar 2026 05:41:34 +0000
ROA not after: Sun 28 Feb 2027 05:46:34 +0000
asID: 60735
IP address blocks: 2a0f:3cc3::/36 maxlen: 36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl
rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:db:d6:d0:08:c7:a3:78:27:35:13:2d:df:5c:bb:df:75:25:23:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Validity
Not Before: Mar 1 05:41:34 2026 GMT
Not After : Feb 28 05:46:34 2027 GMT
Subject: CN=03440BF59D3AD9E2D876C03D48FDFA5C609972AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:68:53:e9:27:25:6f:52:a9:f5:35:b1:6c:
43:ac:4e:d8:75:7b:73:44:51:b4:a8:f4:bf:c4:8a:
07:a4:d0:15:40:6c:9a:a7:d2:3e:83:30:7f:f2:3a:
4b:b6:eb:ef:a4:64:56:97:b1:22:87:0e:a2:b7:71:
3c:d2:8e:cc:51:e8:64:ff:60:fc:d5:9a:2e:a1:41:
ab:a4:16:ed:71:d0:10:2a:39:2c:78:f6:45:55:7b:
39:56:8e:3b:bf:d0:9b:fc:8c:86:63:f3:93:c5:2d:
15:9d:24:95:fd:8b:c3:92:c1:7e:17:19:2d:81:be:
6e:6b:ed:19:ab:ca:bb:af:a7:f1:b0:e2:f8:a2:10:
f8:62:0a:57:ce:58:0f:7d:13:47:04:b3:7b:e0:8b:
65:6d:fb:a9:d1:b7:97:9a:d9:a8:85:af:d4:04:f6:
f5:56:1c:76:a7:82:69:3f:30:28:55:0e:dc:69:95:
8a:02:79:cd:84:4a:6a:fa:be:12:56:f5:40:2c:1a:
89:39:0d:97:82:f9:f2:d4:c6:b8:26:60:68:dc:b0:
c6:8c:f4:64:61:22:a1:39:a3:4b:49:6c:98:67:7a:
5f:78:b5:84:0f:63:29:03:4a:32:e9:3f:0e:73:28:
e3:f4:7b:60:b6:5d:56:ed:99:3d:85:8c:2e:5b:67:
c4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:44:0B:F5:9D:3A:D9:E2:D8:76:C0:3D:48:FD:FA:5C:60:99:72:AE
X509v3 Authority Key Identifier:
keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363333a3a2f33362d3336203d3e203630373335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3cc3::/36
Signature Algorithm: sha256WithRSAEncryption
1a:00:97:9d:d3:b3:8b:4e:6c:52:61:9d:10:f1:d5:68:54:28:
50:54:34:68:ce:a9:d5:01:b9:63:80:dd:36:63:a4:da:38:13:
fd:34:06:e5:7b:42:b5:83:ee:93:9e:9f:ac:79:e8:4b:7a:cb:
8c:71:7d:db:82:30:69:b6:0e:54:f2:9d:fa:c1:f6:49:11:46:
09:b2:22:45:cb:7e:01:64:6d:21:68:b3:12:0b:06:85:91:0a:
f9:4a:c3:3c:64:91:9c:98:41:3c:19:0b:23:cb:9a:5a:c6:fc:
80:74:06:b7:f9:c9:92:a9:3a:fa:74:95:ae:c6:81:22:be:aa:
a5:33:7f:b1:78:45:d3:4d:b2:ca:9c:70:24:d8:66:89:65:06:
aa:99:b5:e3:21:38:ad:1e:65:53:64:ef:98:e8:9a:0b:7b:40:
b8:f0:7d:b2:da:73:ca:db:41:f2:82:14:ef:12:2d:7e:82:12:
e4:0a:08:9f:23:a3:33:84:63:42:93:09:c0:9f:dd:38:c8:34:
bd:ea:57:a5:66:78:15:32:dc:b9:c0:4e:e0:80:4b:ab:c3:81:
ba:b9:d8:cb:0d:ad:9f:4f:84:d6:71:54:52:8f:4e:45:79:94:
a1:96:c4:5b:c7:97:4e:6d:64:31:99:43:f0:d4:e6:77:66:4f:
55:34:7c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:10 2026 by rpki-client