Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363343a3a2f33322d3332203d3e20323037393336.roa
File: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (raw, json)
Hash identifier: AFVeOnsvdfn5zr4jds6KNtr7n93z5bGnJNsS8Ufaz0U=
Subject key identifier: 85:4B:B5:48:B8:DD:1F:71:9C:C3:3B:DB:23:4E:60:14:13:8F:18:1F
Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Certificate serial: 3431608F1C19014A2B20BF52CF7D66F5D53CA811
Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363343a3a2f33322d3332203d3e20323037393336.roa
Signing time: Sun 01 Mar 2026 05:46:34 +0000
ROA not before: Sun 01 Mar 2026 05:41:34 +0000
ROA not after: Sun 28 Feb 2027 05:46:34 +0000
asID: 207936
IP address blocks: 2a0f:3cc4::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl
rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:31:60:8f:1c:19:01:4a:2b:20:bf:52:cf:7d:66:f5:d5:3c:a8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Validity
Not Before: Mar 1 05:41:34 2026 GMT
Not After : Feb 28 05:46:34 2027 GMT
Subject: CN=854BB548B8DD1F719CC33BDB234E6014138F181F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:69:6b:76:7a:88:c7:af:40:7d:5f:90:81:c0:
52:4f:b9:54:82:35:bb:d3:79:ab:e1:c3:ca:90:f0:
92:ea:0d:58:e6:92:fc:50:af:48:e8:d5:d6:68:af:
39:0a:09:e8:07:e0:f0:ac:d0:67:e6:82:ae:08:70:
16:59:e9:ea:79:84:69:5e:18:3f:f2:fe:72:a6:d9:
9a:ed:17:78:a0:35:f8:ea:46:48:af:64:ce:82:c6:
08:66:aa:9c:c2:b9:86:c4:a2:38:68:cd:ba:90:84:
36:65:77:74:dd:96:37:7e:64:46:ca:79:d0:b5:e4:
d5:58:97:4b:48:49:c5:04:ba:30:a5:16:bf:1f:8f:
66:d5:16:2b:ec:88:f0:d4:0b:11:0b:62:67:75:22:
8a:ad:d6:e8:2e:07:36:f8:b0:74:66:65:df:ea:95:
a6:41:c0:d9:e9:ff:bf:a7:d8:d6:8b:a7:68:b1:cc:
5f:66:e5:2a:97:3c:f0:93:fe:22:40:8f:27:a5:70:
af:4c:43:ea:00:52:88:63:0f:95:2a:ce:5e:a7:5f:
71:63:73:30:7a:61:34:ab:d3:64:4e:cb:11:69:c0:
8c:0b:29:ed:87:13:40:7a:36:83:d9:64:73:22:7a:
d7:96:ff:4e:82:11:43:1e:cc:16:ec:e1:e6:47:76:
3b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4B:B5:48:B8:DD:1F:71:9C:C3:3B:DB:23:4E:60:14:13:8F:18:1F
X509v3 Authority Key Identifier:
keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363343a3a2f33322d3332203d3e20323037393336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3cc4::/32
Signature Algorithm: sha256WithRSAEncryption
3a:f1:d4:e6:73:ed:c4:3f:85:81:3d:5f:76:9e:ee:83:99:9c:
f4:92:54:5d:f5:93:1f:35:ab:d9:37:e2:7e:28:b9:f5:fb:b9:
36:5a:7f:01:b2:29:99:63:3b:d0:a2:53:06:b8:64:63:30:a7:
44:5c:24:95:48:de:4a:3a:38:1c:a7:42:f6:f9:2f:0b:7c:c2:
dd:e6:60:7e:cd:b3:f7:73:67:5b:00:27:1f:42:3e:b0:27:f1:
1f:65:17:1d:5b:1a:06:6b:91:c8:e2:4a:d0:f8:1b:2e:15:9a:
fd:23:9a:af:bc:06:5f:48:d8:08:e2:97:4e:54:70:74:4c:85:
c0:3f:ab:eb:24:a6:1f:73:89:bc:35:e5:49:f8:5a:87:3b:3c:
dd:6a:d0:29:46:aa:fd:85:b4:9f:e4:2c:f7:ac:04:9f:ed:54:
35:9f:72:4e:43:62:19:e6:24:5c:2b:98:2d:c3:df:ab:06:b2:
e0:3e:7b:a6:75:06:e5:69:73:ce:a0:26:0b:5d:03:08:8d:b1:
8c:39:48:3a:38:4c:2a:dd:43:1b:39:9c:0e:5b:c8:57:6e:54:
95:9f:60:d7:34:7e:52:6b:dc:82:78:7c:a1:df:4c:53:52:ec:
cd:42:b8:89:40:52:7f:29:4b:e5:9f:1c:a0:c6:56:d9:14:1e:
f4:11:4b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:33 2026 by rpki-client