Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363373a3a2f33322d3332203d3e203539383133.roa
File: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (raw, json)
Hash identifier: LZdhd8babbehfkgcaQ2p0QEt4TultBt5ttf3MMRXRbI=
Subject key identifier: 14:60:D5:31:24:61:F7:0F:56:72:93:50:87:D6:32:64:69:68:F0:69
Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Certificate serial: 04215FBC08EFF03AEDA3281B47EBB03D5F7868D3
Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363373a3a2f33322d3332203d3e203539383133.roa
Signing time: Sun 01 Mar 2026 05:46:34 +0000
ROA not before: Sun 01 Mar 2026 05:41:34 +0000
ROA not after: Sun 28 Feb 2027 05:46:34 +0000
asID: 59813
IP address blocks: 2a0f:3cc7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl
rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:21:5f:bc:08:ef:f0:3a:ed:a3:28:1b:47:eb:b0:3d:5f:78:68:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Validity
Not Before: Mar 1 05:41:34 2026 GMT
Not After : Feb 28 05:46:34 2027 GMT
Subject: CN=1460D5312461F70F5672935087D632646968F069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fe:65:fb:c2:2d:6a:40:f7:e8:5a:ae:74:83:
2c:ec:b8:41:13:e4:b7:b9:0a:90:76:c0:69:19:05:
cc:23:bc:35:97:ff:61:e3:58:98:87:40:2f:1a:68:
94:87:45:32:cf:02:f0:40:67:1c:79:d8:c6:87:71:
66:93:35:01:fa:e6:ff:de:c4:ae:f6:4e:62:95:c8:
09:13:71:3a:50:ed:4c:3d:a7:c1:90:47:ed:e5:7c:
ad:af:7a:73:ae:82:f9:ec:a9:6a:69:1d:24:59:25:
80:c5:c8:4b:82:6f:26:19:f7:44:3a:a2:74:14:b7:
b9:bf:3f:18:e2:20:89:9b:88:c2:0e:cd:79:34:21:
10:d4:78:38:31:94:d9:f7:cd:a4:78:a0:c6:2a:72:
b3:a5:a6:03:13:76:db:77:8f:8d:88:64:45:71:f1:
e5:e9:2f:cb:21:a7:b6:b5:58:7f:cb:0e:18:2b:09:
2a:97:be:65:f3:f9:91:51:c8:f1:2c:79:47:c6:b9:
1c:2d:c5:68:c0:78:ed:b5:bd:59:b0:08:04:8a:34:
70:3c:84:df:5e:27:62:1c:da:8d:f7:eb:f7:e5:b6:
d4:3d:56:7f:84:a5:2f:38:42:72:82:21:28:05:5c:
fe:22:ee:de:03:a5:6e:b8:0c:7a:02:84:34:df:77:
55:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:60:D5:31:24:61:F7:0F:56:72:93:50:87:D6:32:64:69:68:F0:69
X509v3 Authority Key Identifier:
keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363373a3a2f33322d3332203d3e203539383133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3cc7::/32
Signature Algorithm: sha256WithRSAEncryption
61:17:44:03:66:61:4d:c7:8d:c3:a6:23:78:b4:c6:42:57:9c:
3e:3c:c3:32:d3:88:f6:9b:8e:82:b6:3b:6f:fb:a2:c0:19:73:
50:7c:a8:72:b1:39:dc:1d:ac:65:87:06:a5:97:06:67:fd:e7:
d8:f1:80:b9:4e:81:9f:96:06:8c:bb:50:cb:36:1a:5b:99:3b:
23:a2:43:2c:f8:02:27:6d:2b:a0:db:c8:e5:be:ff:a3:be:20:
22:4a:8b:42:e3:27:17:55:01:31:a0:35:7c:e2:97:29:36:44:
0e:c1:43:bc:37:37:1e:9d:7d:4c:f0:bd:81:97:1b:d8:f1:18:
c7:ca:cd:89:41:49:b8:ef:70:9f:72:5c:ad:d5:c0:4b:4d:88:
59:df:3f:cc:4e:a7:0f:9a:16:4f:8c:61:1d:04:40:7b:7b:4a:
57:4e:7c:2f:47:1c:52:98:0a:89:90:e5:a0:e8:75:0a:95:33:
cd:50:7b:db:86:a4:d9:41:d6:cb:64:59:b1:4f:b8:bf:05:58:
26:96:99:f4:fa:20:57:29:4e:59:08:06:c9:5c:78:8e:36:ac:
66:27:06:0f:4e:d4:2b:04:b4:3b:2d:02:2d:8d:75:0a:c2:41:
14:56:84:a0:57:4d:84:15:c8:e7:98:a7:22:d0:78:e8:1c:6c:
17:09:c1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:17:44 2026 by rpki-client