Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363303a3a2f33322d3438203d3e203434333234.roa
File: 326130663a316363303a3a2f33322d3438203d3e203434333234.roa (raw, json)
Hash identifier: f8Mf78IBN2TfGVFDjMSxAD/+Qj9bKMZ/6HBqgvxyK28=
Subject key identifier: BA:B1:64:CB:C1:3F:6F:A1:65:E2:6B:6B:15:32:83:17:7A:B3:E5:22
Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e
Certificate serial: 1A7A7AC88F34A71612BF988A9A870569A11D0188
Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363303a3a2f33322d3438203d3e203434333234.roa
Signing time: Sat 01 Nov 2025 11:15:19 +0000
ROA not before: Sat 01 Nov 2025 11:10:19 +0000
ROA not after: Sat 31 Oct 2026 11:15:19 +0000
asID: 44324
IP address blocks: 2a0f:1cc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl
rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 13:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:7a:7a:c8:8f:34:a7:16:12:bf:98:8a:9a:87:05:69:a1:1d:01:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e
Validity
Not Before: Nov 1 11:10:19 2025 GMT
Not After : Oct 31 11:15:19 2026 GMT
Subject: CN=BAB164CBC13F6FA165E26B6B153283177AB3E522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5e:42:65:13:ec:0d:8d:4a:b8:75:31:54:d0:
a1:ee:c0:bb:99:a8:61:46:41:f3:8b:48:06:3c:c5:
03:2b:ba:e6:9c:79:f3:67:2a:d1:9d:2b:66:1d:b9:
37:f0:4a:6c:84:9b:17:ed:7e:5d:32:8e:04:45:79:
e7:aa:29:d6:53:c9:b3:e5:77:d0:fe:3d:dd:1e:e4:
f2:ce:1d:a6:82:0d:0b:08:fa:bc:4b:83:b7:7d:49:
63:e7:4d:4e:ae:03:68:26:35:43:36:ab:03:f2:0c:
07:fc:c6:4f:f9:57:0b:10:b8:62:22:f6:a1:b9:ec:
f8:88:bc:e2:d8:e7:8a:a0:f8:d7:99:93:58:73:df:
36:2c:66:68:a0:19:fc:97:fd:6d:9b:67:98:c2:99:
80:15:01:24:ee:af:78:61:b5:9f:da:0a:52:76:74:
b4:e6:27:ed:b7:5e:11:95:48:59:7c:0f:28:e0:8d:
01:c7:c3:65:17:1d:bf:06:e6:50:c1:98:7d:ef:f6:
87:6d:b4:b3:f2:70:1b:3f:81:bb:5c:13:f7:da:e8:
0a:4f:a7:48:fe:ab:c3:4f:04:2e:b1:8a:8c:c8:c8:
3a:6f:e6:36:2e:8d:a0:74:6b:96:f5:d2:11:87:e9:
7e:d8:7e:84:a4:f0:15:a1:a7:12:d4:31:ec:5b:0e:
f4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B1:64:CB:C1:3F:6F:A1:65:E2:6B:6B:15:32:83:17:7A:B3:E5:22
X509v3 Authority Key Identifier:
keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363303a3a2f33322d3438203d3e203434333234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc0::/32
Signature Algorithm: sha256WithRSAEncryption
13:6e:f2:bf:61:92:25:88:b1:a6:48:ee:c2:63:a5:ea:ab:3f:
6d:cd:c0:0b:8c:44:4c:c2:20:2c:2b:a2:3a:2b:e2:ce:a3:34:
8c:2f:0e:e8:d0:75:77:f7:c2:1d:a7:12:41:ea:37:73:86:95:
11:f3:94:1d:2c:fd:db:62:6a:d1:d5:92:72:17:32:20:ff:3b:
a2:e8:1c:8c:c8:8e:94:9c:39:bc:b0:f9:4b:65:36:db:4a:fe:
e9:53:1a:7b:a6:ba:97:36:73:be:fe:0e:6f:28:98:61:56:d1:
6d:cf:15:c7:a2:e2:d7:05:b6:b3:0a:a0:44:79:70:88:10:e4:
2c:7c:47:bf:97:8b:10:40:20:71:dd:f7:68:68:6e:c4:4e:73:
f4:88:8d:31:a2:f1:4a:41:ff:e6:a6:e4:de:1d:c0:94:0e:24:
01:f5:2a:94:db:64:aa:8a:83:5e:f6:28:0a:4b:bf:23:0d:be:
61:4c:0b:eb:37:f5:3d:6d:dd:87:45:44:95:2b:51:8a:72:03:
f8:36:4c:29:8f:4f:b5:2c:c3:f0:54:19:4a:40:49:ed:22:02:
8e:17:69:22:0c:79:1a:68:e5:72:19:c0:69:50:dd:40:9c:3b:
04:1a:ef:fb:ec:cf:ff:0a:76:32:17:0d:71:01:ab:e5:7a:85:
50:6e:bb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 05:47:14 2025 by rpki-client