Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a32303a3a2f34342d3434203d3e20323034353138.roa
File: 326130663a316363353a32303a3a2f34342d3434203d3e20323034353138.roa (raw, json)
Hash identifier: eAkdc9AT/MKr5w4W1aDuTVAZbL0jOTsmTOs/Bc2Bw0Y=
Subject key identifier: E5:4A:75:82:23:21:7B:AF:80:82:70:25:24:55:5F:BF:5D:94:7A:BC
Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e
Certificate serial: 70D73ECAD9BE6E10C146A80698A819D212D7E347
Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a32303a3a2f34342d3434203d3e20323034353138.roa
Signing time: Thu 30 Oct 2025 19:57:22 +0000
ROA not before: Thu 30 Oct 2025 19:52:22 +0000
ROA not after: Thu 29 Oct 2026 19:57:22 +0000
asID: 204518
IP address blocks: 2a0f:1cc5:20::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl
rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:d7:3e:ca:d9:be:6e:10:c1:46:a8:06:98:a8:19:d2:12:d7:e3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e
Validity
Not Before: Oct 30 19:52:22 2025 GMT
Not After : Oct 29 19:57:22 2026 GMT
Subject: CN=E54A758223217BAF8082702524555FBF5D947ABC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7f:5a:8c:ac:aa:c3:63:ec:7f:36:80:91:55:
05:50:d2:fb:12:24:c6:9e:c5:bb:4e:4a:62:c8:f5:
61:c0:62:f4:40:10:27:5b:c3:91:ce:51:01:e5:53:
1b:ab:12:08:05:46:4e:14:ac:f4:46:73:50:ae:34:
36:90:de:9e:32:cb:60:28:19:b1:90:1a:9f:c4:66:
e1:f9:c0:80:ef:a4:88:a1:d9:c8:38:79:e9:70:15:
91:37:f6:48:fa:48:85:4b:4e:fa:e5:29:27:a6:5c:
d0:5f:7c:ee:59:4e:fa:6c:1b:d0:8f:aa:e8:d6:42:
a2:b1:db:a1:0c:26:12:b1:a9:d0:77:42:4f:00:c6:
0f:77:db:96:2c:82:cb:88:c9:a1:d4:1e:2b:1c:cc:
7e:05:41:a8:e5:d4:45:27:02:f2:c8:fe:13:ea:42:
85:de:23:73:82:2a:9c:2c:2e:fa:f8:20:f5:01:6b:
81:68:82:97:ae:0e:26:4e:59:f7:ef:69:00:ca:20:
f7:2c:1e:37:ec:5d:24:26:e2:77:45:b9:59:6f:90:
24:6f:21:5b:e5:68:f9:f1:3a:7e:95:b1:18:05:71:
be:7f:a9:5d:3a:f9:68:b6:2b:43:42:f0:7d:63:f2:
80:74:dc:b1:1d:93:b3:7f:05:71:de:bf:55:b5:55:
80:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4A:75:82:23:21:7B:AF:80:82:70:25:24:55:5F:BF:5D:94:7A:BC
X509v3 Authority Key Identifier:
keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a32303a3a2f34342d3434203d3e20323034353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:20::/44
Signature Algorithm: sha256WithRSAEncryption
00:62:3a:22:65:e5:3e:75:3e:5d:fe:fc:9a:41:d2:74:dc:77:
e8:0d:b9:c1:a0:df:a3:e3:b7:a6:48:ff:87:65:c9:61:fc:be:
d4:7e:24:8c:86:b4:66:ad:06:d7:ae:79:c3:1c:13:86:f3:07:
64:8b:4c:27:80:71:73:02:b6:7c:b9:9e:1c:bb:1c:ec:b6:85:
94:67:4e:d1:28:c1:6a:f0:3d:a8:4c:65:d1:41:39:8f:c7:b1:
bb:52:47:9f:8d:19:ee:f0:d7:6e:9c:53:a2:89:0a:19:6c:cf:
0a:0e:21:39:a0:b7:2e:a7:b5:92:19:38:9c:a9:30:a3:82:57:
95:27:d7:ec:44:d1:a9:82:0c:1b:21:de:24:b8:cd:88:b2:84:
0d:06:77:8e:ab:da:07:7d:2e:67:97:f5:be:b2:26:09:8f:d1:
41:65:60:87:c8:80:48:4f:78:80:85:db:dc:d5:87:ca:dd:db:
6c:a5:75:59:13:47:a3:ae:df:27:c8:f1:19:fe:52:65:93:8a:
31:12:4d:80:59:6f:1b:fd:14:38:f2:d0:fd:13:30:98:77:00:
62:71:12:4e:13:45:74:cd:09:61:21:b6:fc:d0:f1:ca:d2:8f:
dc:40:78:13:ac:20:75:78:f8:f6:29:cb:67:73:a0:2b:d4:fd:
5b:51:10:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:57:39 2025 by rpki-client