Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a3830303a3a2f34302d3438203d3e20313530323839.roa
File: 326130663a316363353a3830303a3a2f34302d3438203d3e20313530323839.roa (raw, json)
Hash identifier: 48lbv5iKKHw3/X1Z8uTS0XvIGI/0fCxnRa+tKbLLn1g=
Subject key identifier: 5F:56:5C:CC:13:25:76:8A:CC:8D:7B:3B:63:6F:44:22:79:3A:57:AC
Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e
Certificate serial: 3F14534E2E38FDFDDE2D7B685D2F53615C51F90C
Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a3830303a3a2f34302d3438203d3e20313530323839.roa
Signing time: Mon 03 Nov 2025 03:12:55 +0000
ROA not before: Mon 03 Nov 2025 03:07:55 +0000
ROA not after: Mon 02 Nov 2026 03:12:55 +0000
asID: 150289
IP address blocks: 2a0f:1cc5:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl
rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:54:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:14:53:4e:2e:38:fd:fd:de:2d:7b:68:5d:2f:53:61:5c:51:f9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e
Validity
Not Before: Nov 3 03:07:55 2025 GMT
Not After : Nov 2 03:12:55 2026 GMT
Subject: CN=5F565CCC1325768ACC8D7B3B636F4422793A57AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ed:4f:e2:8f:e4:3e:10:4a:94:f6:71:55:38:
67:9f:02:98:ad:01:4a:b0:22:da:36:e1:34:09:39:
03:e1:0b:22:69:1d:1a:6c:9d:e4:26:48:7c:cd:74:
1b:9c:ac:0b:8b:94:83:4b:37:96:9c:7c:9f:bd:1e:
47:e3:9a:64:62:d1:7c:a1:67:62:56:f7:8b:5d:8c:
9e:38:83:9e:bc:da:e4:d2:33:ff:0e:a3:c6:8c:84:
62:f9:ec:36:de:92:56:79:da:f2:22:7f:11:b5:14:
de:3e:00:cf:6d:57:c8:ec:0f:3e:40:d1:64:83:83:
04:c1:89:38:59:e9:e1:35:57:c7:8b:97:52:3f:45:
8d:1c:7d:52:09:37:ec:9f:a5:5f:b7:96:c7:5b:8c:
7d:94:1c:db:39:e1:0f:f0:3a:a0:b4:1c:ed:ea:eb:
d6:09:6c:a1:ad:8e:0a:40:c6:a8:9e:34:4b:91:42:
47:c9:d7:d9:85:36:36:d9:83:b5:c1:8c:5a:2f:a9:
ba:8e:70:ba:0d:69:46:be:36:15:12:60:3a:48:6c:
dd:26:fa:8e:13:83:bf:e3:28:37:7f:59:fc:45:2e:
ad:7c:50:f6:a4:f1:61:74:9e:c6:50:af:ce:53:d3:
2b:82:1d:6b:0b:e2:8a:a2:0a:b3:42:0c:11:a8:24:
1b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:56:5C:CC:13:25:76:8A:CC:8D:7B:3B:63:6F:44:22:79:3A:57:AC
X509v3 Authority Key Identifier:
keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a3830303a3a2f34302d3438203d3e20313530323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:800::/40
Signature Algorithm: sha256WithRSAEncryption
6e:24:ce:c5:b3:a7:c3:9e:b8:58:1c:e2:30:7d:de:c0:40:34:
bc:4a:af:65:b9:8f:d0:63:8b:76:a2:00:ad:3e:34:f6:74:b4:
8f:81:b4:4d:b8:49:b9:4f:88:bb:5c:5e:12:18:34:54:f1:10:
25:7c:0b:73:7f:16:84:9e:cc:8b:44:68:17:20:cb:81:90:27:
30:0b:53:08:f3:48:65:b7:6a:97:70:14:49:cf:98:f9:d8:51:
82:08:21:c0:e7:00:63:42:19:78:7b:ac:4c:0b:6d:37:da:4f:
50:a8:1a:f2:4e:09:e8:58:5f:e6:8f:b4:8d:6a:de:b3:c3:cc:
3d:cc:bf:99:6b:bc:14:c2:60:0f:94:5e:1c:c5:94:28:56:89:
f9:55:8e:a6:3f:69:70:e7:a3:fe:1d:8f:f6:bb:59:c4:7f:3b:
b1:d4:69:fb:c5:ad:62:d3:3e:66:66:0b:fd:a1:84:af:39:5a:
5a:98:ee:ac:a1:aa:61:dd:76:bd:f3:57:d3:0b:3c:7b:43:37:
be:bc:e9:70:a0:66:b0:ee:e7:53:d3:6b:90:5f:23:ef:95:6c:
d1:d3:d6:1e:36:a1:29:51:50:41:86:d0:9a:cd:7f:1f:a6:e9:
a8:b7:d9:a6:e1:6d:79:6b:6b:69:83:57:e0:8a:30:29:b9:82:
3b:32:8c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:21:50 2025 by rpki-client