Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634313a3a2f34382d3438203d3e203532313132.roa
File: 326131333a393634313a3a2f34382d3438203d3e203532313132.roa (raw, json)
Hash identifier: o//1/J/GteVD7Bkv3tVM3xd+hJyni3O2iokpWvoEkpc=
Subject key identifier: B9:2B:AA:11:EB:C6:34:E8:A8:9A:DB:97:0D:4D:7B:85:E6:A0:B3:C4
Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace
Certificate serial: 57EE1C8192A4131C45E75734DB28D27BA723D16A
Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634313a3a2f34382d3438203d3e203532313132.roa
Signing time: Sat 29 Aug 2026 21:51:39 +0000
ROA not before: Sat 29 Aug 2026 21:46:39 +0000
ROA not after: Sat 28 Aug 2027 21:51:39 +0000
asID: 52112
IP address blocks: 2a13:9641::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:17:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:ee:1c:81:92:a4:13:1c:45:e7:57:34:db:28:d2:7b:a7:23:d1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace
Validity
Not Before: Aug 29 21:46:39 2026 GMT
Not After : Aug 28 21:51:39 2027 GMT
Subject: CN=B92BAA11EBC634E8A89ADB970D4D7B85E6A0B3C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:1c:37:c0:55:99:89:bb:8c:b7:38:84:1e:
51:56:41:41:a2:fd:d4:41:a5:91:07:68:16:41:35:
85:0a:13:97:fe:03:cc:71:6a:79:82:d9:37:86:37:
02:1d:7f:dd:8f:8c:25:6c:9d:95:98:0d:e6:07:82:
54:91:3f:49:b8:1d:69:05:1c:9b:fd:9a:5e:ed:4f:
3d:5a:29:66:84:71:ab:af:24:26:4d:47:06:5c:8b:
ea:18:7a:9b:3b:d5:21:33:f7:be:bd:a6:d1:7c:57:
57:d7:3d:c8:62:e4:49:c0:cb:6b:39:96:fa:da:0f:
7b:a4:24:76:bf:ab:cd:ad:5d:28:ab:25:7e:4e:37:
82:d4:ac:a6:9b:2e:cd:b8:88:eb:3d:62:51:db:c7:
fc:df:65:96:42:20:49:ee:e7:5b:f9:79:63:39:23:
2f:32:25:28:f5:15:74:49:59:16:b8:78:ae:3a:e5:
2b:0d:6c:9f:88:3d:49:80:73:a2:a8:d4:53:94:85:
28:0c:6c:7f:82:b4:a4:2b:24:cb:8e:3b:ea:c8:48:
56:35:bf:49:8b:04:84:5e:85:06:31:56:07:e6:6f:
8e:b2:6e:ef:23:d1:5d:ae:9d:ae:85:14:df:33:56:
b7:4d:5f:8f:7c:11:44:de:9e:92:27:72:ee:2d:e6:
ab:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2B:AA:11:EB:C6:34:E8:A8:9A:DB:97:0D:4D:7B:85:E6:A0:B3:C4
X509v3 Authority Key Identifier:
keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634313a3a2f34382d3438203d3e203532313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9641::/48
Signature Algorithm: sha256WithRSAEncryption
2f:a5:cf:83:57:51:57:98:54:49:4c:db:d4:0c:f5:67:67:9d:
67:12:be:04:4c:8a:ab:07:29:b1:54:a9:47:5c:16:88:3c:16:
24:31:5e:ab:f1:b0:e4:45:88:63:56:35:56:ce:58:67:bf:ca:
69:ff:a7:10:f3:16:91:73:58:7f:1d:5e:53:12:79:7b:aa:b1:
0f:41:f1:7a:79:62:fb:66:09:c5:99:6d:78:e4:89:f3:35:20:
9d:2a:b6:f4:fc:72:39:97:1e:cc:d8:72:54:8a:41:a9:a5:c1:
9b:f7:1e:14:73:ff:a5:f4:fe:02:3c:e0:04:8f:a1:30:4e:58:
b3:9a:7d:7d:38:5e:cb:5a:aa:ae:8d:f1:fe:1f:64:cf:15:83:
7c:7a:bd:b0:69:0e:ce:7d:91:9c:5a:17:ec:5b:25:6c:53:34:
05:27:c3:8f:5c:93:a3:ee:fc:cf:b8:23:dd:0e:62:46:10:14:
71:b4:c2:83:40:9e:7a:03:10:6a:b0:05:52:bd:64:f5:b7:73:
4e:c7:70:81:f7:3c:f9:59:32:c8:39:47:54:91:76:45:83:a5:
87:aa:d6:f8:57:b4:21:e7:21:12:ed:b3:d3:1c:f4:03:54:64:
4d:b9:0b:fc:53:8f:6d:2d:81:e1:a5:9d:b0:8b:15:30:8c:09:
18:38:4b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:45:18 2026 by rpki-client