Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634343a323232303a3a2f34342d3438203d3e20323134393932.roa
File: 326131333a393634343a323232303a3a2f34342d3438203d3e20323134393932.roa (raw, json)
Hash identifier: 1pHR4AP9OeOn8mZ4HoLlr2czW4fmRlqzyRv8x8zwk8A=
Subject key identifier: 69:98:14:C6:FE:6F:F4:BF:7E:51:7E:FC:B4:53:5F:E1:40:F4:58:D3
Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace
Certificate serial: 27EDCB3BF688014BC1B451B3087B87A18A92EC2B
Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634343a323232303a3a2f34342d3438203d3e20323134393932.roa
Signing time: Thu 11 Jun 2026 16:50:53 +0000
ROA not before: Thu 11 Jun 2026 16:45:53 +0000
ROA not after: Thu 10 Jun 2027 16:50:53 +0000
asID: 214992
IP address blocks: 2a13:9644:2220::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ed:cb:3b:f6:88:01:4b:c1:b4:51:b3:08:7b:87:a1:8a:92:ec:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace
Validity
Not Before: Jun 11 16:45:53 2026 GMT
Not After : Jun 10 16:50:53 2027 GMT
Subject: CN=699814C6FE6FF4BF7E517EFCB4535FE140F458D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:19:36:4b:c5:8c:41:62:31:22:07:f9:5a:37:
19:f8:c2:66:a7:ad:7b:1c:c3:8d:0e:c2:41:49:17:
9f:6f:d0:64:fe:34:15:c5:80:ed:9a:c5:79:4c:fb:
98:57:4d:ec:b0:ea:bd:7c:1a:62:db:57:e2:b0:b6:
60:ed:66:a0:7d:50:00:75:28:6f:cd:2d:b3:2f:2a:
d8:0d:da:c6:48:f1:f3:e1:b3:a5:73:39:e5:52:83:
bc:19:bf:4d:88:bc:d3:af:78:ed:e5:16:44:a1:3e:
63:5e:eb:83:38:c1:8a:28:cd:ee:dc:16:51:53:05:
27:b5:52:ef:92:2c:47:a6:e7:37:2d:4f:f9:2e:50:
5d:7f:a9:bc:38:26:d7:d4:3b:85:24:43:8f:ef:12:
46:60:b6:c9:15:82:50:06:db:8a:00:e1:89:41:45:
b1:85:de:60:5f:66:01:d1:ea:10:76:d4:86:9d:f0:
f0:fc:29:7e:9b:c3:f8:98:78:66:f9:17:23:34:3e:
5e:a9:4e:6b:42:60:1b:5c:35:8d:d2:b8:4a:78:d3:
df:39:1e:73:5b:cf:a6:f4:c1:b3:99:98:77:de:f6:
f4:0a:4f:9d:1e:5c:8e:17:be:cf:4e:62:3c:2d:cb:
e1:5c:51:fe:25:1a:41:e8:28:78:14:13:86:aa:d6:
01:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:98:14:C6:FE:6F:F4:BF:7E:51:7E:FC:B4:53:5F:E1:40:F4:58:D3
X509v3 Authority Key Identifier:
keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634343a323232303a3a2f34342d3438203d3e20323134393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9644:2220::/44
Signature Algorithm: sha256WithRSAEncryption
31:2c:89:88:ff:a5:b1:4a:0e:b0:6f:95:e7:ae:80:89:56:18:
ef:f6:b6:fc:ca:4d:25:5d:0e:90:21:d7:ef:1d:0e:8f:b3:2b:
0d:18:3a:f2:65:1e:2d:cd:b0:4b:6c:de:db:0d:67:db:f4:3c:
be:8f:97:98:7a:e8:e1:a7:74:d6:f5:47:19:48:29:ac:dc:a7:
b1:16:14:b8:45:03:81:9f:5d:fb:f8:67:db:9c:9f:94:5b:e8:
f5:b1:e7:56:b9:50:f3:58:28:79:3d:b1:43:37:b6:6a:c0:c3:
cf:32:b0:51:34:d6:50:e8:36:6d:a2:f5:cd:a0:5d:4b:79:01:
07:58:fe:a1:68:31:83:40:d9:27:11:0e:2b:17:6d:76:34:75:
d2:e3:49:25:d1:64:49:d0:75:3b:74:25:58:30:a1:7f:bc:0b:
ac:ac:71:5b:18:50:b7:26:76:03:21:f9:cf:90:54:f1:4a:d6:
a3:ca:b6:af:c6:7a:29:c1:53:50:6b:58:4a:36:d9:c5:4b:fd:
42:11:88:8d:23:d9:bb:79:66:32:c5:de:05:ea:7c:c8:01:24:
30:a5:aa:8d:d6:51:9e:21:a6:c5:e8:48:44:48:d4:38:92:16:
57:d3:22:33:e6:9d:54:01:29:cd:8b:77:50:28:b4:96:98:c5:
89:15:26:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:32:11 2026 by rpki-client