Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa
File: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (raw, json)
Hash identifier: 9ogwbP0FwI3bt9smQhF/FyCTLBfxIietP/iXZ8W8um0=
Subject key identifier: 86:0D:C2:EA:E2:FE:A9:E2:AA:D8:A6:35:81:09:6E:88:87:39:31:9D
Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace
Certificate serial: 58C107B9DAC1D2CDB0AEB99ECB358823D044A86E
Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa
Signing time: Thu 11 Jun 2026 16:51:38 +0000
ROA not before: Thu 11 Jun 2026 16:46:38 +0000
ROA not after: Thu 10 Jun 2027 16:51:38 +0000
asID: 211431
IP address blocks: 2a13:9644:3000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:c1:07:b9:da:c1:d2:cd:b0:ae:b9:9e:cb:35:88:23:d0:44:a8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace
Validity
Not Before: Jun 11 16:46:38 2026 GMT
Not After : Jun 10 16:51:38 2027 GMT
Subject: CN=860DC2EAE2FEA9E2AAD8A63581096E888739319D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:52:26:2b:44:cd:ab:44:c4:36:49:1c:28:18:
d1:65:ae:65:15:aa:bb:ea:96:03:6c:e5:dc:5b:7e:
45:f0:ad:90:33:9f:84:95:54:62:f9:81:67:11:52:
9f:73:6c:2d:ad:e8:b2:a9:a4:c1:e2:6e:30:4a:b9:
0a:dc:30:31:e0:07:60:8b:28:c1:60:7d:48:7c:bd:
24:8b:3b:7a:a1:48:9c:38:6c:14:bb:85:de:6f:31:
9e:e6:4d:29:47:1f:7e:03:a0:56:9d:39:97:72:a3:
03:cb:a0:47:8b:f4:9e:b1:c2:6f:65:a2:fc:6a:94:
8b:70:3a:95:e5:a7:c5:78:4d:4e:46:5e:2e:f0:1a:
c5:8d:9c:74:28:7b:ca:b6:de:55:31:4c:2f:c0:6c:
57:60:20:2d:c5:c2:3f:2f:aa:a7:96:46:d4:3a:2d:
d6:6a:10:9f:a0:ee:68:a5:98:dc:c2:7e:81:2a:24:
c0:04:5d:44:29:b4:f8:f5:36:92:e0:fc:c6:ee:1b:
e3:6d:6c:f0:52:27:85:87:42:d4:1d:93:87:e2:84:
74:7f:9c:3b:ba:1a:79:01:27:15:b9:a9:1b:ef:2c:
78:d1:97:83:e7:eb:c2:bb:dd:dd:94:9c:00:85:bd:
82:d0:b5:07:39:31:a0:f2:b3:f1:d5:40:b8:c5:33:
e6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0D:C2:EA:E2:FE:A9:E2:AA:D8:A6:35:81:09:6E:88:87:39:31:9D
X509v3 Authority Key Identifier:
keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9644:3000::/40
Signature Algorithm: sha256WithRSAEncryption
10:39:0e:3b:33:a0:1b:69:71:33:d5:74:a7:f1:f2:4e:c3:ed:
73:38:39:ea:05:94:8a:2e:b6:fe:a3:75:b5:4e:2d:43:22:63:
14:bc:c3:ed:23:83:31:66:c8:e8:13:17:66:1e:38:95:3a:b6:
7c:04:d6:e2:9c:78:d1:dd:fe:41:d7:c6:21:c1:34:8a:c0:45:
2f:42:c8:7e:a8:c0:a2:d5:0d:bb:ab:45:4a:cd:e8:1e:10:4c:
50:4b:cd:2c:dc:e7:78:17:16:28:c0:f2:5a:a2:df:f1:24:67:
e5:ee:41:f2:fd:8d:7c:f6:af:e4:21:c1:2f:3a:67:b6:86:c7:
7b:ee:5f:54:64:db:19:27:d6:2f:d1:35:74:8b:51:77:ab:ef:
68:96:8f:78:71:66:73:f5:5c:a0:ba:3c:21:29:0d:85:38:6b:
b9:0d:4c:d8:80:d9:4e:c3:19:6f:61:53:c9:35:45:15:72:34:
74:8b:43:bf:96:c6:15:7e:49:ca:57:de:5d:72:96:99:e0:78:
09:32:f5:dc:ea:99:ff:63:3d:b2:0a:5b:3a:14:6a:4e:f6:80:
2a:0a:7b:e8:9c:9e:2b:2b:4a:62:57:ce:59:f2:2a:fa:b4:cf:
36:91:89:c1:49:a8:82:6a:1c:4d:93:64:48:1f:5d:e3:bf:86:
2a:4b:b8:75
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUWMEHudrB0s2wrrmeyzWII9BEqG4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjFkMDU3MmZlNzI5OTFiZDMyODU0YmFjNzE2Njc2ZWJk
YWQyMmFjZTAeFw0yNjA2MTExNjQ2MzhaFw0yNzA2MTAxNjUxMzhaMDMxMTAvBgNV
BAMTKDg2MERDMkVBRTJGRUE5RTJBQUQ4QTYzNTgxMDk2RTg4ODczOTMxOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIUiYrRM2rRMQ2SRwoGNFlrmUV
qrvqlgNs5dxbfkXwrZAzn4SVVGL5gWcRUp9zbC2t6LKppMHibjBKuQrcMDHgB2CL
KMFgfUh8vSSLO3qhSJw4bBS7hd5vMZ7mTSlHH34DoFadOZdyowPLoEeL9J6xwm9l
ovxqlItwOpXlp8V4TU5GXi7wGsWNnHQoe8q23lUxTC/AbFdgIC3Fwj8vqqeWRtQ6
LdZqEJ+g7milmNzCfoEqJMAEXUQptPj1NpLg/MbuG+NtbPBSJ4WHQtQdk4fihHR/
nDu6GnkBJxW5qRvvLHjRl4Pn68K73d2UnACFvYLQtQc5MaDys/HVQLjFM+b3AgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUhg3C6uL+qeKq2KY1gQluiIc5MZ0wHwYDVR0j
BBgwFoAU8dBXL+cpkb0yhUuscWZ269rSKs4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTMwZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1
YjQ5LzAvRjFEMDU3MkZFNzI5OTFCRDMyODU0QkFDNzE2Njc2RUJEQUQyMkFDRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkQlhMLWNwa2IweWhVdXNjV1oyNjly
U0tzNC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTMwZGU4NGIt
NDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1YjQ5LzAvMzI2MTMxMzMzYTM5MzYzNDM0
M2EzMzMwMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzMTM0MzMzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoTlkQwMA0GCSqGSIb3DQEBCwUAA4IBAQAQOQ47M6AbaXEz1XSn
8fJOw+1zODnqBZSKLrb+o3W1Ti1DImMUvMPtI4MxZsjoExdmHjiVOrZ8BNbinHjR
3f5B18YhwTSKwEUvQsh+qMCi1Q27q0VKzegeEExQS80s3Od4FxYowPJaot/xJGfl
7kHy/Y189q/kIcEvOme2hsd77l9UZNsZJ9Yv0TV0i1F3q+9olo94cWZz9Vygujwh
KQ2FOGu5DUzYgNlOwxlvYVPJNUUVcjR0i0O/lsYVfknKV95dcpaZ4HgJMvXc6pn/
Yz2yCls6FGpO9oAqCnvonJ4rK0piV85Z8ir6tM82kYnBSaiCahxNk2RIH13jv4Yq
S7h1
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:29:47 2026 by rpki-client