Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634343a34303a3a2f34342d3438203d3e20323131343331.roa
File: 326131333a393634343a34303a3a2f34342d3438203d3e20323131343331.roa (raw, json)
Hash identifier: yP18kVyfV7/LPSJK/VwAQHRl/fMfjt7LVVAsv9PVQVA=
Subject key identifier: 43:45:30:0E:A5:2B:8A:99:EF:22:E9:CB:39:33:71:0F:03:3F:F0:A2
Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace
Certificate serial: 62043E1D524A12EC18262CF763CC13CFD52F9D7C
Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634343a34303a3a2f34342d3438203d3e20323131343331.roa
Signing time: Fri 29 May 2026 09:50:53 +0000
ROA not before: Fri 29 May 2026 09:45:53 +0000
ROA not after: Fri 28 May 2027 09:50:53 +0000
asID: 211431
IP address blocks: 2a13:9644:40::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:04:3e:1d:52:4a:12:ec:18:26:2c:f7:63:cc:13:cf:d5:2f:9d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace
Validity
Not Before: May 29 09:45:53 2026 GMT
Not After : May 28 09:50:53 2027 GMT
Subject: CN=4345300EA52B8A99EF22E9CB3933710F033FF0A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ab:a7:10:ec:09:f9:7f:00:4c:c7:a3:d9:71:
89:f0:e5:b3:59:a7:a2:8c:2b:3e:6c:d4:a0:f0:c4:
98:a4:2a:09:01:c0:f0:72:e8:19:bf:26:1f:64:76:
ba:b9:60:aa:46:ef:c7:4c:91:0b:84:82:87:e4:82:
2d:64:3b:47:1e:e0:c1:b2:1d:74:19:e4:5f:a5:c8:
ac:73:5e:43:40:84:de:31:c1:67:28:a8:f4:5a:0b:
42:f4:e8:6b:d9:84:4e:4a:69:de:84:ee:bf:67:41:
74:0f:47:a1:68:0c:df:fa:ac:7b:8d:a7:5d:8d:b9:
fb:70:3e:65:16:f4:c4:b4:d2:3d:93:86:db:3e:a6:
65:c1:cc:5e:80:d4:9a:07:90:62:01:09:da:b5:a8:
88:86:0c:2c:4d:2f:87:fe:59:13:6b:b8:6d:4a:5b:
a0:bc:1e:82:6b:14:3f:6d:5e:f2:13:04:30:1a:2f:
40:5c:c2:f5:cc:17:35:de:8d:4e:14:34:0c:c9:9a:
f4:f8:1b:95:3a:e1:97:1c:1f:c7:1b:15:72:ba:e4:
1a:b3:c3:f2:df:48:86:d7:48:3b:13:b0:3d:67:2c:
66:a3:87:dd:07:a0:54:51:94:6e:b3:06:e1:d3:a3:
d4:bc:dd:22:83:f1:4e:39:1b:dd:e0:8c:dc:94:00:
c5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:45:30:0E:A5:2B:8A:99:EF:22:E9:CB:39:33:71:0F:03:3F:F0:A2
X509v3 Authority Key Identifier:
keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634343a34303a3a2f34342d3438203d3e20323131343331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9644:40::/44
Signature Algorithm: sha256WithRSAEncryption
08:1b:fb:67:f4:b3:5b:cc:66:16:cb:b1:4e:6d:47:d1:8a:9b:
b8:e1:28:e4:6b:e2:70:09:4d:95:84:47:83:93:6d:28:f8:da:
03:47:63:5b:ba:f4:dc:72:96:55:f4:80:1b:eb:d1:54:d6:da:
7d:a7:be:3e:3f:f4:bd:24:69:a6:cb:4e:ec:cb:9c:18:61:61:
87:ba:c8:2c:c5:bf:75:ae:bb:d7:a9:c0:d0:e1:ff:b6:04:88:
54:4e:07:2e:91:c4:7b:d8:ff:98:b7:f3:21:dd:87:27:0a:84:
b4:16:a8:b2:d0:70:16:35:cb:15:4e:ed:28:0d:e4:fe:18:6d:
2b:b6:11:db:4e:d5:91:c0:00:01:98:ca:5e:d3:65:df:ac:37:
46:64:b4:ad:fc:e4:5c:5a:a4:53:97:73:de:02:51:4f:58:61:
87:b3:2c:aa:be:5b:3a:23:ea:7c:b0:f0:8d:40:9b:a0:af:74:
19:7a:3c:94:c9:24:6e:b2:6e:0f:16:ed:ce:ee:6c:c8:94:a9:
f4:41:8a:2b:5c:1e:d5:2b:47:a0:2b:78:21:39:61:16:19:f4:
0f:fd:b6:2b:87:7e:f5:4a:87:31:2b:e3:0f:c6:dd:82:d5:c3:
c8:55:19:0c:f4:70:81:7d:c4:60:0d:7d:b5:48:9a:53:b3:39:
a0:bc:6d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:18:25 2026 by rpki-client