Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/323030313a3766383a38393a3a2f34382d3634203d3e203438323830.roa
File: 323030313a3766383a38393a3a2f34382d3634203d3e203438323830.roa (raw, json)
Hash identifier: /fv5q3VyJ+dUoDJp3H9zfl0tBQO0ZzmuRjsXdxMQJvo=
Subject key identifier: 6E:3D:62:1C:8F:14:97:DA:CA:E2:C0:BA:A6:7B:AE:20:0F:A8:26:68
Certificate issuer: /CN=e7585b5cd477d90075cdb63109f57279766c2976
Certificate serial: 407659C3254E5B126ED5A01FC586CEF437C2D8AA
Authority key identifier: E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/323030313a3766383a38393a3a2f34382d3634203d3e203438323830.roa
Signing time: Mon 12 Oct 2026 10:51:40 +0000
ROA not before: Mon 12 Oct 2026 10:46:40 +0000
ROA not after: Mon 11 Oct 2027 10:51:40 +0000
asID: 48280
IP address blocks: 2001:7f8:89::/48 maxlen: 64
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl
rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft
rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:76:59:c3:25:4e:5b:12:6e:d5:a0:1f:c5:86:ce:f4:37:c2:d8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7585b5cd477d90075cdb63109f57279766c2976
Validity
Not Before: Oct 12 10:46:40 2026 GMT
Not After : Oct 11 10:51:40 2027 GMT
Subject: CN=6E3D621C8F1497DACAE2C0BAA67BAE200FA82668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9b:a7:23:5a:a6:a1:bb:32:ae:aa:0b:a7:81:
be:f4:5c:93:87:bc:b6:59:dd:b4:20:84:29:9b:02:
a9:1c:08:9c:04:6d:6b:67:6d:27:93:72:e1:53:19:
35:8b:6d:68:90:34:a6:ad:a4:e0:65:35:92:00:e8:
7d:5d:b1:0e:89:75:1d:1b:59:2e:77:da:51:58:8b:
25:2c:ac:f0:41:9b:ad:a6:65:6e:c6:98:2e:81:8d:
8f:5d:6e:2d:b1:56:4f:cc:83:ae:8e:57:15:c8:aa:
46:c4:34:64:5e:22:5c:c9:73:64:63:cf:9f:80:49:
02:4d:ec:ee:65:d2:19:46:f1:8b:38:17:f8:d6:de:
94:f9:da:f3:97:3d:27:0e:e4:e2:9e:8e:a3:13:f6:
97:62:e5:d0:88:49:e8:dd:73:8f:9c:17:e5:3a:af:
b7:5e:43:5a:7e:93:7f:31:79:8c:0b:22:de:7a:b2:
70:13:39:05:f6:ad:00:e6:e6:30:46:cf:28:2e:33:
15:f3:21:ac:d3:51:4b:fc:b1:a7:57:af:c6:58:69:
90:b9:c7:2f:d4:e9:e8:99:77:60:96:17:92:53:95:
e2:de:1e:4a:d6:d9:a2:43:2a:45:f1:73:56:bc:63:
d9:6e:60:c1:19:0e:fa:72:6f:04:a3:4f:90:70:b7:
c1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3D:62:1C:8F:14:97:DA:CA:E2:C0:BA:A6:7B:AE:20:0F:A8:26:68
X509v3 Authority Key Identifier:
keyid:E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/323030313a3766383a38393a3a2f34382d3634203d3e203438323830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:7f8:89::/48
Signature Algorithm: sha256WithRSAEncryption
86:a9:5c:b4:70:04:55:d6:ab:a7:e3:1e:42:56:41:d8:ef:91:
09:d5:b9:f9:95:33:d1:8f:61:93:cc:d3:23:b9:1b:90:0e:3b:
8e:e9:2e:a0:52:d4:f9:6b:b6:05:b7:13:2b:be:f1:ae:f7:ce:
51:bd:17:be:b9:5e:bc:a3:ac:b5:13:f3:49:f6:bf:17:5a:38:
46:31:f7:be:46:9a:99:39:56:2d:9f:54:d1:c2:9c:bf:32:a3:
06:03:a8:7c:ea:81:ff:a4:55:b0:6a:f2:ac:63:6e:fc:2f:2b:
7f:93:77:f7:b3:f5:f6:00:9d:d1:e0:89:3f:5e:e1:6a:48:51:
36:85:66:ab:fd:08:3b:6a:a2:f0:00:56:e3:56:60:ac:26:3f:
bc:a6:78:4c:6d:61:6e:3e:16:63:b7:fb:10:72:5b:65:87:98:
db:85:4d:5e:10:71:bf:22:af:5e:6f:07:c9:cb:83:54:ab:26:
f5:dd:a7:ab:e1:2c:f1:01:38:fb:c9:06:6f:9d:0f:f8:72:80:
ff:fb:78:07:4e:90:04:8d:2c:37:9a:4d:6e:e7:7c:dc:84:7e:
c7:2f:d3:65:de:aa:9c:d1:d9:97:8b:1f:86:c7:8e:7c:46:43:
23:e4:35:f5:e6:3e:f6:97:fc:57:45:ac:7e:50:ea:0d:d6:5f:
df:af:5e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 17:16:58 2026 by rpki-client