Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa
File: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (raw, json)
Hash identifier: L9N61GZrgQ5virt2qFxgsc/JOkknEDcdSanMcULWk5s=
Subject key identifier: 97:A3:F9:AB:98:0E:91:FB:08:3E:0F:C2:75:18:EB:5A:4F:46:FD:80
Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial: 6B5BCC0E83FA7318AB1DE11D72FAACB52DFDA65F
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa
Signing time: Mon 28 Sep 2026 21:42:24 +0000
ROA not before: Mon 28 Sep 2026 21:37:24 +0000
ROA not after: Mon 27 Sep 2027 21:42:24 +0000
asID: 202704
IP address blocks: 2a0d:b287:ea00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:5b:cc:0e:83:fa:73:18:ab:1d:e1:1d:72:fa:ac:b5:2d:fd:a6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Validity
Not Before: Sep 28 21:37:24 2026 GMT
Not After : Sep 27 21:42:24 2027 GMT
Subject: CN=97A3F9AB980E91FB083E0FC27518EB5A4F46FD80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:64:71:a6:e2:2b:3d:f9:2c:a7:7d:7b:9d:62:
33:32:4f:1d:e6:56:21:5e:8b:0c:3e:14:4a:37:18:
d0:42:91:39:71:a4:12:54:58:d5:f6:9f:86:56:49:
2b:11:3f:12:db:f0:e4:43:c5:8f:b8:69:73:50:11:
47:ae:55:37:ea:3f:9b:99:28:ff:8c:ce:92:9e:3b:
0f:85:be:1e:91:85:01:3f:70:bd:eb:0c:f2:27:36:
50:42:22:c7:31:f1:08:4e:de:91:0e:ed:7f:e7:3b:
be:75:f1:fb:08:9b:e7:aa:2c:7c:71:a2:ca:12:a1:
f7:fd:4c:94:ef:5d:13:20:21:ba:16:d2:fd:60:4b:
87:dd:0d:f1:c7:f1:1b:44:87:f8:50:26:95:19:7f:
99:ee:7d:2c:6e:23:c0:24:c5:ee:2e:a4:a7:14:e7:
ff:54:b4:82:c6:3e:3f:42:f5:19:ea:9a:25:ca:0f:
31:76:7d:3f:80:a2:47:7f:52:21:61:06:fd:b5:39:
15:2f:69:90:7a:c8:b5:7a:80:30:89:2f:11:bc:10:
b4:e4:a1:ab:82:be:df:b4:a7:93:15:5e:a6:49:d4:
a2:5a:05:4d:d7:61:83:94:c4:71:f0:c8:fc:fe:49:
34:88:19:67:6f:f3:8e:c8:ca:48:39:f7:43:75:0e:
3b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A3:F9:AB:98:0E:91:FB:08:3E:0F:C2:75:18:EB:5A:4F:46:FD:80
X509v3 Authority Key Identifier:
keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b287:ea00::/40
Signature Algorithm: sha256WithRSAEncryption
82:28:0b:65:cf:66:84:a8:01:91:92:94:76:c9:8f:ff:29:84:
e3:9e:2b:c0:0e:d6:fa:9d:ae:a6:e2:c7:63:64:4e:29:23:d0:
d2:c3:ca:c2:9c:95:36:e8:72:e9:e4:0e:e3:ab:a5:ef:be:f9:
2d:b5:b7:89:09:51:51:91:e0:cf:3e:2a:4f:91:65:91:ae:fb:
b7:1e:94:22:29:7c:21:d8:d2:85:37:b0:8d:dd:24:0c:d7:97:
2f:df:f0:9d:2b:8e:61:1f:91:35:2d:1d:d6:94:3f:f0:51:3b:
24:d1:c8:c5:79:1d:e6:cc:47:f1:a7:6b:38:69:b4:73:76:91:
f9:72:c0:b4:e6:98:36:38:a9:6f:c1:0d:11:70:6e:06:06:1b:
59:ce:14:75:ec:d3:94:14:eb:5b:af:d5:f6:7c:7a:81:5d:ca:
03:73:08:e2:66:31:c9:a9:75:f0:da:18:20:92:f4:1a:ed:47:
27:73:3c:23:fe:53:30:9a:d4:fa:c3:94:4f:78:ae:00:01:a8:
74:0f:a4:a3:21:e8:51:4f:55:be:9d:62:26:fa:33:74:ff:c5:
48:d2:be:ea:32:5f:b4:c7:e7:2d:21:25:2f:77:8a:0b:82:79:
95:ed:84:99:94:77:2a:c7:7c:d5:f9:03:cf:9e:0c:08:26:11:
74:4f:22:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:14:10 2026 by rpki-client