Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa
File: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (raw, json)
Hash identifier: stUKzxp9FSabLqBbmp/31UHFmp2ltgPOF6jMIp4guIM=
Subject key identifier: 2F:DD:28:11:7E:49:B7:B3:2D:58:8A:0B:56:25:FC:E0:5E:84:A6:8C
Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial: 650521375E8FAF0AC1E5DBCCEABFD5AF0C7D14D1
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa
Signing time: Thu 17 Sep 2026 22:42:23 +0000
ROA not before: Thu 17 Sep 2026 22:37:23 +0000
ROA not after: Thu 16 Sep 2027 22:42:23 +0000
asID: 208328
IP address blocks: 2a0d:b287:ee00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 19:10:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:05:21:37:5e:8f:af:0a:c1:e5:db:cc:ea:bf:d5:af:0c:7d:14:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Validity
Not Before: Sep 17 22:37:23 2026 GMT
Not After : Sep 16 22:42:23 2027 GMT
Subject: CN=2FDD28117E49B7B32D588A0B5625FCE05E84A68C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:86:d7:74:d1:95:a0:ce:2d:ca:4a:c4:42:
f4:68:07:e2:80:8c:a6:0f:9a:5d:60:31:f0:98:ca:
50:98:09:89:f5:c7:3b:b0:98:be:17:c4:7a:69:24:
18:40:3a:72:8e:4b:7e:cd:53:88:e5:cb:d4:7f:f9:
09:09:c3:02:60:93:97:03:e5:cf:70:68:e2:a7:63:
18:e1:4a:2c:24:81:a3:44:02:d0:5d:6a:be:82:1f:
0b:0a:34:ad:e0:ea:14:36:43:23:27:40:90:b5:2f:
fc:ec:2d:e0:98:ca:76:dc:8e:1b:33:23:04:4a:de:
96:66:e2:f0:8c:d5:51:31:df:a9:73:84:17:d9:63:
1d:ef:a4:63:45:e6:f9:53:77:9d:6d:e5:ed:3a:a6:
4e:0a:73:72:77:fa:c3:ba:a5:68:af:75:db:ed:09:
16:c3:47:39:8a:aa:18:83:c7:ae:ec:29:7a:9e:32:
4f:c7:30:da:9b:7a:73:aa:b5:46:d6:e3:b5:d2:43:
08:47:68:b4:c3:07:10:1c:47:98:62:dd:57:57:d4:
dd:65:a9:98:45:12:34:c4:3e:61:e9:3f:60:3d:c0:
fc:89:aa:c8:68:e2:95:12:f5:be:b7:72:5e:0c:5a:
39:74:e1:7a:eb:44:69:01:1f:61:58:09:b4:95:78:
28:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DD:28:11:7E:49:B7:B3:2D:58:8A:0B:56:25:FC:E0:5E:84:A6:8C
X509v3 Authority Key Identifier:
keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b287:ee00::/40
Signature Algorithm: sha256WithRSAEncryption
88:e3:e6:df:85:43:85:e3:e8:3e:c7:6c:0b:54:25:c4:5e:91:
a5:d7:b6:31:c8:63:8c:b9:fe:5a:88:7e:e6:47:e4:c4:df:1e:
4b:79:f0:e9:c9:00:36:67:15:54:35:b8:c0:c3:d1:6e:bf:1a:
e7:90:21:90:cf:5f:60:27:51:13:90:09:08:ea:23:68:d9:80:
5b:94:a1:17:d9:c8:bc:45:eb:0f:51:42:c8:c0:92:57:6b:5c:
60:ff:65:f6:f1:ca:7b:43:a1:e1:6d:95:72:3c:76:e4:c6:dc:
42:99:99:e1:40:85:6a:72:e6:f2:2a:ec:20:70:33:73:3f:1a:
86:2b:6c:ed:bd:26:24:29:37:a8:4e:7d:9c:dd:7a:6f:63:a4:
94:47:3e:68:ee:30:97:c6:33:5c:a9:b0:46:84:6b:ba:0d:13:
de:9a:bf:99:6e:7a:98:31:25:5b:de:e5:cd:f2:30:41:2d:03:
d7:75:e0:23:d1:62:4c:a9:35:6a:7f:dc:4c:dc:6c:75:bc:4b:
7e:a1:69:6b:59:1f:32:c6:c2:4a:72:a9:b4:34:98:ba:11:57:
37:a4:da:e3:2a:d7:4b:b3:31:0a:bb:14:fa:6a:5c:b8:fb:83:
be:a9:e3:99:95:8e:09:90:45:9c:24:6a:d1:47:a1:cf:f9:93:
bd:b2:55:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:45:28 2026 by rpki-client