Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/323030313a316236303a3a2f32392d3239203d3e203331313033.roa
File: 323030313a316236303a3a2f32392d3239203d3e203331313033.roa (raw, json)
Hash identifier: IDJpBTlbA0zB9ZyBzvTPpf9quJ1M7hPWCUkYBwYIZlE=
Subject key identifier: A0:E1:91:9D:3E:52:32:60:C8:86:F5:53:AF:7C:40:8D:34:62:54:2B
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 27A2B923EBA6B232C1A6C2D099FB6F6365463FEB
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/323030313a316236303a3a2f32392d3239203d3e203331313033.roa
Signing time: Fri 03 Apr 2026 10:46:59 +0000
ROA not before: Fri 03 Apr 2026 10:41:59 +0000
ROA not after: Fri 02 Apr 2027 10:46:59 +0000
asID: 31103
IP address blocks: 2001:1b60::/29 maxlen: 29
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 17:50:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:a2:b9:23:eb:a6:b2:32:c1:a6:c2:d0:99:fb:6f:63:65:46:3f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Apr 3 10:41:59 2026 GMT
Not After : Apr 2 10:46:59 2027 GMT
Subject: CN=A0E1919D3E523260C886F553AF7C408D3462542B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f6:ed:ee:2b:4e:1b:db:ed:ba:ad:22:02:79:
ce:d6:9f:d5:ce:76:d8:96:26:b1:aa:9f:5d:c5:ba:
ef:b3:ff:a2:27:54:82:90:d7:45:12:ca:6a:77:4d:
b6:64:1a:b9:a4:dd:da:f9:d3:b9:54:bf:e2:1b:4a:
6c:ee:a9:bb:b9:4a:7c:1d:1e:64:99:a1:f4:da:64:
77:87:d9:7b:c2:c4:0d:27:0c:4b:64:04:e9:e9:56:
da:ee:46:08:20:37:b9:97:2b:79:84:bf:bb:f5:78:
d4:c4:52:b4:05:29:ef:3c:d4:98:18:fb:34:19:73:
07:ad:fd:a2:51:da:eb:c5:78:4f:01:e8:70:59:97:
2c:40:5d:2e:1b:83:93:f3:9c:b1:23:b9:4c:ee:1a:
42:67:90:0f:c4:17:15:f5:47:5f:19:38:96:f3:bb:
3a:5c:22:0a:48:b5:d7:73:43:a3:34:f2:97:de:60:
fd:6c:7a:e9:15:fd:48:91:dc:49:a3:f9:3a:83:23:
ee:0d:a0:0f:8f:bf:1c:2c:7b:75:5d:4e:ed:1b:92:
60:9a:89:37:81:0c:79:1f:7a:f3:3d:34:13:42:ce:
fe:3e:d9:f8:71:0e:d5:a0:b1:c0:1c:b2:97:9d:bf:
13:f0:7d:91:ce:41:d7:c5:9a:37:be:bb:35:2b:cc:
a9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E1:91:9D:3E:52:32:60:C8:86:F5:53:AF:7C:40:8D:34:62:54:2B
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/323030313a316236303a3a2f32392d3239203d3e203331313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1b60::/29
Signature Algorithm: sha256WithRSAEncryption
2c:7a:1a:ac:72:c5:ba:46:86:05:0d:33:13:75:5b:54:8f:f9:
e9:06:ce:21:48:b7:13:4f:ae:54:a3:a2:42:d3:01:39:96:70:
04:0c:a2:e9:70:08:32:ec:97:d2:c4:e0:5f:bf:23:f9:ec:46:
f9:a0:96:e0:26:ae:ee:65:7a:a8:26:67:b7:81:e5:d7:1f:34:
6e:aa:03:d8:dc:6e:3c:db:ef:f2:25:c7:9c:a1:57:9a:15:ee:
aa:49:fc:16:ef:7e:01:a0:9a:e7:1a:1a:d4:d7:7f:96:7c:c1:
49:e4:b0:f2:54:0b:f8:c3:07:61:70:12:0c:a0:ed:4d:12:4e:
6b:59:9b:d6:9c:bd:40:40:c0:3d:40:48:af:aa:84:64:21:da:
09:7b:6e:ae:c7:53:4f:eb:68:44:65:69:48:9f:1c:49:59:11:
a9:69:62:e7:e2:3a:85:28:40:2a:42:0c:8a:39:eb:2a:c7:15:
88:26:86:a1:bb:69:4c:6f:c2:43:5b:d8:96:a8:f2:cc:75:35:
60:7c:2e:d9:22:07:24:ab:2c:05:df:40:6b:a0:9f:16:cd:de:
77:cc:02:d4:d4:5a:42:d1:9a:b1:20:0c:ae:d6:1f:df:3b:94:
4f:74:5d:f8:58:12:89:26:f4:fb:42:ca:53:b7:ba:4f:0c:5b:
37:31:15:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:04:25 2026 by rpki-client