Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/326130653a666434353a326633303a3a2f34382d3438203d3e20323039333130.roa
File: 326130653a666434353a326633303a3a2f34382d3438203d3e20323039333130.roa (raw, json)
Hash identifier: Ah9wB6P+J6/u6bq6IHZMWUCN9kLwcy3+ovMQjaM+Mjs=
Subject key identifier: 5C:CD:06:65:8D:0E:00:2D:58:22:A2:89:FE:0A:90:7F:2C:E4:8F:94
Certificate issuer: /CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985
Certificate serial: 1BD7B2E1568120D0FD15459CA8C7BE0CE8DF1BBD
Authority key identifier: 7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/326130653a666434353a326633303a3a2f34382d3438203d3e20323039333130.roa
Signing time: Tue 23 Sep 2025 08:41:50 +0000
ROA not before: Tue 23 Sep 2025 08:36:50 +0000
ROA not after: Tue 22 Sep 2026 08:41:50 +0000
asID: 209310
IP address blocks: 2a0e:fd45:2f30::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl
rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft
rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:d7:b2:e1:56:81:20:d0:fd:15:45:9c:a8:c7:be:0c:e8:df:1b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985
Validity
Not Before: Sep 23 08:36:50 2025 GMT
Not After : Sep 22 08:41:50 2026 GMT
Subject: CN=5CCD06658D0E002D5822A289FE0A907F2CE48F94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:f6:e1:41:9a:65:3e:13:dd:cf:66:9d:ff:
10:b8:8b:57:16:3a:8c:fd:88:f2:a3:db:73:8b:b9:
9e:d4:47:20:4c:54:1a:bf:50:33:cc:76:c8:3f:42:
11:09:04:6a:95:4f:30:73:02:d7:51:b0:aa:b6:06:
ce:7b:05:5e:b3:d1:f2:2e:49:9e:c6:86:e4:bc:20:
3e:76:11:fa:c7:1f:2f:c4:3d:bf:e3:5e:8c:3a:c5:
b2:a9:a0:41:b5:92:2e:74:b4:fc:46:77:cf:9d:9f:
05:d8:69:3b:ab:8c:22:d7:93:49:53:7f:00:b9:41:
59:d3:25:36:3b:5c:4f:84:a7:83:69:2a:32:08:3f:
0e:45:ad:1f:c9:31:d0:e7:16:ca:b3:43:5f:2d:7a:
eb:c6:be:39:65:ec:6f:4f:ea:a3:90:35:00:14:b0:
9b:b3:d6:28:28:28:f1:8c:2c:2a:6d:c5:8d:10:f7:
26:c9:06:06:68:04:30:07:1f:78:0f:10:ea:3f:49:
6c:e2:aa:88:ec:1e:67:3f:fb:63:8c:52:4d:4e:9c:
51:fd:85:98:63:2a:8b:82:3e:06:9a:7c:f8:aa:75:
e5:34:37:44:56:01:29:b4:78:05:7a:6f:48:97:e9:
49:44:46:1c:45:ab:21:7e:eb:8b:a0:41:6f:12:4d:
0d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CD:06:65:8D:0E:00:2D:58:22:A2:89:FE:0A:90:7F:2C:E4:8F:94
X509v3 Authority Key Identifier:
keyid:7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/326130653a666434353a326633303a3a2f34382d3438203d3e20323039333130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:fd45:2f30::/48
Signature Algorithm: sha256WithRSAEncryption
31:dd:fe:07:2d:ee:12:7c:df:82:3a:cc:3f:bf:cc:31:3b:a7:
ff:61:1c:67:84:58:8b:e1:19:1e:e3:e8:14:e1:2f:f6:fa:aa:
96:6b:af:ff:d3:e3:db:70:57:05:70:7f:1c:c5:41:95:05:33:
be:67:35:ee:21:33:67:6a:99:0d:53:7e:29:dc:8c:cc:eb:2e:
2f:85:db:46:2a:d3:5f:16:49:da:50:93:52:0c:bc:76:54:f7:
83:59:8b:ba:02:3a:66:cf:be:35:18:64:83:22:f7:f9:96:a0:
72:ce:e1:90:77:5f:bb:90:7c:19:16:47:51:d2:6a:b5:18:c5:
17:98:67:a6:03:a4:c6:17:da:af:e9:0f:c8:9c:06:21:71:14:
1c:00:6c:92:af:52:24:b1:60:e8:79:07:12:1c:3e:36:95:b6:
43:13:11:f9:3c:54:18:ee:30:69:6d:78:64:29:a8:8d:a3:28:
af:0a:ef:a7:28:f1:2c:1d:1d:f5:f2:5b:8e:a1:1a:07:eb:92:
29:9b:d6:fa:f4:15:6e:cd:0f:88:b7:46:73:5c:bf:88:00:93:
2d:ec:25:8b:83:df:dc:4e:cb:ec:6e:5e:f0:f5:e5:7e:03:75:
37:42:92:c7:29:bc:aa:7a:8d:9b:86:60:61:66:c3:e9:bb:ce:
fb:26:6f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:58:52 2025 by rpki-client