Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/326131333a633863333a653866643a3a2f34382d3438203d3e20323139323036.roa
File: 326131333a633863333a653866643a3a2f34382d3438203d3e20323139323036.roa (raw, json)
Hash identifier: IlN/sUhJSdHCGQX30n3DTb5k4laSmUcUwvlCZ9aHIOo=
Subject key identifier: C4:93:F8:B4:23:6C:77:B7:08:9C:01:B1:25:ED:42:EF:5B:CF:BE:94
Certificate issuer: /CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3
Certificate serial: 15AC868447F13987395AC880CC2123622007F542
Authority key identifier: AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/326131333a633863333a653866643a3a2f34382d3438203d3e20323139323036.roa
Signing time: Mon 20 Jul 2026 10:59:45 +0000
ROA not before: Mon 20 Jul 2026 10:54:45 +0000
ROA not after: Mon 19 Jul 2027 10:59:45 +0000
asID: 219206
IP address blocks: 2a13:c8c3:e8fd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:ac:86:84:47:f1:39:87:39:5a:c8:80:cc:21:23:62:20:07:f5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3
Validity
Not Before: Jul 20 10:54:45 2026 GMT
Not After : Jul 19 10:59:45 2027 GMT
Subject: CN=C493F8B4236C77B7089C01B125ED42EF5BCFBE94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1d:ca:01:41:ea:1b:5f:a6:f7:76:5c:06:49:
ef:b7:ea:09:d7:44:a9:71:af:ab:da:69:3c:22:1e:
a8:9f:12:03:7a:c5:ce:75:b4:0d:86:da:1f:5b:7b:
02:61:6d:4f:1e:2e:4c:d6:57:c9:cb:b7:19:f4:a8:
a2:0f:83:ea:48:e1:a6:12:05:ec:91:5f:ea:7c:ea:
0c:dc:e8:40:4f:85:4d:87:3b:24:c2:35:df:b8:c7:
4a:e0:e0:ca:eb:9e:7f:ae:12:02:d2:37:a4:9f:f9:
66:71:58:ed:cf:1d:a3:1d:0d:fd:d4:bb:aa:c9:cd:
e0:29:7a:2f:df:ba:73:17:e6:54:d2:fb:7c:8d:b4:
e5:b5:93:80:e8:e1:88:1e:22:cf:00:8a:ce:c2:fa:
0a:44:75:42:6b:18:6b:09:06:47:33:1a:be:39:02:
fd:dd:1f:5e:75:7d:36:70:fb:cb:ce:5e:4d:b0:c5:
ab:c1:19:53:02:c1:66:9d:ad:3f:0f:d1:a7:c4:b4:
2e:3e:4b:f7:aa:da:b7:69:2a:5c:15:e1:94:e2:b6:
ce:42:29:26:8d:71:0b:bd:bb:2e:65:2d:ae:37:bd:
bf:62:11:4a:be:19:13:78:62:15:3f:06:53:16:e5:
a5:ae:b0:df:0f:de:4b:1f:b0:9a:4c:18:89:21:f1:
d1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:93:F8:B4:23:6C:77:B7:08:9C:01:B1:25:ED:42:EF:5B:CF:BE:94
X509v3 Authority Key Identifier:
keyid:AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/326131333a633863333a653866643a3a2f34382d3438203d3e20323139323036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c8c3:e8fd::/48
Signature Algorithm: sha256WithRSAEncryption
1e:14:6b:ec:76:a7:4d:23:bf:3f:67:20:ef:3b:0f:38:41:80:
63:c8:6c:b7:08:95:bc:7e:d5:0d:bb:8e:56:c5:19:c5:d7:de:
1f:55:56:6d:1d:79:5c:e7:a3:96:ec:79:e6:30:d7:d0:16:58:
c5:1c:99:d7:34:4f:ca:77:45:54:40:3d:f0:02:ac:17:f8:43:
2f:92:ed:c8:90:79:99:b0:d2:38:fc:55:8e:29:94:c9:f2:fb:
04:7f:16:38:20:3d:63:ea:11:0d:96:4b:e4:e0:42:47:bb:eb:
4d:4f:aa:25:1f:4c:0d:2b:8d:4e:9c:95:5e:37:88:ed:9b:15:
1d:e2:78:11:29:8a:50:8d:17:b9:d7:66:88:b0:35:89:6e:17:
0a:2c:ee:25:81:06:c0:7e:98:c2:05:96:73:cd:4a:86:40:ba:
35:ec:81:a1:4a:f3:cb:ee:5c:63:a5:9f:ea:1a:e9:af:28:2a:
75:1c:07:d6:d3:b1:d8:68:9b:39:20:81:f7:a5:e8:fb:7d:fa:
6f:64:fb:39:84:97:e5:c7:e6:a2:ee:8e:a2:5b:90:3f:8c:bd:
09:78:5f:0b:aa:c9:1f:e3:24:06:7c:82:10:79:26:72:2f:41:
fa:c1:2d:ba:12:55:7d:0f:03:f7:06:65:56:1f:70:7c:3e:4b:
cd:0f:27:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:19:37 2026 by rpki-client