Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/326131333a633863333a653866653a3a2f34382d3438203d3e20323139323036.roa
File: 326131333a633863333a653866653a3a2f34382d3438203d3e20323139323036.roa (raw, json)
Hash identifier: cBnuTUV5sq1PGF66jfHFR+8hB6S8u70t9V8V7QlajEI=
Subject key identifier: AF:C5:AE:4D:93:8B:B0:C4:AA:8F:1A:7C:34:9A:76:08:22:ED:17:AF
Certificate issuer: /CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3
Certificate serial: 39380FBE569F3E30E66FDF8BF8CA13A0043A9CBB
Authority key identifier: AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/326131333a633863333a653866653a3a2f34382d3438203d3e20323139323036.roa
Signing time: Mon 20 Jul 2026 10:56:22 +0000
ROA not before: Mon 20 Jul 2026 10:51:22 +0000
ROA not after: Mon 19 Jul 2027 10:56:22 +0000
asID: 219206
IP address blocks: 2a13:c8c3:e8fe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:38:0f:be:56:9f:3e:30:e6:6f:df:8b:f8:ca:13:a0:04:3a:9c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3
Validity
Not Before: Jul 20 10:51:22 2026 GMT
Not After : Jul 19 10:56:22 2027 GMT
Subject: CN=AFC5AE4D938BB0C4AA8F1A7C349A760822ED17AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3b:87:b3:38:a8:da:10:ed:7f:7a:19:44:65:
54:65:1b:e8:54:76:47:de:8b:a5:27:2c:b5:a8:a8:
94:e6:a5:30:71:00:19:cb:68:52:60:f9:6f:eb:62:
4a:b7:09:3e:c6:69:da:b1:ea:5d:3e:e7:a0:1d:83:
a7:d4:d6:5c:df:07:aa:90:8f:2c:49:5d:f4:50:b8:
ce:50:a5:6e:79:6b:7f:4f:2d:96:54:7c:e6:42:61:
16:f7:00:e6:cc:29:71:3e:77:b2:29:8c:74:35:80:
c7:0a:46:30:06:76:dd:f1:6e:b0:6b:f4:1a:8d:10:
3e:52:6b:69:39:33:fa:05:1a:16:47:aa:97:d6:74:
c1:c9:be:c4:dc:9b:69:bf:24:49:77:85:fd:dc:a3:
e1:bb:c8:02:45:49:21:70:cc:b9:38:ab:2b:5e:47:
f5:6f:23:75:ef:c0:d1:b6:e9:39:9e:06:e6:86:91:
9f:c5:24:06:0a:39:37:f7:d6:d0:d3:79:a2:9f:4a:
14:ba:ce:9a:f4:52:f1:37:bb:96:bf:37:30:f6:d3:
8a:ea:07:c1:20:a4:cf:42:29:80:ef:e3:8c:4d:c6:
5e:43:d5:5f:c1:bd:d5:f8:57:68:7b:1d:9a:7b:15:
95:8a:06:77:7e:41:98:3b:4d:99:7b:22:27:90:d7:
f4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C5:AE:4D:93:8B:B0:C4:AA:8F:1A:7C:34:9A:76:08:22:ED:17:AF
X509v3 Authority Key Identifier:
keyid:AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/326131333a633863333a653866653a3a2f34382d3438203d3e20323139323036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c8c3:e8fe::/48
Signature Algorithm: sha256WithRSAEncryption
18:55:9e:63:6c:ea:58:ca:6c:7e:6b:48:3d:c5:5b:1a:ea:bf:
6b:b2:a7:f6:59:3e:21:ff:07:ee:0d:7a:40:03:5b:e4:e7:29:
81:d5:d8:0d:15:4d:cb:64:af:20:d3:06:ae:da:1c:95:17:41:
a0:a0:ff:b8:a1:f9:83:00:f5:69:46:ae:6c:ba:3f:2f:2e:7a:
f2:e3:22:9c:85:0c:32:f2:bd:a5:d2:a9:c5:fa:36:a4:83:d5:
2e:d5:05:68:c4:ef:d8:15:e3:1f:05:1b:3e:5e:a0:cd:d7:1c:
01:08:7f:58:df:6a:c4:34:3c:c6:b8:c8:12:79:46:f4:d1:84:
14:a8:08:62:a1:57:6d:9c:b7:17:a1:d9:70:d2:39:0f:ac:64:
cd:19:4d:3a:61:ae:72:1d:4f:cf:c0:6f:e0:a5:70:6f:e9:87:
39:38:ac:5a:c1:8a:ff:7e:c2:dc:55:09:e3:d6:aa:30:45:b9:
de:bd:75:5a:c2:f1:14:c2:49:4a:70:56:f3:55:5e:f4:e7:2b:
a9:37:e0:f6:f4:bd:1b:70:59:c1:84:f9:88:90:a6:30:8d:66:
ca:4b:c0:20:27:b2:38:0a:2d:49:fc:75:d1:2b:c3:f9:b7:17:
04:d0:64:af:85:23:d9:dc:43:22:2b:78:26:24:51:68:80:ee:
95:4a:73:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:19:36 2026 by rpki-client