Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3230383a3a2f34382d3438203d3e20313532333230.roa
File: 326130663a316363353a3230383a3a2f34382d3438203d3e20313532333230.roa (raw, json)
Hash identifier: GpoMSMqtgBF7h9hQrwSakSkDmdLr4tQzMdomBvAoSw4=
Subject key identifier: DC:EB:A1:82:1D:51:01:0A:5B:5A:25:BB:53:D1:36:9E:D1:B6:35:B8
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 7FE740DD6F5FFC1C227E0D96410D3F18DAF3FAF0
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3230383a3a2f34382d3438203d3e20313532333230.roa
Signing time: Mon 21 Sep 2026 23:38:08 +0000
ROA not before: Mon 21 Sep 2026 23:33:08 +0000
ROA not after: Mon 20 Sep 2027 23:38:08 +0000
asID: 152320
IP address blocks: 2a0f:1cc5:208::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:e7:40:dd:6f:5f:fc:1c:22:7e:0d:96:41:0d:3f:18:da:f3:fa:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Sep 21 23:33:08 2026 GMT
Not After : Sep 20 23:38:08 2027 GMT
Subject: CN=DCEBA1821D51010A5B5A25BB53D1369ED1B635B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:26:d9:ac:ee:19:59:ca:5e:4c:0c:e4:a2:
94:c3:df:bc:06:91:cb:22:50:16:fe:0a:84:f7:46:
2d:29:a2:dd:67:2d:2e:68:4a:c7:ad:16:cc:16:6e:
0e:21:0d:11:d2:ca:a8:b3:bf:0e:60:83:e7:6c:d5:
7e:98:30:9b:eb:21:7a:69:0e:12:1c:5e:19:14:c6:
53:1c:61:99:1b:0a:54:ae:70:99:07:99:72:cb:58:
99:55:f2:4d:c2:f2:8e:e3:ba:f1:82:1f:57:1b:43:
1f:86:0b:0e:96:8b:a2:40:a8:8c:b2:a6:5e:06:4b:
79:39:36:e1:d5:e0:c3:31:1b:4b:17:38:e3:75:bb:
f1:39:05:8a:05:52:30:63:00:75:3e:e6:c5:d5:de:
53:c7:d8:8a:f2:c0:ca:fe:c6:93:15:0f:98:8b:28:
44:de:f8:e2:b2:0d:c2:2e:c0:4f:ac:44:84:35:e9:
0b:e7:06:0a:8d:26:68:f7:a5:18:b6:12:9e:3b:01:
45:5a:fb:48:33:6e:ce:b9:66:05:87:5e:56:96:5c:
a6:c3:5d:4e:d7:58:94:38:c0:0e:07:e7:dd:19:86:
0c:19:aa:0b:29:d1:6d:5d:4d:0d:52:30:9a:bf:5e:
ef:79:98:60:8b:be:88:3b:90:7e:a6:77:15:b8:96:
50:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EB:A1:82:1D:51:01:0A:5B:5A:25:BB:53:D1:36:9E:D1:B6:35:B8
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3230383a3a2f34382d3438203d3e20313532333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:208::/48
Signature Algorithm: sha256WithRSAEncryption
8b:fc:6b:cb:b0:9b:40:16:72:fc:45:63:10:da:15:e1:1d:e7:
e6:03:a5:70:5a:b2:17:4e:87:0d:fb:b9:e4:1b:70:42:f5:be:
1c:a3:df:5e:6d:bb:03:60:ed:7a:e1:65:49:2c:12:d3:df:54:
71:26:3b:04:e5:94:fa:ce:dd:a8:8a:5c:c9:fe:4d:81:29:bc:
4f:7c:16:8a:ce:82:70:3e:63:44:63:0a:5e:38:de:20:52:b5:
bb:8a:15:fd:7a:64:aa:85:d8:08:bc:e6:f7:7a:d7:49:e1:2d:
06:22:75:f5:6f:1c:6c:f9:a7:d4:de:16:5d:eb:21:65:89:3f:
45:2b:3c:79:31:4b:83:e4:94:f4:95:96:ee:22:25:dc:ab:6c:
aa:1b:40:b7:c0:93:d6:fe:05:4e:31:40:6d:fa:a2:e5:82:47:
fd:88:37:74:5c:2a:76:a0:a5:9f:38:3e:a7:7c:2d:45:02:09:
b4:cb:89:e1:d7:00:87:3b:03:0b:8c:cb:56:be:42:a9:a7:c9:
98:f3:49:5b:21:2a:af:70:de:91:01:1c:66:2f:26:2f:10:8a:
81:d1:77:cd:8e:d6:3f:e1:19:84:6d:7a:15:ae:ae:e3:46:09:
bf:98:25:00:51:15:eb:eb:23:ef:10:22:15:ce:73:a9:f4:76:
19:3f:1f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:37:21 2026 by rpki-client