Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343030303a3a2f34302d3438203d3e203439393632.roa
File: 326130663a316363353a343030303a3a2f34302d3438203d3e203439393632.roa (raw, json)
Hash identifier: q4E1QLGnPP6GHAMm8JDnhVrW9To/Rm9ZPv+zgnTJEIE=
Subject key identifier: F3:12:D8:41:10:D9:31:84:22:D6:34:9A:28:13:7A:BB:DF:83:90:69
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 32D6C6FB10E8B083FA004D68356424B56A6666C8
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343030303a3a2f34302d3438203d3e203439393632.roa
Signing time: Sat 18 Jul 2026 17:23:13 +0000
ROA not before: Sat 18 Jul 2026 17:18:13 +0000
ROA not after: Sat 17 Jul 2027 17:23:13 +0000
asID: 49962
IP address blocks: 2a0f:1cc5:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:d6:c6:fb:10:e8:b0:83:fa:00:4d:68:35:64:24:b5:6a:66:66:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jul 18 17:18:13 2026 GMT
Not After : Jul 17 17:23:13 2027 GMT
Subject: CN=F312D84110D9318422D6349A28137ABBDF839069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d6:44:a7:cd:34:c2:60:37:25:e8:23:0a:17:
42:34:f2:16:f2:e7:00:d5:dd:e3:62:eb:9d:ad:e4:
3f:3e:1f:a2:65:ef:0e:19:a1:ce:d0:6b:4d:b9:5c:
c1:60:5a:26:d9:74:80:aa:ce:95:6c:cc:7a:0f:51:
33:ac:27:b7:bf:56:c8:9c:aa:dd:a7:5d:dc:05:cd:
e6:ea:f5:5c:b5:d4:ca:d7:51:26:04:a1:d3:ae:c6:
a7:b4:7a:f7:39:1e:cc:6a:05:a4:e3:a5:70:28:a7:
f3:1a:28:ff:2a:ad:e5:bb:33:df:67:47:95:82:36:
4f:f1:dc:79:94:60:22:c2:0b:b3:00:00:9f:7f:23:
57:45:e4:e4:df:aa:28:30:20:61:d1:19:4e:f4:d7:
ff:2f:06:7f:2f:c5:a9:d4:64:5e:d1:9c:f8:f6:be:
40:f0:1d:51:71:be:30:35:93:9d:d2:43:1b:3a:a2:
d4:ed:90:af:27:73:03:26:08:c0:33:7c:40:f0:d1:
91:d8:8d:1e:e6:98:72:02:30:af:ca:1b:ad:7e:dd:
7e:2f:d4:6d:ed:be:93:72:60:4b:eb:28:0e:60:69:
00:79:f9:1f:a7:1d:ff:b1:b2:5e:ca:a2:26:d9:b3:
f6:b4:18:90:33:51:1e:01:24:40:95:3d:03:da:cc:
d7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:12:D8:41:10:D9:31:84:22:D6:34:9A:28:13:7A:BB:DF:83:90:69
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343030303a3a2f34302d3438203d3e203439393632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:4000::/40
Signature Algorithm: sha256WithRSAEncryption
41:83:16:4d:0e:f1:26:4f:04:00:92:31:e8:db:7b:84:40:61:
5d:c4:8b:98:81:3b:98:f8:20:0d:d9:38:3f:ee:9a:74:f3:5f:
d4:b8:3b:1a:5d:ea:dd:71:fa:0e:e7:ab:8e:db:b4:45:fb:50:
3c:59:a1:85:99:6c:16:7d:a7:87:0a:ec:c8:0d:bd:31:59:30:
f8:02:45:7a:dc:4a:71:d4:20:25:90:12:d3:92:e7:ba:e0:e5:
0d:63:c7:37:b0:46:f1:19:f3:b3:0e:fd:e3:44:91:cc:ec:99:
79:72:cb:f7:7f:0f:6e:43:c4:de:1d:67:4b:52:e9:be:16:d5:
4a:3c:fb:49:a0:c1:b3:ac:45:e5:73:a1:8e:24:95:21:d6:54:
10:8f:13:64:0b:89:48:60:bb:7e:05:2b:c5:b2:c8:ab:46:56:
b1:88:8c:bb:28:76:74:1d:26:a2:fd:e1:ef:0c:fe:78:aa:af:
42:c5:7b:b3:f7:d5:3e:31:2a:f0:55:42:b7:00:21:e5:30:4d:
5f:58:3f:aa:41:59:8c:64:ee:83:21:ce:48:1b:af:3a:65:25:
d2:1d:78:45:9d:7e:43:9b:e2:7b:1d:2f:42:ed:28:2b:79:74:
85:ee:ad:26:85:9e:50:68:29:6e:e5:2b:29:56:f5:f3:74:95:
ff:f3:18:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:25:37 2026 by rpki-client