Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343930303a3a2f34302d3438203d3e20323139323130.roa
File: 326130663a316363353a343930303a3a2f34302d3438203d3e20323139323130.roa (raw, json)
Hash identifier: uGn8J8SJ4DwAfPgLHZQCmCeTdpcMMk0AvnEmVRXv9/I=
Subject key identifier: 73:52:F1:77:7E:68:89:5B:5F:A7:58:C4:E9:EA:26:15:02:CF:C2:37
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 0D3D42E073815FD0D5D0BD6713B09F3E858DF86A
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343930303a3a2f34302d3438203d3e20323139323130.roa
Signing time: Sun 19 Jul 2026 14:16:22 +0000
ROA not before: Sun 19 Jul 2026 14:11:22 +0000
ROA not after: Sun 18 Jul 2027 14:16:22 +0000
asID: 219210
IP address blocks: 2a0f:1cc5:4900::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:3d:42:e0:73:81:5f:d0:d5:d0:bd:67:13:b0:9f:3e:85:8d:f8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jul 19 14:11:22 2026 GMT
Not After : Jul 18 14:16:22 2027 GMT
Subject: CN=7352F1777E68895B5FA758C4E9EA261502CFC237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:20:50:c0:bc:68:64:ef:f4:6f:fb:7f:3a:58:
b9:aa:b5:b5:ab:07:df:41:a4:a6:47:a9:09:2c:1d:
ec:c0:70:c8:ca:d4:a6:85:70:f8:44:92:82:80:f4:
f5:70:68:88:f8:53:44:52:68:67:3d:34:c4:cc:60:
33:a5:77:e8:54:1e:c7:f1:64:42:ce:6b:a8:9e:e8:
d8:08:e1:b8:1e:9f:59:89:0b:44:f7:52:56:14:51:
ae:d4:be:77:4a:59:cf:ae:43:fe:e1:32:de:c1:3a:
0a:e0:59:a2:63:1d:b5:d4:68:9d:ec:6c:b5:23:4c:
fd:98:3c:57:3b:60:6b:94:4f:7e:52:99:a1:83:c5:
cc:6e:42:4f:62:40:bd:31:07:ba:2d:c2:8c:80:ab:
99:df:ae:be:78:61:41:9b:38:20:80:ee:5d:49:6c:
c0:35:41:da:86:bb:70:48:b5:83:42:f0:f9:54:fa:
ec:d1:af:d9:75:ac:35:a9:e8:b9:f4:f0:1b:39:47:
6f:53:0b:73:e7:4a:2e:20:30:ea:fa:f4:9e:a5:dd:
00:1b:b1:74:0b:fd:38:da:ea:3b:71:74:f9:31:cf:
75:a2:3b:9e:82:30:97:0c:31:8e:0a:77:e9:95:69:
4d:51:b2:16:cb:6d:48:cd:3d:09:e7:63:e5:04:a0:
ab:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:52:F1:77:7E:68:89:5B:5F:A7:58:C4:E9:EA:26:15:02:CF:C2:37
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a343930303a3a2f34302d3438203d3e20323139323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:4900::/40
Signature Algorithm: sha256WithRSAEncryption
04:f8:52:4a:d0:98:71:d6:8b:2d:24:27:ea:86:5d:92:ac:47:
cf:13:62:79:34:d0:0d:22:2a:65:43:3c:e8:1f:05:9c:67:a5:
66:54:66:aa:b5:fb:19:64:b6:f0:41:65:d1:eb:9e:2a:74:60:
1b:e6:41:64:55:54:06:9d:a3:4a:9f:b3:74:b3:2b:a1:25:2c:
2a:60:40:3c:29:29:a6:a3:a2:29:c9:20:b5:8f:a9:1f:96:a3:
90:84:e4:3d:e6:0b:18:40:61:ae:f9:08:2c:73:25:eb:64:8b:
33:83:c6:d9:2a:87:f9:b9:e1:a5:b9:bc:6d:27:97:1c:a9:4c:
db:83:0c:a1:6e:cd:7e:0f:3a:96:43:b8:9d:39:6a:4e:1d:7d:
2a:c0:f9:2f:09:6f:42:fb:02:4b:50:b5:59:b2:f0:b0:e7:75:
27:f6:f7:70:47:6a:0a:66:1f:71:41:36:55:5e:20:29:4b:13:
f2:de:b9:ed:48:52:77:97:0a:b5:44:a3:5f:b7:89:aa:75:a5:
b3:f6:44:07:fd:2d:db:d4:fc:e6:2b:70:d7:1f:b8:e7:e9:f1:
7d:4b:b8:10:fc:a9:80:3c:cb:d3:ff:c3:7c:c4:dc:85:8a:e0:
17:ac:44:7c:5b:91:5e:f7:b5:63:6a:52:fd:f2:c7:08:ae:bb:
4b:4e:a0:c4
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUDT1C4HOBX9DV0L1nE7CfPoWN+GowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWJlMjQwMDIxYTI4N2YyOTg5NzNkOWVhMjhkZmM4MDcz
NWZkNTgwMDAeFw0yNjA3MTkxNDExMjJaFw0yNzA3MTgxNDE2MjJaMDMxMTAvBgNV
BAMTKDczNTJGMTc3N0U2ODg5NUI1RkE3NThDNEU5RUEyNjE1MDJDRkMyMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqIFDAvGhk7/Rv+386WLmqtbWr
B99BpKZHqQksHezAcMjK1KaFcPhEkoKA9PVwaIj4U0RSaGc9NMTMYDOld+hUHsfx
ZELOa6ie6NgI4bgen1mJC0T3UlYUUa7UvndKWc+uQ/7hMt7BOgrgWaJjHbXUaJ3s
bLUjTP2YPFc7YGuUT35SmaGDxcxuQk9iQL0xB7otwoyAq5nfrr54YUGbOCCA7l1J
bMA1QdqGu3BItYNC8PlU+uzRr9l1rDWp6Ln08Bs5R29TC3PnSi4gMOr69J6l3QAb
sXQL/Tja6jtxdPkxz3WiO56CMJcMMY4Kd+mVaU1RshbLbUjNPQnnY+UEoKshAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUc1Lxd35oiVtfp1jE6eomFQLPwjcwHwYDVR0j
BBgwFoAUG+JAAhoofymJc9nqKN/IBzX9WAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0
ZjBlLzAvMUJFMjQwMDIxQTI4N0YyOTg5NzNEOUVBMjhERkM4MDczNUZENTgwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ctSkFBaG9vZnltSmM5bnFLTl9JQnpY
OVdBQS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt
M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzM1
M2EzNDM5MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzOTMyMzEzMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoPHMVJMA0GCSqGSIb3DQEBCwUAA4IBAQAE+FJK0Jhx1ostJCfq
hl2SrEfPE2J5NNANIiplQzzoHwWcZ6VmVGaqtfsZZLbwQWXR654qdGAb5kFkVVQG
naNKn7N0syuhJSwqYEA8KSmmo6IpySC1j6kflqOQhOQ95gsYQGGu+QgscyXrZIsz
g8bZKof5ueGlubxtJ5ccqUzbgwyhbs1+DzqWQ7idOWpOHX0qwPkvCW9C+wJLULVZ
svCw53Un9vdwR2oKZh9xQTZVXiApSxPy3rntSFJ3lwq1RKNft4mqdaWz9kQH/S3b
1PzmK3DXH7jn6fF9S7gQ/KmAPMvT/8N8xNyFiuAXrER8W5Fe97VjalL98scIrrtL
TqDE
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:06 2026 by rpki-client