Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/326130653a666363303a3a2f32392d3239203d3e20323031393633.roa
File: 326130653a666363303a3a2f32392d3239203d3e20323031393633.roa (raw, json)
Hash identifier: DCqLsPRZc+PDJ8j7Ex/47jWFGkQYpKwul8XioTmlCXE=
Subject key identifier: F8:4D:FA:0F:D6:70:C1:D4:AC:50:C7:F0:76:BD:EE:01:6B:06:B8:9A
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 5DCB3F7C1C5426EDA08F791E3D985EAE742C0F18
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/326130653a666363303a3a2f32392d3239203d3e20323031393633.roa
Signing time: Sat 27 Jun 2026 14:48:45 +0000
ROA not before: Sat 27 Jun 2026 14:43:45 +0000
ROA not after: Sat 26 Jun 2027 14:48:45 +0000
asID: 201963
IP address blocks: 2a0e:fcc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:cb:3f:7c:1c:54:26:ed:a0:8f:79:1e:3d:98:5e:ae:74:2c:0f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Jun 27 14:43:45 2026 GMT
Not After : Jun 26 14:48:45 2027 GMT
Subject: CN=F84DFA0FD670C1D4AC50C7F076BDEE016B06B89A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bb:e3:d5:34:64:9c:f8:2d:c4:fe:be:b1:5e:
f9:ae:c1:7c:9a:e4:e8:18:93:cc:91:af:3f:89:6a:
c0:8e:97:42:39:b6:a3:07:87:57:55:2e:c2:a4:42:
33:54:89:59:11:0d:1d:35:e4:c5:72:87:0e:32:c0:
e6:e9:c3:7a:8b:a5:dc:67:e8:28:c3:d4:39:1d:f0:
0c:b9:a1:7c:79:73:28:fc:5d:6f:b0:da:23:6a:4b:
11:34:84:f2:64:5c:89:01:0d:42:f2:70:82:b8:1c:
d1:b3:93:34:ae:57:65:a7:72:c1:85:ec:3b:7f:90:
0a:9e:06:a5:5a:c6:ab:db:a8:96:8d:14:6f:57:b4:
51:ea:97:ae:67:50:83:56:a2:39:54:d6:96:b4:40:
0a:70:aa:bd:ee:5b:a2:63:d3:1d:a4:bb:09:71:89:
4f:31:66:02:ab:bc:2c:1a:10:ca:64:87:a4:e6:a7:
18:74:f0:8a:b1:24:7c:6f:dd:3d:ca:d2:c6:18:29:
ea:77:8b:e5:1b:63:a4:17:a8:54:4c:f9:18:3d:72:
6e:ec:64:9c:01:16:36:ac:d4:be:1b:7f:c7:c6:27:
a0:7d:ea:ce:4c:65:dc:1b:09:a8:78:33:86:9e:d2:
2e:4c:28:83:4e:3a:6d:4c:51:d7:c4:81:ef:16:e0:
c7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4D:FA:0F:D6:70:C1:D4:AC:50:C7:F0:76:BD:EE:01:6B:06:B8:9A
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/326130653a666363303a3a2f32392d3239203d3e20323031393633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:fcc0::/29
Signature Algorithm: sha256WithRSAEncryption
85:f3:47:5f:b6:48:13:ec:07:34:3f:2b:19:fc:72:0b:71:25:
9f:a5:0c:83:e2:19:04:e1:94:65:63:19:7e:a1:86:e5:d8:96:
a3:da:3f:0c:5f:6b:d2:41:6e:a6:49:7d:8c:a4:1c:5b:50:81:
1d:a9:a3:ad:b2:8b:1a:30:fe:be:1e:59:84:b6:0a:b5:62:d5:
3f:60:16:e3:77:c8:cf:e3:c2:12:27:fd:05:26:41:dc:c1:1c:
a6:1b:0d:d6:c1:d8:46:cf:26:d7:5b:c8:60:52:2f:a9:e0:c9:
df:9f:49:87:b7:73:cc:fc:9c:6f:b0:3c:d6:8a:95:95:64:67:
0d:90:83:87:3d:89:f6:ba:9d:02:bc:da:4d:c0:e9:11:e0:48:
41:3e:58:d4:ba:39:90:b5:56:ad:88:59:3c:36:52:a3:bd:98:
2e:fc:bf:57:db:f1:5a:7b:2d:50:35:db:af:1f:34:04:fc:31:
ca:96:eb:98:22:68:3d:c6:fb:29:0e:d4:6c:bd:8d:c9:b6:83:
70:df:3b:6e:17:17:8f:09:12:53:c2:35:10:7a:9a:c6:33:cb:
47:85:74:c5:dd:a5:33:bd:1c:87:46:b1:d9:a3:21:88:4a:e5:
74:e1:0d:c6:be:63:58:98:13:2c:c0:4d:75:4c:50:cd:e3:17:
69:2e:b8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:01:23 2026 by rpki-client