Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/326130303a386530303a313a3a2f34382d3438203d3e203230373132.roa
File: 326130303a386530303a313a3a2f34382d3438203d3e203230373132.roa (raw, json)
Hash identifier: O/XczvICtVW578H4pujJjG0NlrBlkBVw8ic6aTFH+JU=
Subject key identifier: 51:41:D0:55:B7:AE:56:51:95:A2:05:4F:E7:B8:08:68:A5:DA:E6:93
Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Certificate serial: 115F30DDEC121EA118CC70A412BF9242249317D7
Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/326130303a386530303a313a3a2f34382d3438203d3e203230373132.roa
Signing time: Sat 15 Aug 2026 19:49:28 +0000
ROA not before: Sat 15 Aug 2026 19:44:28 +0000
ROA not after: Sat 14 Aug 2027 19:49:28 +0000
asID: 20712
IP address blocks: 2a00:8e00:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft
rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:5f:30:dd:ec:12:1e:a1:18:cc:70:a4:12:bf:92:42:24:93:17:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Validity
Not Before: Aug 15 19:44:28 2026 GMT
Not After : Aug 14 19:49:28 2027 GMT
Subject: CN=5141D055B7AE565195A2054FE7B80868A5DAE693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:e5:74:90:24:fd:40:46:ac:77:d1:5a:32:
d8:7b:72:7e:26:87:af:be:d4:c8:7a:0f:40:b0:62:
17:0a:07:89:0f:31:72:7e:f4:72:c7:ae:30:38:f6:
00:43:4f:6e:2a:fe:4e:1b:4e:0a:43:9c:30:5a:99:
29:ab:7c:eb:91:bc:3e:cf:6a:ca:d7:87:06:d3:fc:
a1:11:b5:7a:24:85:75:6c:67:90:76:6c:e5:0e:8a:
72:e7:da:8b:07:df:ff:15:0a:ba:3f:67:04:10:ea:
06:94:0b:27:c8:61:80:8f:45:6c:ab:05:18:d6:dc:
ee:68:37:2d:41:9e:6a:7d:92:3e:a5:5c:e3:ed:c5:
8e:a8:10:a5:30:b7:83:ec:89:67:72:7f:74:8f:0f:
76:cb:17:82:e2:ca:42:a9:f2:9f:d6:f6:57:b2:19:
b0:15:be:9b:28:12:77:49:bc:3f:1c:b0:2f:73:f1:
17:2a:6b:09:d1:0e:8f:7f:2e:4a:e0:2c:ec:22:a9:
4d:d4:5e:f6:b3:b9:b1:ca:30:89:de:cc:7e:e2:ab:
cc:32:49:c3:ca:89:7f:04:f8:db:c1:16:01:6d:30:
3b:d0:7c:60:df:ef:71:90:c8:04:d0:d4:e5:b8:5c:
48:8f:18:5a:79:9c:90:b5:b4:34:da:0a:4b:fd:5d:
81:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:41:D0:55:B7:AE:56:51:95:A2:05:4F:E7:B8:08:68:A5:DA:E6:93
X509v3 Authority Key Identifier:
keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/326130303a386530303a313a3a2f34382d3438203d3e203230373132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:8e00:1::/48
Signature Algorithm: sha256WithRSAEncryption
1d:5f:1d:7b:22:6a:4c:95:05:cf:44:29:d6:09:8c:ba:c7:02:
89:c5:c9:1a:7c:62:dc:f3:df:3f:9a:49:58:bf:c5:ac:43:e8:
44:c2:89:dd:61:57:85:95:ca:9b:a6:7a:e3:b3:9f:19:d8:3b:
7c:76:1e:4c:99:f7:c5:56:29:4f:d2:ad:56:bc:8a:ae:6e:38:
6c:a1:6d:5e:a0:82:46:bf:c9:ae:a7:62:6f:ec:fc:73:a2:e3:
6e:ca:45:92:89:58:07:56:bc:a0:c8:e3:c6:e9:e3:ed:50:4f:
48:ff:27:35:a3:ab:9c:a7:da:1e:ef:e6:2b:16:74:76:48:85:
5c:0d:28:a7:e9:d9:c4:b0:ce:2b:07:64:37:21:5f:9e:68:8e:
b0:9a:47:46:e9:c5:35:34:5b:a1:55:68:72:29:0b:de:20:07:
b8:9f:76:2a:67:a4:62:ab:35:02:0c:fe:d6:b8:b7:22:6c:1e:
4b:c5:58:d9:3b:d0:f0:b0:cb:0f:e0:94:f4:51:be:f9:aa:b1:
c9:b0:bb:01:c0:54:69:d5:ad:7e:c3:60:bc:d0:63:15:70:12:
9d:38:84:22:18:a8:eb:35:49:44:8d:2c:be:5c:33:45:74:60:
af:da:23:83:78:51:72:f6:b7:2b:ff:85:35:52:13:a1:b8:24:
2a:cb:02:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:09:12 2026 by rpki-client