Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/326130363a356563303a3a2f34382d3438203d3e20323034363933.roa
File: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (raw, json)
Hash identifier: 1uKLPQUne0QcXblB3NW5HCIymd03TIpdjdnWqSBKxm8=
Subject key identifier: 98:10:C0:59:03:D2:A1:A5:25:A7:B6:13:8D:48:9E:6B:F8:78:DA:CD
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 45EF0EC44AA2C2D21180371B9883B9B219D13AA6
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/326130363a356563303a3a2f34382d3438203d3e20323034363933.roa
Signing time: Tue 07 Oct 2025 17:55:08 +0000
ROA not before: Tue 07 Oct 2025 17:50:08 +0000
ROA not after: Tue 06 Oct 2026 17:55:08 +0000
asID: 204693
IP address blocks: 2a06:5ec0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:08:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ef:0e:c4:4a:a2:c2:d2:11:80:37:1b:98:83:b9:b2:19:d1:3a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Oct 7 17:50:08 2025 GMT
Not After : Oct 6 17:55:08 2026 GMT
Subject: CN=9810C05903D2A1A525A7B6138D489E6BF878DACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e7:51:9c:8e:3a:c7:02:29:8f:51:40:e7:a8:
11:33:ae:3c:d4:f4:22:b5:83:b2:59:24:c1:9b:82:
3b:d9:4f:9c:a0:a9:eb:84:e1:dd:5f:fb:eb:3c:25:
d1:b3:3f:64:ef:3f:22:51:24:a4:d4:15:20:dd:0f:
c1:52:cb:9a:5a:5f:ba:03:b4:2c:a8:47:6d:32:c4:
83:69:e5:e3:cd:1e:e1:bc:6b:93:a6:3e:29:b6:eb:
16:22:63:d5:4f:6d:ff:e1:75:7d:97:7d:88:5f:bc:
32:dc:0a:9a:b5:8a:05:4f:04:1b:cf:50:0a:b3:35:
19:e1:a4:ef:48:4c:23:c1:ab:65:dc:d8:48:59:76:
76:cf:31:ec:cb:83:21:48:22:af:48:bf:89:ca:06:
f3:84:41:39:72:ac:0c:c1:d6:54:13:bb:5b:b2:cd:
5d:06:b7:dc:c5:52:4d:af:e6:9f:13:f2:ad:0f:3d:
91:05:1c:b9:e6:9f:ad:23:27:75:d2:16:6c:50:38:
23:40:a6:6a:98:9c:a2:c0:1c:b1:49:74:f0:84:28:
b7:06:18:85:aa:85:46:a4:8a:14:d9:55:70:da:19:
b5:ac:c3:db:5f:67:9a:e0:75:bd:6e:e9:55:ea:23:
8f:27:fc:22:6a:14:d8:f6:ca:31:64:bf:c0:6d:59:
00:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:10:C0:59:03:D2:A1:A5:25:A7:B6:13:8D:48:9E:6B:F8:78:DA:CD
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/326130363a356563303a3a2f34382d3438203d3e20323034363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5ec0::/48
Signature Algorithm: sha256WithRSAEncryption
d0:7f:6e:d0:8c:be:66:9b:ad:7b:7b:29:df:d8:4a:9f:27:83:
20:2c:ca:08:17:ba:9a:fe:f5:8a:09:6e:e8:35:17:19:e4:45:
ab:28:34:40:af:38:0a:32:00:aa:cb:dc:68:51:a4:9e:bf:b7:
91:39:5f:79:3c:a4:f4:45:f6:aa:1b:d3:d5:77:49:22:b8:57:
5a:ec:06:11:05:6d:0c:84:1c:bc:48:33:ba:9b:1b:04:cb:f0:
90:55:f6:d1:22:f5:62:19:d4:0e:59:ce:bc:d5:ed:63:e9:24:
c3:7e:fb:8c:33:a6:e8:a0:04:cc:b8:1c:d4:11:f7:18:40:8d:
09:eb:61:e5:00:6d:9b:d4:5f:04:d9:5e:a6:5e:54:6c:9b:93:
d4:da:a3:77:1f:5f:60:48:b7:d1:45:b4:b5:a7:c2:7e:f1:48:
ae:9f:67:e8:1b:b3:0a:54:e8:d1:03:f9:96:44:04:9d:d3:23:
69:5b:b2:99:57:c6:f8:49:f3:a2:9a:51:bc:48:e9:0c:3d:fa:
f3:9b:20:2e:49:55:1c:50:53:e3:6b:72:eb:7d:0c:df:d7:fa:
79:61:83:76:a0:4e:3c:42:25:a9:ae:e6:d5:a0:8b:49:ac:49:
04:fb:a2:00:08:71:75:9b:80:9e:1d:74:77:53:55:bf:80:41:
91:9f:54:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:36:30 2025 by rpki-client