Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa
File: 323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa (raw, json)
Hash identifier: MA6NPPoujdiQWojyCVLJyxDFh4C42V7H1GeWERt+WOo=
Subject key identifier: 0A:0B:ED:DB:BC:7A:23:44:E2:F8:89:1C:04:0A:9F:82:61:C4:93:7D
Certificate issuer: /CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Certificate serial: 621C16F7E3F2FA311C791B8BBF674C5F4D2A9ABF
Authority key identifier: 2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa
Signing time: Thu 23 Jul 2026 17:05:45 +0000
ROA not before: Thu 23 Jul 2026 17:00:45 +0000
ROA not after: Thu 22 Jul 2027 17:05:45 +0000
asID: 205329
IP address blocks: 2001:67c:2800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:1c:16:f7:e3:f2:fa:31:1c:79:1b:8b:bf:67:4c:5f:4d:2a:9a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Validity
Not Before: Jul 23 17:00:45 2026 GMT
Not After : Jul 22 17:05:45 2027 GMT
Subject: CN=0A0BEDDBBC7A2344E2F8891C040A9F8261C4937D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b2:0b:2a:82:35:de:e9:a3:19:3f:17:7e:9c:
24:1d:6a:7e:28:e3:c8:bb:98:88:8f:c8:c9:7e:70:
6c:8f:0d:93:0a:92:62:14:83:59:59:a5:fc:bc:57:
2b:86:51:fa:3c:9b:dd:a5:4a:7a:39:c3:65:9d:c3:
8d:ca:08:d4:a6:37:6e:b3:71:a0:d3:c5:10:77:1c:
b3:3b:19:79:39:e4:5e:88:59:f9:70:fd:2f:bc:b1:
b8:ef:50:35:04:00:f8:93:aa:fa:a9:65:04:34:77:
c3:f1:8a:69:cf:94:d7:a3:18:0c:80:7f:43:7f:b2:
78:1f:3a:47:da:64:bd:54:e4:01:87:5b:46:83:c9:
87:f0:cc:e8:f3:30:e6:65:9e:f6:59:6c:5e:9c:d4:
99:bb:cc:0c:d1:d0:f4:b7:4f:ff:f9:df:d9:e7:19:
d1:c1:06:9c:01:0c:1d:16:15:ed:5a:c1:d6:45:37:
84:45:53:f8:dc:10:65:da:5f:92:ee:7a:e0:d2:36:
d0:0f:65:72:1f:a9:d9:ee:3b:e4:52:44:2a:54:f0:
24:1b:01:01:6c:7d:b4:98:86:ef:4d:37:b6:26:80:
3c:88:47:24:f2:e0:a5:b7:d6:6f:5a:35:06:68:81:
1a:91:3f:fd:a0:88:72:fe:25:6f:b5:1c:6c:63:5a:
8e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0B:ED:DB:BC:7A:23:44:E2:F8:89:1C:04:0A:9F:82:61:C4:93:7D
X509v3 Authority Key Identifier:
keyid:2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2800::/48
Signature Algorithm: sha256WithRSAEncryption
b5:99:74:58:f3:0a:45:c8:f0:6c:16:d3:0d:27:91:ce:c2:0b:
5c:22:52:0f:29:29:96:ea:71:c2:dd:f1:d4:27:42:cc:d8:27:
04:94:8b:25:b3:88:d7:c8:db:16:ba:38:3a:2e:8b:25:65:35:
b1:87:2e:36:81:88:94:4f:3c:13:eb:81:37:50:b7:16:68:5a:
09:99:ab:dd:18:e4:50:93:1d:db:fe:12:24:b9:7e:d6:f2:72:
5b:9e:8e:09:40:7d:10:1a:ce:b0:56:18:88:3d:d7:14:77:a8:
58:1c:e5:54:f8:56:60:33:43:c8:53:82:26:68:00:cc:27:8b:
68:a8:b4:a2:7f:b6:d2:37:d8:2a:be:55:f3:e7:31:54:7e:9e:
3a:9f:9c:e3:50:f9:d4:e6:1d:2d:3b:19:69:2f:2b:f5:fc:43:
3d:a9:a7:da:57:b1:94:36:eb:3d:c3:1f:a1:f6:05:39:04:4a:
07:0a:9e:b4:ba:78:dc:a4:ad:d1:c6:60:dc:95:87:bc:48:c5:
ab:4b:c4:9f:6d:41:07:6b:45:f8:83:eb:83:8e:3c:68:1b:1c:
ef:95:7d:67:7e:a5:e4:77:44:b0:f3:1f:94:ea:f8:07:18:1c:
1e:f4:bd:ec:2b:80:00:9e:08:e1:3f:7c:b5:c3:3a:eb:44:4f:
8a:1b:60:85
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUYhwW9+Py+jEceRuLv2dMX00qmr8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMmYwOGNlY2Q1ZTU3Y2JhMGU2OGJjYTdmNzQwMWJkNWVk
YjM4N2ZiODAeFw0yNjA3MjMxNzAwNDVaFw0yNzA3MjIxNzA1NDVaMDMxMTAvBgNV
BAMTKDBBMEJFRERCQkM3QTIzNDRFMkY4ODkxQzA0MEE5RjgyNjFDNDkzN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzsgsqgjXe6aMZPxd+nCQdan4o
48i7mIiPyMl+cGyPDZMKkmIUg1lZpfy8VyuGUfo8m92lSno5w2Wdw43KCNSmN26z
caDTxRB3HLM7GXk55F6IWflw/S+8sbjvUDUEAPiTqvqpZQQ0d8PximnPlNejGAyA
f0N/sngfOkfaZL1U5AGHW0aDyYfwzOjzMOZlnvZZbF6c1Jm7zAzR0PS3T//539nn
GdHBBpwBDB0WFe1awdZFN4RFU/jcEGXaX5LueuDSNtAPZXIfqdnuO+RSRCpU8CQb
AQFsfbSYhu9NN7YmgDyIRyTy4KW31m9aNQZogRqRP/2giHL+JW+1HGxjWo5RAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUCgvt27x6I0Ti+IkcBAqfgmHEk30wHwYDVR0j
BBgwFoAULwjOzV5Xy6Dmi8p/dAG9Xts4f7gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMtYWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2
OTgwLzIvMkYwOENFQ0Q1RTU3Q0JBMEU2OEJDQTdGNzQwMUJENUVEQjM4N0ZCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0x3ak96VjVYeTZEbWk4cF9kQUc5WHRz
NGY3Zy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMt
YWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2OTgwLzIvMzIzMDMwMzEzYTM2Mzc2MzNh
MzIzODMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzUzMzMyMzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQZ8KAAwDQYJKoZIhvcNAQELBQADggEBALWZdFjzCkXI8GwW0w0n
kc7CC1wiUg8pKZbqccLd8dQnQszYJwSUiyWziNfI2xa6ODouiyVlNbGHLjaBiJRP
PBPrgTdQtxZoWgmZq90Y5FCTHdv+EiS5ftbycluejglAfRAazrBWGIg91xR3qFgc
5VT4VmAzQ8hTgiZoAMwni2iotKJ/ttI32Cq+VfPnMVR+njqfnONQ+dTmHS07GWkv
K/X8Qz2pp9pXsZQ26z3DH6H2BTkESgcKnrS6eNykrdHGYNyVh7xIxatLxJ9tQQdr
RfiD64OOPGgbHO+VfWd+peR3RLDzH5Tq+AcYHB70vewrgACeCOE/fLXDOutET4ob
YIU=
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:56:08 2026 by rpki-client