Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa
File: 323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa (raw, json)
Hash identifier: WprHHCDYBsr5/f+ehFAWoktEYhynGEu2h7Y0/TFJt8c=
Subject key identifier: 9E:50:8A:69:67:41:9C:C9:BB:2F:DB:96:58:CA:9D:58:0C:58:A3:72
Certificate issuer: /CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
Certificate serial: 11421735DF993820DCA1C4897FCF9FCFC83EC4DC
Authority key identifier: D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa
Signing time: Thu 23 Jul 2026 17:05:45 +0000
ROA not before: Thu 23 Jul 2026 17:00:45 +0000
ROA not after: Thu 22 Jul 2027 17:05:45 +0000
asID: 202881
IP address blocks: 2001:67c:2be8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl
rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:42:17:35:df:99:38:20:dc:a1:c4:89:7f:cf:9f:cf:c8:3e:c4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
Validity
Not Before: Jul 23 17:00:45 2026 GMT
Not After : Jul 22 17:05:45 2027 GMT
Subject: CN=9E508A6967419CC9BB2FDB9658CA9D580C58A372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:80:28:d1:52:6d:f4:25:49:0e:e0:5f:d7:
2c:f1:b8:cf:a6:64:da:f3:01:33:a5:5a:44:41:fa:
84:2b:42:07:e2:93:cd:11:fa:a2:f3:a0:31:34:ea:
95:dc:0a:32:bf:c9:02:db:19:22:b4:26:8b:92:6d:
6f:a5:82:11:a8:41:bd:c0:37:34:2c:37:52:2b:a6:
52:ef:a7:54:1c:8d:54:d6:70:cf:7a:9a:b6:d4:c4:
fe:40:44:8a:73:9a:c3:60:3c:4b:84:be:2b:2b:d5:
3a:fd:42:89:48:70:d7:4a:ce:9a:ed:cd:aa:93:18:
d8:a7:50:75:19:9c:1b:14:7b:8d:a1:ca:2e:32:20:
33:91:dc:39:d7:e1:ee:80:6d:9a:12:35:6b:77:1c:
8e:66:c8:2d:5e:28:4c:52:bc:92:e2:98:14:c7:9e:
2c:b8:4f:c7:a1:bc:0f:88:84:6b:df:47:31:1d:e9:
30:7e:7d:48:ef:ca:d0:26:37:98:93:8b:ea:22:fb:
1e:14:cf:76:83:67:05:6d:6d:45:5b:f3:a8:50:a1:
2b:b3:73:38:8d:eb:8b:ad:5f:2f:8d:b1:d6:f9:7c:
ea:5a:cb:8e:6c:46:e2:6f:9c:1c:71:29:2d:e3:cf:
93:c9:96:9a:fe:72:06:48:27:11:7b:d5:21:05:e4:
9d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:50:8A:69:67:41:9C:C9:BB:2F:DB:96:58:CA:9D:58:0C:58:A3:72
X509v3 Authority Key Identifier:
keyid:D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2be8::/48
Signature Algorithm: sha256WithRSAEncryption
b2:bf:02:85:aa:3b:c0:4f:ea:df:f6:6c:e4:2d:a1:16:12:02:
4f:11:72:a5:3d:62:2e:67:91:79:31:2f:b3:94:79:7f:ee:d1:
1f:ec:bd:0b:ed:0c:66:5c:7d:70:49:96:bc:9a:b2:6a:6a:95:
e6:5c:fd:02:e0:f9:bd:f7:c7:a5:5a:20:af:97:cd:7e:08:56:
d9:f9:3a:0e:5c:9b:64:a0:bf:49:51:db:a0:1c:4d:d5:1b:fe:
66:c6:9b:aa:09:73:0c:59:c0:a6:bc:0c:78:65:4c:c2:35:4a:
0b:85:b2:af:b5:d2:b8:bc:3a:e7:04:43:78:32:d4:37:1d:bf:
50:7b:e8:e0:34:43:a8:20:99:45:db:5b:34:7a:02:51:29:5d:
14:9a:b7:d4:be:34:a3:15:28:21:9e:45:a6:f1:e7:20:96:a6:
07:d1:48:68:5b:e6:0f:bf:d3:82:df:e0:f3:72:71:22:08:65:
63:76:f6:ae:0c:4d:80:17:3a:0d:d3:e2:d7:7c:ce:26:04:6b:
62:7d:a0:f1:4e:36:e3:d5:49:fe:da:8a:6d:ef:52:c0:d3:a2:
04:f9:fd:28:9a:f5:9e:57:e0:5d:54:2c:dc:00:d9:7f:5a:00:
e7:93:83:e9:98:12:7b:18:12:01:19:80:94:7e:64:46:ff:0a:
b3:39:08:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:13:31 2026 by rpki-client