Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/323030313a3637633a326265383a3a2f34382d3438203d3e20323035333239.roa
File: 323030313a3637633a326265383a3a2f34382d3438203d3e20323035333239.roa (raw, json)
Hash identifier: r9IpgUJObA8nr7EulKLzOsEZibFRlyCDE79MY0ENB+c=
Subject key identifier: 51:12:A7:6E:A7:1E:44:D8:93:3F:CA:5E:A5:29:FC:7D:1A:25:D6:98
Certificate issuer: /CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
Certificate serial: 622196CCC9FE7FE7FEFA9497C747C47DAFCD205F
Authority key identifier: D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/323030313a3637633a326265383a3a2f34382d3438203d3e20323035333239.roa
Signing time: Wed 30 Sep 2026 09:05:45 +0000
ROA not before: Wed 30 Sep 2026 09:00:45 +0000
ROA not after: Wed 29 Sep 2027 09:05:45 +0000
asID: 205329
IP address blocks: 2001:67c:2be8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl
rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:21:96:cc:c9:fe:7f:e7:fe:fa:94:97:c7:47:c4:7d:af:cd:20:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
Validity
Not Before: Sep 30 09:00:45 2026 GMT
Not After : Sep 29 09:05:45 2027 GMT
Subject: CN=5112A76EA71E44D8933FCA5EA529FC7D1A25D698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0a:f5:ff:7c:ef:34:ec:c0:12:44:60:f6:93:
0f:a3:1a:14:37:dd:5a:2d:82:b8:9f:76:79:ca:eb:
b5:e3:e7:17:11:fe:61:df:10:39:aa:36:64:1d:a2:
ed:22:be:1b:dc:f4:d4:3f:1a:fb:e5:42:53:39:c9:
81:f6:d0:67:cb:c2:60:2c:2e:7a:02:e0:b7:20:6a:
30:6a:cb:0c:b0:7f:f7:31:d9:f9:55:a3:66:a7:d0:
2e:30:98:2f:40:8e:e6:c1:dd:8d:77:0f:dc:a8:f4:
4f:61:95:06:43:5f:f9:53:51:4f:90:24:8e:77:23:
1a:57:aa:d5:96:54:6e:4a:2d:14:d2:ed:7d:72:6c:
21:7b:0e:ba:44:4d:4c:1d:35:97:1a:51:e7:8d:c8:
95:78:2d:a8:b9:ff:c9:14:52:86:f1:d9:33:c1:18:
f4:5c:f7:37:06:f0:2d:82:06:5a:4b:f3:35:02:00:
9d:3c:d1:2a:79:d7:2d:37:00:06:d7:19:29:b6:e5:
d9:8d:c6:f8:70:72:5f:85:2f:9a:27:cc:27:44:3e:
84:49:9c:cf:50:03:9a:20:1b:79:7f:14:e4:11:6f:
e2:58:9c:25:c0:4a:5c:59:59:47:b5:89:a0:68:13:
2a:c7:1c:f5:e4:8a:a5:14:3b:c0:e3:b4:d7:08:82:
a6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:12:A7:6E:A7:1E:44:D8:93:3F:CA:5E:A5:29:FC:7D:1A:25:D6:98
X509v3 Authority Key Identifier:
keyid:D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/323030313a3637633a326265383a3a2f34382d3438203d3e20323035333239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2be8::/48
Signature Algorithm: sha256WithRSAEncryption
64:ae:77:93:6c:5f:1e:bf:d4:68:e6:34:13:df:8e:1a:fc:54:
c9:55:34:78:ed:9b:9f:d4:c8:e1:28:29:c3:f0:d3:53:c8:64:
03:9e:5e:b3:7c:cd:dc:41:77:9a:24:f8:e3:98:5e:70:d8:84:
78:08:d0:58:1a:6b:c2:5d:e3:2e:93:db:f6:93:34:f4:db:33:
72:0c:dc:13:6b:97:a4:41:92:e3:83:aa:dd:72:a5:cf:79:ed:
77:06:a5:64:94:41:0a:75:f4:9f:c6:09:9f:95:16:95:01:3b:
43:7c:01:d0:24:87:64:7e:7e:06:7a:95:00:46:05:e4:f8:bf:
8f:c2:30:c7:7d:d2:bc:b9:49:83:a6:84:9f:13:38:ab:9c:29:
e4:58:ca:bd:54:40:c4:88:b7:bb:19:7b:36:22:e9:c6:43:2d:
aa:da:c5:86:d7:5a:b3:5e:3a:82:40:81:7c:56:69:2b:e5:ec:
4f:c1:a2:c1:d3:3b:36:ba:15:d4:74:31:a5:77:e9:2a:e7:44:
97:b4:59:df:64:03:52:52:5b:ed:70:9d:9e:99:1b:33:68:3e:
9f:d6:06:22:4f:e0:dc:14:6d:a0:12:38:7b:80:5c:0f:17:00:
0f:21:a2:94:dc:00:ea:6f:dd:2e:1a:e7:55:fd:cb:eb:40:4c:
cb:ea:23:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 08:11:58 2026 by rpki-client