Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a323a3a2f34382d3438203d3e20323032333539.roa
File: 326131313a663263303a323a3a2f34382d3438203d3e20323032333539.roa (raw, json)
Hash identifier: pGSRleJGEx4B//di6v4o86zXPn5DFOmXoI1xjShCiVI=
Subject key identifier: 32:A0:1D:10:04:A3:FA:8C:19:89:AF:9F:3B:30:0F:0D:6A:C4:4B:B7
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 42FED5BC9A67FDCDDF9411FCD70F96AA5887C7FE
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a323a3a2f34382d3438203d3e20323032333539.roa
Signing time: Sun 03 May 2026 13:05:00 +0000
ROA not before: Sun 03 May 2026 13:00:00 +0000
ROA not after: Sun 02 May 2027 13:05:00 +0000
asID: 202359
IP address blocks: 2a11:f2c0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:fe:d5:bc:9a:67:fd:cd:df:94:11:fc:d7:0f:96:aa:58:87:c7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: May 3 13:00:00 2026 GMT
Not After : May 2 13:05:00 2027 GMT
Subject: CN=32A01D1004A3FA8C1989AF9F3B300F0D6AC44BB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:21:d8:a6:47:73:0c:d3:c4:e8:77:0a:eb:
63:f7:47:61:f3:dc:23:c8:bf:a7:7a:11:89:fa:7f:
6a:11:de:0f:05:f7:e1:5a:7c:94:88:af:73:97:d5:
c7:99:c8:dc:03:03:9d:21:ad:24:c4:0c:d4:e9:94:
a3:f9:13:06:d9:53:11:5b:67:b5:26:80:36:ff:5e:
a9:c3:68:c4:d2:db:9e:16:4d:de:c6:f3:87:b3:c9:
23:e0:fa:b5:3e:9a:52:df:85:ac:5b:2f:63:e8:be:
51:d8:75:a9:44:cc:5a:e2:c3:54:e7:b5:3a:ab:2f:
3e:89:8a:2e:2f:c1:b2:9c:84:58:65:b8:eb:f8:13:
ea:40:39:04:ed:71:04:48:88:89:ca:25:47:c3:03:
66:44:9e:c6:ec:c8:96:95:ac:88:44:80:42:11:15:
c5:49:15:11:9a:b0:f7:b5:36:84:f9:39:99:4a:7c:
21:7b:eb:1e:6c:c2:f1:1c:d3:ee:b4:c5:07:f2:d2:
f1:97:82:1f:0e:a9:e8:1c:0d:3b:8c:4a:32:da:aa:
1b:9b:5e:f3:bc:e0:a3:38:dc:63:63:b6:f9:78:0d:
53:70:95:01:01:0a:e4:68:e9:75:09:ab:8c:f9:c5:
3b:61:7a:3f:d7:86:4a:47:26:7b:a6:33:4f:41:b3:
ae:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A0:1D:10:04:A3:FA:8C:19:89:AF:9F:3B:30:0F:0D:6A:C4:4B:B7
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a323a3a2f34382d3438203d3e20323032333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:2::/48
Signature Algorithm: sha256WithRSAEncryption
2e:fe:69:6e:38:5b:8d:e1:8b:b1:ce:55:9b:bc:c6:2b:c3:cc:
41:fd:04:3f:e0:44:75:fe:a8:19:b2:84:b5:74:ee:59:5d:fb:
85:cc:93:07:99:34:06:25:33:49:2a:7a:f2:31:fc:b1:d2:c2:
d0:d8:83:3b:2f:0d:51:09:5d:dc:d7:d1:4c:c5:14:aa:8b:2c:
c0:55:40:ca:68:90:72:42:ac:99:aa:6e:a0:44:7c:4c:d9:a8:
f5:f5:c5:3d:af:e8:1d:5b:43:15:15:bb:36:e1:9f:b8:4a:b0:
6c:92:51:01:fd:d7:8b:3f:90:ed:8e:52:ef:2e:a0:f0:bb:a4:
30:9b:76:be:7f:d8:b1:d3:82:e2:a6:8a:c3:14:3f:01:e2:83:
61:29:5b:22:a5:ed:09:3a:29:a8:35:fa:8e:1b:b8:a9:bb:79:
4d:a2:2b:e4:84:c4:e0:c2:d3:5a:83:d0:b7:95:48:b8:97:8c:
41:35:c5:48:7e:71:12:dc:07:5f:62:7f:16:14:ab:9f:19:d6:
c5:7c:1a:57:ff:7d:f9:8f:c5:f1:07:3a:48:2d:6d:18:1a:b8:
6c:64:81:fc:48:52:00:d5:5a:d2:fc:48:19:7f:2d:3f:c8:2f:
0c:e5:b1:a5:c4:9e:95:c5:a5:9d:d8:23:06:52:c2:55:12:d8:
2d:f8:d8:f3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:39:10 2026 by rpki-client