Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a3a2f34382d3438203d3e20323037393630.roa
File: 326131313a663263303a3a2f34382d3438203d3e20323037393630.roa (raw, json)
Hash identifier: 1O0GTsIYHZj2V+8lAkpBqsMaVHLSZm3hi+VUKFXSj2w=
Subject key identifier: 39:9B:41:0B:C6:37:A3:F0:3A:A9:13:9B:0B:BD:1D:37:33:B3:B4:B4
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 766BF622289E7C3D26768A9BF291AD5731BECDB5
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a3a2f34382d3438203d3e20323037393630.roa
Signing time: Sun 03 May 2026 13:05:00 +0000
ROA not before: Sun 03 May 2026 13:00:00 +0000
ROA not after: Sun 02 May 2027 13:05:00 +0000
asID: 207960
IP address blocks: 2a11:f2c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:6b:f6:22:28:9e:7c:3d:26:76:8a:9b:f2:91:ad:57:31:be:cd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: May 3 13:00:00 2026 GMT
Not After : May 2 13:05:00 2027 GMT
Subject: CN=399B410BC637A3F03AA9139B0BBD1D3733B3B4B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3b:1a:e8:a0:5b:06:6d:cc:5f:99:b8:b6:7e:
e8:66:cd:d1:75:1b:3b:88:2a:9a:1c:0d:f0:65:fd:
1e:d6:39:d5:94:4c:b3:48:d9:a2:ea:2c:77:a7:55:
41:68:19:e9:48:9e:a3:33:36:ac:3d:b6:4f:68:49:
3d:e5:ed:c4:76:7e:d7:dc:1e:c9:fd:40:7f:0e:05:
b1:ee:ec:5f:8c:38:f9:30:3e:10:5f:df:4e:47:35:
a0:62:50:9b:86:9e:ef:a8:59:48:4d:ea:7c:06:9c:
c6:44:ab:bd:9f:7e:be:7c:a0:51:21:db:57:c2:7e:
1c:ff:64:c1:80:90:3b:08:5f:5c:34:2c:de:eb:06:
aa:83:26:40:fd:95:95:e6:e7:8b:a7:d2:2c:4a:ab:
8b:84:a8:7b:6c:44:fb:87:45:de:91:b9:f0:a5:b0:
78:ba:4b:85:32:d5:54:1e:8a:a1:6c:96:65:8b:63:
fa:91:26:ee:03:a3:a8:12:fb:e6:c8:01:1e:18:b8:
5d:bc:05:e4:0b:ea:d2:3b:44:54:b4:37:be:60:42:
fc:12:6d:1d:8f:1b:56:ed:39:0e:1a:c8:d6:91:c8:
eb:96:35:8d:d8:b3:0c:08:89:04:43:1f:07:e2:3e:
99:50:ae:e0:3a:7d:c8:90:4d:7f:a2:5c:91:c5:ba:
b3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9B:41:0B:C6:37:A3:F0:3A:A9:13:9B:0B:BD:1D:37:33:B3:B4:B4
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a3a2f34382d3438203d3e20323037393630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0::/48
Signature Algorithm: sha256WithRSAEncryption
92:6d:f0:d7:d0:7c:aa:6e:9c:9f:cf:9d:8e:6c:c2:cf:e3:f7:
c6:ac:e8:4c:5d:d7:18:fc:f6:ef:b4:25:d2:4f:e3:a3:e2:81:
c3:57:1d:5a:02:1b:c4:76:f4:45:ff:34:e1:b9:ef:4f:29:0e:
4f:e6:c1:46:fb:0b:a4:19:6d:a9:02:b6:b5:f8:37:f7:44:f4:
99:6a:13:a9:5e:a6:79:eb:0f:13:bf:9c:6a:cd:9c:9d:71:cb:
e1:a9:8f:92:a3:b8:d7:f1:db:80:8b:dd:03:c0:91:a5:67:be:
17:fb:c5:3d:eb:f4:cb:0c:34:3e:db:03:3c:55:0d:53:e0:5a:
97:81:80:50:ce:34:39:39:43:71:12:cc:fb:d6:85:62:5f:bb:
49:79:e7:ac:15:b2:dc:d1:53:be:40:f4:f4:d7:f2:d6:28:3d:
2d:93:42:45:91:41:2d:d2:fc:71:49:bf:2f:ba:32:9a:2c:5b:
53:81:17:fa:00:04:35:b0:ea:0f:ae:0f:51:ce:cf:33:cc:1c:
85:de:c6:b3:3b:6c:07:c7:85:68:3e:a4:06:49:8f:4c:ac:56:
72:c4:0a:da:80:b7:c5:b6:20:94:f4:83:86:36:12:ba:4b:1f:
bc:c9:ca:08:7d:32:1d:9b:d1:0d:f1:a0:c9:07:63:06:58:1d:
e0:30:8e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:35:11 2026 by rpki-client