Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634343a34303a3a2f34342d3438203d3e20323131343331.roa
File: 326131333a393634343a34303a3a2f34342d3438203d3e20323131343331.roa (raw, json)
Hash identifier: RXHjluervVOKSOjAfkUVqFpPIpnYTG1wbKbkRzpyWc8=
Subject key identifier: 4D:F3:FC:68:D5:2B:C6:12:BD:8D:2A:0E:70:29:A9:44:57:8E:99:8E
Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace
Certificate serial: 64213ED4FEC368B26F0840FA501AE326D104A170
Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634343a34303a3a2f34342d3438203d3e20323131343331.roa
Signing time: Fri 29 May 2026 09:51:36 +0000
ROA not before: Fri 29 May 2026 09:46:36 +0000
ROA not after: Fri 28 May 2027 09:51:36 +0000
asID: 211431
IP address blocks: 2a13:9644:40::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:06:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:21:3e:d4:fe:c3:68:b2:6f:08:40:fa:50:1a:e3:26:d1:04:a1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace
Validity
Not Before: May 29 09:46:36 2026 GMT
Not After : May 28 09:51:36 2027 GMT
Subject: CN=4DF3FC68D52BC612BD8D2A0E7029A944578E998E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:46:62:86:92:5c:e0:7c:db:eb:8a:ee:5e:9f:
96:20:e9:64:2e:e5:22:d7:06:71:24:df:4b:32:ca:
49:50:f5:25:65:6e:74:9f:48:13:ae:15:9b:0a:df:
48:e4:81:85:11:c9:09:f0:53:b4:6c:9a:96:b0:64:
5a:90:71:9e:5e:03:85:56:d5:21:a7:4d:14:f7:41:
39:4d:77:ad:a5:1b:0b:47:26:8b:33:78:df:11:62:
e5:9e:5a:96:aa:2b:4b:45:cc:b4:66:f0:c0:8f:fd:
6e:79:8d:fd:b7:16:7c:03:a1:d4:03:4a:e8:26:12:
3d:fd:c5:96:6d:ed:47:f0:f0:de:d7:83:89:45:61:
18:35:81:22:e4:84:5a:c3:67:2e:7d:a0:a1:d4:c0:
de:ce:99:67:c0:50:6b:46:d2:ce:a3:cc:2c:dd:be:
3b:15:24:f0:e3:ad:a6:89:18:68:cc:8a:71:bd:9e:
2d:f2:ea:02:6f:3a:b3:29:d3:64:5c:54:f0:a6:96:
8d:fb:49:fa:d8:77:ff:5e:8b:d3:32:ae:c1:09:b9:
90:2c:17:24:76:1f:64:10:fd:64:84:83:6d:2a:82:
93:77:6c:b3:38:87:a1:69:43:9a:16:d7:34:23:cf:
8c:63:4d:30:e2:2a:e2:55:28:fe:23:14:e4:ec:30:
ef:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F3:FC:68:D5:2B:C6:12:BD:8D:2A:0E:70:29:A9:44:57:8E:99:8E
X509v3 Authority Key Identifier:
keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/326131333a393634343a34303a3a2f34342d3438203d3e20323131343331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9644:40::/44
Signature Algorithm: sha256WithRSAEncryption
23:4e:7b:5c:c8:dd:92:9e:30:e7:29:26:a1:c7:66:11:d0:f2:
77:06:b2:3f:83:ed:9d:37:bf:eb:25:52:c5:08:2f:15:85:60:
31:97:b4:84:05:db:47:81:a9:a9:fa:25:4d:5e:46:ee:23:11:
bd:60:16:c4:3d:65:80:e8:dd:74:11:78:35:b0:a3:6c:e0:2a:
a2:05:17:e3:7d:e9:50:65:1e:50:1b:9f:ec:a0:02:4e:60:5f:
6b:99:79:54:f0:00:a4:f1:8f:75:01:31:d5:ff:96:72:33:84:
25:f2:0f:66:48:12:f2:9a:17:cb:6e:db:71:99:17:30:5b:f6:
28:8e:51:53:22:51:09:e3:cd:b2:88:00:59:01:e9:c6:bb:97:
64:dc:b1:f3:90:ad:22:25:74:2e:f1:d2:42:23:f4:a2:07:56:
f2:bc:df:09:ce:eb:5a:a0:c8:80:e6:04:fd:10:a9:76:8b:b9:
a9:46:ca:e8:c7:4c:80:63:fd:d9:5e:eb:fd:c1:b5:13:bb:1c:
0e:b0:97:29:4a:7a:8c:c1:b8:73:2e:da:dc:fb:58:34:ae:9f:
47:54:86:de:8a:45:87:7a:4a:e0:3f:a2:65:c1:7b:fb:92:2b:
bd:c8:fa:8a:93:51:d2:08:ee:05:d9:d7:db:d5:c1:c6:4d:de:
8b:c0:24:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:22:07 2026 by rpki-client