Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238303a3a2f32392d3239203d3e203431373230.roa
File: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (raw, json)
Hash identifier: srrAE4PnG7Smy0Hyw6ZLJcjBNnqLRb+bmWYGj/WYI2E=
Subject key identifier: C1:51:51:0E:D7:8B:94:98:FF:A5:7F:F3:45:C2:38:F8:AD:22:E9:26
Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial: 72D982E5A929106252E67335BA0C108CBA7960C0
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238303a3a2f32392d3239203d3e203431373230.roa
Signing time: Thu 25 Jun 2026 16:42:21 +0000
ROA not before: Thu 25 Jun 2026 16:37:21 +0000
ROA not after: Thu 24 Jun 2027 16:42:21 +0000
asID: 41720
IP address blocks: 2a0d:b280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 02:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:d9:82:e5:a9:29:10:62:52:e6:73:35:ba:0c:10:8c:ba:79:60:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Validity
Not Before: Jun 25 16:37:21 2026 GMT
Not After : Jun 24 16:42:21 2027 GMT
Subject: CN=C151510ED78B9498FFA57FF345C238F8AD22E926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:11:9f:3e:b4:49:c9:b8:07:20:3d:d6:a6:b7:
ed:fb:27:06:20:bf:7d:cd:a4:7e:f7:05:f5:1a:0e:
d3:c7:e6:b9:09:aa:50:90:18:58:d4:bf:ef:8f:92:
d1:c8:cc:c6:9f:7f:9d:d6:8f:3f:3e:5e:3a:86:87:
29:36:42:3c:1a:f1:28:e5:40:b1:d3:dd:85:18:c8:
bf:21:62:24:b6:12:32:32:87:ad:eb:26:e8:fa:20:
6d:dd:71:c1:a4:2f:b1:8d:5d:17:ad:63:70:02:56:
32:17:b3:d9:f4:98:40:dd:1e:76:bc:42:21:e7:75:
d4:81:6d:1f:95:e7:ff:90:48:d4:14:b5:f7:15:07:
a8:12:2d:68:8f:da:1d:ed:fb:d4:d6:27:1a:aa:b2:
05:46:57:ed:c1:34:62:83:47:a5:2a:42:24:d5:cc:
b5:59:e1:e2:30:e0:f6:76:a3:c7:3a:eb:3d:48:71:
40:f2:70:77:d3:fa:33:22:d5:52:4b:17:bb:ed:f0:
61:c8:03:3a:31:b3:79:82:5c:72:fd:ee:79:cf:ff:
f5:e0:21:5d:04:56:66:9b:cf:03:50:a7:f9:d0:9c:
77:92:9c:36:ec:96:41:9c:bb:76:d2:b4:a9:b6:83:
d3:2b:cc:4e:a6:9e:36:9c:03:86:d1:b2:d2:01:18:
35:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:51:51:0E:D7:8B:94:98:FF:A5:7F:F3:45:C2:38:F8:AD:22:E9:26
X509v3 Authority Key Identifier:
keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238303a3a2f32392d3239203d3e203431373230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b280::/29
Signature Algorithm: sha256WithRSAEncryption
88:07:1c:77:7c:75:e8:9a:50:b8:a9:75:b9:a3:14:e4:ca:c3:
a9:65:94:23:f9:47:02:55:16:99:82:dc:f6:a5:69:d5:46:f5:
37:2e:2a:ed:50:22:cc:0d:09:ae:d6:6a:3a:38:64:94:ef:f8:
8b:dd:18:29:24:5a:58:b4:bc:96:34:16:e2:f6:9f:34:38:85:
66:9b:7c:5b:01:cc:c3:09:c4:f7:4a:a3:e1:6b:31:ab:1b:19:
c9:af:2e:c6:ef:d1:53:c9:35:2f:6d:c6:34:9d:19:43:27:bd:
0f:c6:8b:a5:08:ee:4b:91:89:85:d5:ca:39:fa:e3:ad:53:db:
d8:93:75:1e:35:cc:84:33:95:65:db:b2:75:a1:5c:0d:90:3c:
9c:d0:60:d6:57:48:da:9a:63:92:9f:83:27:10:73:05:52:dc:
28:f2:d0:e2:2b:31:bd:4e:2d:1d:80:18:5a:7d:41:af:bb:ec:
4b:e0:1b:9d:ba:0f:cb:6a:d2:ab:9b:2c:03:89:9e:36:e9:ca:
33:2f:3e:2f:40:0d:09:a9:33:cc:5e:a7:7a:14:7d:95:0a:fd:
c2:26:18:10:f5:86:7e:87:36:d4:93:55:c5:c8:4c:8c:38:04:
8a:db:d3:82:a4:42:ab:1b:dd:84:f7:d4:ce:c0:7f:00:ea:67:
e0:9e:8c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:10:56 2026 by rpki-client