Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa
File: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (raw, json)
Hash identifier: noOpptHyYahGYRczsInCwYjuMyS1afxmOWJs2YpvAT0=
Subject key identifier: B8:E9:05:57:56:61:5B:5B:03:67:55:9E:31:1D:9A:87:0D:2C:40:7A
Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial: 62DFCDAC1B95AA268DD8419D40DC9D754BD72DD2
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa
Signing time: Thu 25 Jun 2026 16:42:21 +0000
ROA not before: Thu 25 Jun 2026 16:37:21 +0000
ROA not after: Thu 24 Jun 2027 16:42:21 +0000
asID: 212516
IP address blocks: 2a0d:b287:ec41::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 02:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:df:cd:ac:1b:95:aa:26:8d:d8:41:9d:40:dc:9d:75:4b:d7:2d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Validity
Not Before: Jun 25 16:37:21 2026 GMT
Not After : Jun 24 16:42:21 2027 GMT
Subject: CN=B8E9055756615B5B0367559E311D9A870D2C407A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:be:be:ca:53:cc:c5:a6:d2:de:ab:ca:9d:
2d:67:20:12:e5:f2:81:28:c5:2e:3d:7e:16:64:b5:
7e:32:25:c2:16:af:5a:46:a4:0a:b0:66:eb:fc:f2:
a0:0d:f1:a8:0c:e5:1a:24:fd:73:f2:0e:46:18:de:
9d:5f:79:36:28:7f:9a:a8:3f:19:40:c3:15:71:48:
55:d2:2d:d4:93:6b:c1:ca:58:ff:d8:1c:66:94:10:
81:0c:48:7e:10:b7:25:ce:0e:b4:5e:73:a5:18:93:
8b:59:d5:6d:8b:ba:24:7d:3b:c7:5e:9a:48:43:1d:
e3:4f:a4:88:ca:ed:2d:fb:1c:f7:d2:69:9e:39:2c:
38:02:fa:0d:fa:16:f1:8b:11:b9:a3:68:be:60:30:
3c:72:71:b6:24:b5:25:86:8f:a9:a2:35:e5:9c:95:
bc:d5:73:f4:5e:3b:69:b3:6f:38:6f:8a:c6:3f:bd:
54:c6:4b:29:57:d1:d3:28:43:89:9a:69:25:9f:95:
13:02:de:88:f4:5d:de:9c:c8:15:cb:08:d3:b4:2b:
df:4e:9b:c2:03:e7:7f:66:b7:43:28:00:e5:a7:78:
42:c0:54:0f:60:22:ad:bd:c9:ef:b8:6a:93:2f:51:
9e:ec:a3:89:45:a7:f6:c8:46:e7:a7:e3:2e:52:b9:
5d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E9:05:57:56:61:5B:5B:03:67:55:9E:31:1D:9A:87:0D:2C:40:7A
X509v3 Authority Key Identifier:
keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b287:ec41::/48
Signature Algorithm: sha256WithRSAEncryption
0a:b5:19:35:58:41:60:e5:83:1b:8a:19:cc:87:33:ec:16:4e:
ca:c7:f6:91:ec:ab:a7:60:22:e2:5c:f3:5a:e9:ba:bd:ec:98:
ba:0d:e7:d0:e3:68:00:65:8e:33:08:b0:e0:01:5d:84:84:7b:
a8:62:10:f0:48:9b:30:b4:12:48:37:4d:0f:be:9c:a0:27:5f:
a1:45:5e:2b:0c:b5:2a:38:9d:69:2b:b0:37:e2:5d:f0:c1:a9:
e5:8c:50:c9:e7:ac:01:b7:79:8f:62:b0:9a:9a:af:da:b6:b0:
05:86:3c:d5:1b:6e:60:ca:73:2d:2e:e7:a8:30:08:b1:1e:89:
ca:0c:5e:e4:54:6c:78:ff:96:aa:24:9e:c1:55:eb:af:4a:0d:
b4:04:e1:cf:46:a8:df:b7:ed:4e:77:9d:68:5d:89:6e:a4:32:
a3:c1:e5:09:dc:fd:ed:d4:81:25:d0:34:29:11:82:7d:c8:ea:
32:a4:2a:86:19:04:94:6b:20:45:33:ac:3f:d3:46:5a:f4:92:
2f:c9:00:8b:58:35:1c:83:ce:38:07:40:c9:02:22:49:1e:d0:
54:ef:e2:e1:6c:8b:4e:d6:c8:4e:5d:79:9e:c3:ae:22:8c:dd:
64:fe:ce:bc:11:6d:75:26:b5:aa:b2:87:49:79:da:2e:1c:81:
39:5d:3b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:25:37 2026 by rpki-client