Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa
File: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (raw, json)
Hash identifier: gf5b8NhF0zR0RYc46WS4uCNmpBmFubnVS7Fe41WKmKs=
Subject key identifier: 29:8B:78:83:81:7B:05:52:B6:5E:55:6D:49:4F:23:BF:EE:AC:6A:CD
Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial: 33D0C3261DE47CFE36472361EA4E4436283730AF
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa
Signing time: Sat 04 Jul 2026 09:42:22 +0000
ROA not before: Sat 04 Jul 2026 09:37:22 +0000
ROA not after: Sat 03 Jul 2027 09:42:22 +0000
asID: 214925
IP address blocks: 2a0d:b287:ec42::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 02:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:d0:c3:26:1d:e4:7c:fe:36:47:23:61:ea:4e:44:36:28:37:30:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Validity
Not Before: Jul 4 09:37:22 2026 GMT
Not After : Jul 3 09:42:22 2027 GMT
Subject: CN=298B7883817B0552B65E556D494F23BFEEAC6ACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:56:3b:25:c0:28:62:af:ad:6a:19:1f:69:ce:
8b:a2:3d:06:0e:26:7d:4a:9e:a3:df:f5:9d:72:d2:
34:f6:df:63:4c:d4:dc:70:ef:18:47:25:fa:ac:f4:
8c:d9:3e:b0:f2:2f:72:26:9b:3e:c2:58:0f:d2:5e:
79:38:ba:68:7a:20:b0:65:91:f1:e8:65:e4:c4:7c:
5e:01:f0:3b:7a:c8:c1:2a:0e:db:06:8a:78:b6:7a:
f7:e6:3e:63:3d:b2:f9:6c:6c:a3:3f:da:4f:e8:b0:
0d:a7:ce:d3:0c:aa:4d:63:ea:88:e1:90:58:05:fb:
87:c2:8a:38:fb:7c:d0:84:ff:44:77:c0:78:63:5c:
a0:cf:71:b9:76:a6:e8:c8:09:03:05:f8:9d:01:2a:
80:26:5c:e8:ca:62:18:43:8e:09:42:62:9c:7b:eb:
a0:fd:13:d6:c9:8b:6a:d6:14:b4:69:c7:e9:85:ef:
b1:ed:45:ed:4e:3c:8e:80:0c:92:a8:1e:f6:b4:c1:
eb:f6:6f:39:f1:ee:d2:dd:f2:ab:52:37:73:0d:e4:
49:7d:4c:d9:a3:d3:79:29:c9:d5:1e:b9:2e:46:f2:
c4:ab:16:a2:83:29:c9:46:cc:c2:69:ac:34:e7:58:
7e:c8:85:91:e5:82:b9:40:26:17:ea:a8:55:ee:36:
c6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8B:78:83:81:7B:05:52:B6:5E:55:6D:49:4F:23:BF:EE:AC:6A:CD
X509v3 Authority Key Identifier:
keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b287:ec42::/48
Signature Algorithm: sha256WithRSAEncryption
45:df:7a:6a:5b:8e:4e:19:eb:cb:50:eb:96:96:38:5b:13:88:
29:4f:f0:ec:90:c6:6c:b7:35:47:15:8b:bf:45:61:30:52:65:
fd:af:c2:9b:fe:75:2f:96:c7:69:4b:04:98:a3:c5:3a:81:65:
2d:06:16:c6:20:2c:7c:0c:64:26:7b:a8:6e:49:a2:7c:55:83:
8d:47:f0:7c:a4:1b:4a:e1:b7:43:4e:20:ba:36:f5:6e:17:a1:
0a:72:96:ee:41:e4:3f:6e:81:b4:0e:31:9b:cf:5e:d0:a7:52:
87:7c:93:c6:82:2b:75:46:f7:91:1b:9d:ed:07:fc:7f:4b:fd:
cb:6e:00:7f:ba:3b:23:00:b3:eb:9b:7f:33:df:e5:fc:24:1f:
aa:11:18:95:a6:d3:13:05:db:0c:ba:c6:77:bc:e3:de:78:73:
b7:88:54:41:6b:c4:ea:9d:7e:02:55:2f:60:15:86:a5:d2:07:
cf:b9:06:e1:fc:f1:a2:15:0d:4e:c3:98:4a:47:4f:ef:6a:d6:
bd:2a:06:77:07:b3:ca:dd:53:9e:9a:dc:76:35:9f:cd:62:c5:
a2:32:15:27:8e:fb:c6:30:94:16:9d:69:c1:ed:6c:4e:f3:ed:
f7:eb:43:61:7b:39:5f:a2:b5:13:f4:7c:48:a7:be:94:14:6d:
aa:04:22:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:27:43 2026 by rpki-client