Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/326130343a626463373a3130303a3a2f34382d3438203d3e203633343733.roa
File: 326130343a626463373a3130303a3a2f34382d3438203d3e203633343733.roa (raw, json)
Hash identifier: jTAErXyb7j4UUc1GuUuWLR6c3lYWBx7bfo4YUI64LQM=
Subject key identifier: 41:80:72:8A:AB:F2:A3:F1:7D:04:88:B9:B1:28:79:7B:28:C4:A5:2B
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 02E6684EC0A22E85B45DF28A0EBADFDFFB672DBA
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/326130343a626463373a3130303a3a2f34382d3438203d3e203633343733.roa
Signing time: Mon 14 Sep 2026 09:28:55 +0000
ROA not before: Mon 14 Sep 2026 09:23:55 +0000
ROA not after: Mon 13 Sep 2027 09:28:55 +0000
asID: 63473
IP address blocks: 2a04:bdc7:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:e6:68:4e:c0:a2:2e:85:b4:5d:f2:8a:0e:ba:df:df:fb:67:2d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 14 09:23:55 2026 GMT
Not After : Sep 13 09:28:55 2027 GMT
Subject: CN=4180728AABF2A3F17D0488B9B128797B28C4A52B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cb:d2:30:2e:91:86:3b:4a:3b:ff:78:47:4b:
63:59:9d:5a:0a:56:07:3e:98:d4:00:1d:3f:35:37:
ef:0d:69:6d:29:31:90:9b:6e:35:28:e0:a5:32:68:
a4:57:63:2b:57:c7:a7:db:80:c0:85:3e:20:b8:06:
ad:0a:f0:99:20:71:2e:76:3a:59:fd:64:b8:36:1d:
a2:dd:92:78:11:83:3f:50:ff:08:b8:70:8f:17:a1:
61:e5:13:58:66:b8:49:ce:70:71:f2:f8:2e:52:58:
1f:06:e5:ed:24:51:79:39:1a:20:64:50:10:70:15:
3a:c5:c0:ec:88:5a:12:90:d2:77:fa:37:de:84:27:
2e:e4:95:00:0b:29:dc:23:63:16:eb:d4:b6:33:a2:
0e:81:1c:92:2c:98:2f:bf:7b:a7:ef:b3:e9:21:c5:
a2:51:d7:65:16:5e:c5:7d:8a:7d:b9:af:02:cc:cb:
21:e7:b7:52:0d:1a:e3:f9:b9:a8:73:33:1f:e4:d1:
e8:33:a7:46:9b:43:37:e3:a1:c2:91:3b:b4:a0:ec:
23:a4:7b:5d:1c:ea:3b:25:3e:a2:dd:3b:91:df:c8:
86:9a:86:0d:4e:2f:25:29:6e:a8:0b:8d:af:6e:a5:
c8:66:9d:2f:fd:10:53:b3:89:8a:18:f5:20:b4:dc:
1f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:80:72:8A:AB:F2:A3:F1:7D:04:88:B9:B1:28:79:7B:28:C4:A5:2B
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/326130343a626463373a3130303a3a2f34382d3438203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:bdc7:100::/48
Signature Algorithm: sha256WithRSAEncryption
87:a5:75:1e:8e:56:97:f3:d6:de:6b:62:37:08:4c:cd:9b:5e:
ff:20:9e:f2:47:df:56:a0:be:c9:20:a2:ab:bf:04:9f:b5:bb:
42:ee:59:7f:68:b7:93:7f:0e:bf:5f:f5:9f:5a:e1:22:f9:ae:
97:32:1d:37:1f:59:18:6c:45:a6:34:53:6f:d5:00:65:06:03:
c0:bd:8a:12:10:36:66:5f:24:ac:99:78:b1:69:74:87:18:4c:
87:9a:15:0a:cf:7a:9d:53:8f:15:1f:7a:10:66:08:00:5d:61:
0c:99:62:8f:a8:42:b6:62:ec:bb:44:20:25:41:47:b0:4e:45:
9e:2c:ed:94:0e:92:e6:72:b8:df:63:1e:50:41:37:38:54:62:
4e:13:7d:39:3e:de:b9:07:38:b6:97:fd:bf:2c:b8:ea:08:bc:
7d:d0:87:03:be:43:b9:e1:44:7e:24:1f:24:88:72:80:05:6d:
6b:10:24:1a:92:80:47:68:66:6d:dd:69:4f:b6:a1:0a:64:1a:
e7:16:4b:98:89:a6:4c:8c:24:d9:71:a9:c8:78:d5:57:0e:8c:
94:fc:aa:6c:1b:4d:c4:cf:12:47:e1:8f:81:f4:ec:64:bd:bf:
6a:e7:d1:18:b3:96:a5:b1:a8:b4:fd:37:01:85:84:a6:0b:f7:
b5:2c:0c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:47:42 2026 by rpki-client