Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a643030303a3a2f33362d3430203d3e20323135343637.roa
File: 326131343a316563373a643030303a3a2f33362d3430203d3e20323135343637.roa (raw, json)
Hash identifier: kr3h+ZZpdPa9Ajn2PlWn0XhjvxPWoTnlFWF3z7ONgFs=
Subject key identifier: 13:24:EF:6D:3A:00:0F:F1:DF:0C:21:F5:1D:63:F2:8B:F6:79:23:9C
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 56B91C9B3E730A63F2D373F7777914C9861F35A0
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a643030303a3a2f33362d3430203d3e20323135343637.roa
Signing time: Sun 12 Jul 2026 18:26:18 +0000
ROA not before: Sun 12 Jul 2026 18:21:18 +0000
ROA not after: Sun 11 Jul 2027 18:26:18 +0000
asID: 215467
IP address blocks: 2a14:1ec7:d000::/36 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:b9:1c:9b:3e:73:0a:63:f2:d3:73:f7:77:79:14:c9:86:1f:35:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Jul 12 18:21:18 2026 GMT
Not After : Jul 11 18:26:18 2027 GMT
Subject: CN=1324EF6D3A000FF1DF0C21F51D63F28BF679239C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:72:6d:3a:1d:e0:4c:b8:24:be:dd:b5:88:
b7:f6:cf:6f:eb:4b:af:28:17:ec:ec:b4:63:04:51:
9c:16:7c:8e:79:dd:b1:1a:e4:8b:6a:f7:01:6a:b0:
3a:3c:a1:5b:00:36:ba:61:40:91:d3:06:e8:17:70:
d1:91:36:56:e4:b8:be:59:0d:bb:7a:21:ae:67:e3:
8f:33:17:e2:2e:90:0c:ac:35:43:37:74:b0:d6:21:
06:21:a5:b2:b9:dd:70:0c:2b:25:f2:4a:b4:d4:97:
b4:a4:96:84:4b:36:96:d2:08:51:8b:0f:fe:5e:14:
af:34:96:8e:44:a4:0b:b1:7b:a0:13:96:b6:4b:66:
0b:d7:0c:b0:b2:5d:4b:30:f3:26:58:4d:a9:4a:b0:
41:f7:c8:f5:b1:19:31:cb:c6:0a:c4:6f:f0:34:18:
49:3f:ab:40:0c:99:8f:b7:0e:b7:be:d3:46:3b:c2:
59:c3:bc:73:84:e5:28:82:bc:e9:e3:27:1c:62:2b:
02:e2:8b:f9:f3:b4:81:cd:19:fd:31:61:a0:3a:9e:
c9:91:28:5d:87:08:75:28:f0:1f:85:55:92:eb:c3:
bd:af:f2:73:c0:27:85:3e:25:3f:c4:29:cb:da:d7:
f7:e7:29:fe:f5:d1:6b:20:ec:66:eb:8e:47:7d:7e:
77:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:24:EF:6D:3A:00:0F:F1:DF:0C:21:F5:1D:63:F2:8B:F6:79:23:9C
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a643030303a3a2f33362d3430203d3e20323135343637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:d000::/36
Signature Algorithm: sha256WithRSAEncryption
1a:58:ff:b1:67:7f:12:5c:30:b8:60:e4:56:d8:f5:6b:4a:f1:
d4:fe:3b:b3:03:fb:3b:fe:19:8e:db:48:f7:33:3f:ec:15:a7:
24:a7:20:69:35:df:28:00:57:08:f7:b4:08:5b:6f:22:c5:6e:
5f:72:38:30:e0:a3:f7:28:2b:2a:33:49:00:27:01:3b:d7:ad:
1f:01:7c:87:7b:c6:08:68:c4:b9:39:61:71:ec:92:74:c9:5f:
e7:f9:10:3a:86:2d:29:7e:95:1f:0c:eb:3e:82:3c:eb:29:e2:
90:55:51:05:20:6f:b4:e8:6b:36:cd:42:78:76:ed:54:25:51:
d5:0f:df:eb:57:c6:39:25:81:b1:5f:b3:1e:2f:98:66:6a:8c:
42:04:81:dd:17:3c:43:d1:70:bf:20:e0:26:29:d9:7a:85:44:
14:39:8c:80:1b:d6:d2:cd:14:aa:91:f0:4d:ea:e0:e1:21:5f:
25:26:68:e5:77:ca:0c:5b:64:d3:64:46:9d:06:46:4d:36:b4:
db:96:c6:44:2f:ac:b3:73:37:81:7a:85:e3:d9:34:12:02:a0:
ba:b2:02:90:d7:36:fa:77:f7:bd:32:4e:bf:ab:65:2b:5e:85:
f2:3f:58:29:e6:70:cf:c9:17:e1:d2:9f:ee:10:9d:c2:71:31:
02:9e:24:c7
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUVrkcmz5zCmPy03P3d3kUyYYfNaAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEzNGVlOTg3ZTA4ZDhiNTU4M2ZlZWY2MjFhMDMxNTBj
NGYzNTQzNDAeFw0yNjA3MTIxODIxMThaFw0yNzA3MTExODI2MThaMDMxMTAvBgNV
BAMTKDEzMjRFRjZEM0EwMDBGRjFERjBDMjFGNTFENjNGMjhCRjY3OTIzOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCro3JtOh3gTLgkvt21iLf2z2/r
S68oF+zstGMEUZwWfI553bEa5Itq9wFqsDo8oVsANrphQJHTBugXcNGRNlbkuL5Z
Dbt6Ia5n448zF+IukAysNUM3dLDWIQYhpbK53XAMKyXySrTUl7SkloRLNpbSCFGL
D/5eFK80lo5EpAuxe6ATlrZLZgvXDLCyXUsw8yZYTalKsEH3yPWxGTHLxgrEb/A0
GEk/q0AMmY+3Dre+00Y7wlnDvHOE5SiCvOnjJxxiKwLii/nztIHNGf0xYaA6nsmR
KF2HCHUo8B+FVZLrw72v8nPAJ4U+JT/EKcva1/fnKf710Wsg7Gbrjkd9fnctAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUEyTvbToAD/HfDCH1HWPyi/Z5I5wwHwYDVR0j
BBgwFoAUMTTumH4I2LVYP+72IaAxUMTzVDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWEzYmI5M2YtOThhNC00YzdlLWEwZTEtODA1N2E0ZjA4
NmM5LzAvMzEzNEVFOTg3RTA4RDhCNTU4M0ZFRUY2MjFBMDMxNTBDNEYzNTQzNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01UVHVtSDRJMkxWWVAtNzJJYUF4VU1U
elZEUS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWEzYmI5M2Yt
OThhNC00YzdlLWEwZTEtODA1N2E0ZjA4NmM5LzAvMzI2MTMxMzQzYTMxNjU2MzM3
M2E2NDMwMzAzMDNhM2EyZjMzMzYyZDM0MzAyMDNkM2UyMDMyMzEzNTM0MzYzNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGBCoUHsfQMA0GCSqGSIb3DQEBCwUAA4IBAQAaWP+xZ38SXDC4YORW
2PVrSvHU/juzA/s7/hmO20j3Mz/sFackpyBpNd8oAFcI97QIW28ixW5fcjgw4KP3
KCsqM0kAJwE7160fAXyHe8YIaMS5OWFx7JJ0yV/n+RA6hi0pfpUfDOs+gjzrKeKQ
VVEFIG+06Gs2zUJ4du1UJVHVD9/rV8Y5JYGxX7MeL5hmaoxCBIHdFzxD0XC/IOAm
Kdl6hUQUOYyAG9bSzRSqkfBN6uDhIV8lJmjld8oMW2TTZEadBkZNNrTblsZEL6yz
czeBeoXj2TQSAqC6sgKQ1zb6d/e9Mk6/q2UrXoXyP1gp5nDPyRfh0p/uEJ3CcTEC
niTH
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:32:54 2026 by rpki-client