Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663130303a3a2f34302d3438203d3e20323134313838.roa
File: 326131343a316563373a663130303a3a2f34302d3438203d3e20323134313838.roa (raw, json)
Hash identifier: hBnaW+eKoSXEA0Xc2hXCucf5tvmCHC6Wz5gpGYmYCyE=
Subject key identifier: 54:AB:A4:86:6F:44:78:F2:F3:EF:E5:B5:1C:3A:DB:D1:E8:D5:9E:FE
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 78619C688A9D2EC9FCCCCA3315F83AC29072E293
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663130303a3a2f34302d3438203d3e20323134313838.roa
Signing time: Mon 20 Jul 2026 11:55:52 +0000
ROA not before: Mon 20 Jul 2026 11:50:52 +0000
ROA not after: Mon 19 Jul 2027 11:55:52 +0000
asID: 214188
IP address blocks: 2a14:1ec7:f100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:61:9c:68:8a:9d:2e:c9:fc:cc:ca:33:15:f8:3a:c2:90:72:e2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Jul 20 11:50:52 2026 GMT
Not After : Jul 19 11:55:52 2027 GMT
Subject: CN=54ABA4866F4478F2F3EFE5B51C3ADBD1E8D59EFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e6:2b:78:c7:e0:5c:7b:00:25:27:a9:e7:cc:
76:55:d2:1e:2e:87:56:06:92:b5:f8:3f:87:34:0a:
ad:6b:df:79:6a:ec:81:94:61:79:ab:59:5a:ed:ff:
2d:ea:3d:42:a3:66:d6:3c:31:30:f9:14:44:cc:3a:
80:d0:cb:ec:04:68:b3:73:53:b4:bb:ec:99:7b:28:
78:39:42:01:04:ae:bd:37:ae:44:fb:a1:99:fa:80:
d9:42:c6:ed:e4:ce:42:64:46:65:ee:74:62:41:1a:
35:de:a5:38:4c:f0:cd:3a:cb:39:c8:07:b2:01:95:
bb:a4:57:76:8f:63:18:c9:7d:fe:5b:69:db:14:e9:
bf:4f:d0:78:a1:61:6a:6e:02:4a:af:24:8d:f3:cc:
7a:b6:87:c7:c8:0d:12:ce:f4:96:85:f4:66:45:19:
d1:62:26:e1:c4:74:ce:8f:7f:48:fe:7e:84:28:d1:
33:77:37:72:59:04:83:bb:ed:23:f0:5a:37:a6:b2:
b8:7f:70:1f:dc:d5:6d:50:13:23:de:e2:b1:91:36:
7d:b2:c6:6e:73:f0:b2:ab:a2:8f:77:0e:3f:e7:a9:
7f:2b:f1:11:55:00:86:2f:68:5b:df:f8:17:6e:d2:
22:2e:4c:17:ca:0e:fd:72:c9:bf:2b:65:04:8c:61:
6a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AB:A4:86:6F:44:78:F2:F3:EF:E5:B5:1C:3A:DB:D1:E8:D5:9E:FE
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663130303a3a2f34302d3438203d3e20323134313838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:f100::/40
Signature Algorithm: sha256WithRSAEncryption
41:7a:49:34:11:b6:b8:f0:6c:cf:39:d6:e1:f8:c5:68:43:9a:
0c:dc:56:9c:0c:36:6c:5e:9e:3b:6a:9f:4a:62:80:62:42:8a:
bb:cd:8d:ab:5f:65:74:73:95:e9:d4:56:e5:35:0f:54:0b:c8:
8c:b4:08:c4:f3:cf:f8:20:7d:3d:d3:4f:b7:4a:2e:83:64:44:
f0:b5:75:c3:04:7a:32:02:8d:97:1b:71:96:c0:07:63:e8:09:
34:06:58:89:a6:a3:97:63:67:02:68:0a:10:7d:06:09:a6:fb:
29:40:55:1d:6c:27:19:f0:a9:8c:ee:cd:83:35:08:ca:8f:ce:
c4:58:2a:87:b8:29:f0:da:23:dc:f1:73:9e:14:3f:af:14:02:
5b:2a:8f:a7:3f:2e:db:78:38:50:21:62:5e:f0:50:ca:46:8c:
ef:25:e6:2d:16:3a:5c:14:7e:85:07:1e:39:71:c6:b9:30:53:
29:37:80:31:b3:19:7e:24:29:be:0e:41:52:53:38:6c:67:32:
d3:ee:d6:51:95:3c:e3:4e:5c:4f:06:2a:8d:a4:0b:22:a0:92:
8b:3f:b2:df:eb:d1:dc:03:b1:b5:8c:da:97:40:36:37:b6:34:
76:df:2f:49:ac:ae:aa:5c:35:de:32:87:23:ad:a2:2c:be:ff:
00:90:5d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:35:27 2026 by rpki-client