Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663730303a3a2f34342d3438203d3e20333937343233.roa
File: 326131343a316563373a663730303a3a2f34342d3438203d3e20333937343233.roa (raw, json)
Hash identifier: 3NaEQ7JEzM4oESWmvkMu3mTAfj7phWpZMjjU4RHfTkQ=
Subject key identifier: 6A:C8:D5:BE:A8:ED:72:D8:09:41:7C:94:16:41:15:9A:A8:96:09:BE
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 5AC112305BB0E3B2E441265BB58D4F51EC60E8B7
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663730303a3a2f34342d3438203d3e20333937343233.roa
Signing time: Wed 01 Oct 2025 18:40:22 +0000
ROA not before: Wed 01 Oct 2025 18:35:22 +0000
ROA not after: Wed 30 Sep 2026 18:40:22 +0000
asID: 397423
IP address blocks: 2a14:1ec7:f700::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 20:08:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:c1:12:30:5b:b0:e3:b2:e4:41:26:5b:b5:8d:4f:51:ec:60:e8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Oct 1 18:35:22 2025 GMT
Not After : Sep 30 18:40:22 2026 GMT
Subject: CN=6AC8D5BEA8ED72D809417C941641159AA89609BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:75:8d:26:a2:c1:23:5f:3c:13:94:c6:65:ab:
a3:2d:60:60:b1:dd:16:10:87:26:f6:c4:21:91:07:
72:13:24:11:bb:ba:93:10:a3:78:ce:60:a6:33:e8:
e1:64:cd:dc:32:f0:01:6f:aa:f6:bc:4b:9a:3c:f2:
a2:ab:91:04:a7:50:89:74:fd:da:8b:81:91:d6:93:
e5:65:1a:56:87:80:46:28:0c:2d:7e:25:b8:02:5d:
a2:cd:95:b2:65:09:18:6d:5c:cc:c3:60:83:03:72:
71:7d:0d:02:bb:66:5e:1c:22:98:4c:02:6d:af:5b:
cf:db:9e:ac:37:7b:35:7b:65:10:4b:d6:5c:8f:bb:
6e:ba:ee:80:d4:c5:f5:19:1e:d0:34:e5:17:bc:43:
58:d5:8d:2f:8d:64:22:21:87:a2:f0:9a:8a:41:fd:
4b:15:4f:d7:e4:5a:48:2b:ee:2d:12:ee:40:9f:c6:
6e:97:7e:b1:f9:23:38:d0:5d:0f:18:9b:11:e5:74:
ca:2d:18:96:d5:d5:c3:2a:8e:f6:43:dc:16:73:09:
1b:45:5b:b5:f6:e5:ad:3a:e3:b4:f3:da:af:f8:a3:
6a:fd:a9:52:c3:b7:be:66:df:ba:a4:0e:33:7b:9b:
5e:bd:0d:fd:0e:2d:2a:dd:8b:d5:da:b0:c6:3c:a0:
90:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C8:D5:BE:A8:ED:72:D8:09:41:7C:94:16:41:15:9A:A8:96:09:BE
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663730303a3a2f34342d3438203d3e20333937343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:f700::/44
Signature Algorithm: sha256WithRSAEncryption
16:ce:cd:47:9a:26:83:16:23:87:bb:9e:4f:fa:00:39:93:93:
f9:aa:5f:f2:66:de:95:41:e7:8f:80:a9:77:34:1f:10:00:25:
9f:1b:5e:c4:22:cd:df:6d:c7:ca:80:e7:50:06:c6:58:e7:78:
94:86:84:ae:aa:68:15:79:a7:ff:7c:82:8c:ef:b4:93:c7:81:
13:37:51:99:e4:64:28:69:d9:c3:77:9c:c6:7d:62:f5:e2:40:
b2:40:08:27:92:a9:d8:93:f9:65:60:bf:5b:b6:aa:d3:13:68:
0b:12:1e:cc:da:0d:c2:5b:a9:8a:0f:0f:00:c0:7f:cc:a4:82:
bf:b4:0c:fb:78:18:67:b0:49:37:b3:ce:d6:3b:57:fe:f8:0f:
83:ca:79:6d:11:38:0f:86:d2:c3:cc:d0:43:8e:b7:e3:b7:78:
c7:08:8d:d2:4b:cd:fa:9c:30:97:eb:56:45:0d:d5:a5:2c:56:
d8:e7:9f:c4:ae:d8:f6:64:f4:7f:1d:fd:7e:ff:20:ca:b5:0f:
68:23:5f:c8:8b:d2:ff:21:b9:f2:5e:28:2a:45:e1:37:7a:82:
18:a4:54:d8:80:fe:9f:2a:e2:fa:ee:4c:e8:57:22:13:47:87:
66:2b:55:b3:42:ec:25:74:e3:4b:0f:6b:3d:1c:f7:78:b4:7a:
1c:58:fd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:22:38 2025 by rpki-client