Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663930303a3a2f34302d3438203d3e20323139343836.roa
File: 326131343a316563373a663930303a3a2f34302d3438203d3e20323139343836.roa (raw, json)
Hash identifier: Fwq6qYtMkYBBoUvg4jRr4TKIfWWIB6A3ygpu+nJoJWg=
Subject key identifier: F1:2D:CC:8B:14:3A:77:07:3B:E0:93:EB:B6:97:C7:96:78:DF:09:A5
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 65C9A938EA676AD8450E42B5B95D4533F32CB665
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663930303a3a2f34302d3438203d3e20323139343836.roa
Signing time: Mon 29 Jun 2026 14:00:17 +0000
ROA not before: Mon 29 Jun 2026 13:55:17 +0000
ROA not after: Mon 28 Jun 2027 14:00:17 +0000
asID: 219486
IP address blocks: 2a14:1ec7:f900::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:c9:a9:38:ea:67:6a:d8:45:0e:42:b5:b9:5d:45:33:f3:2c:b6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Jun 29 13:55:17 2026 GMT
Not After : Jun 28 14:00:17 2027 GMT
Subject: CN=F12DCC8B143A77073BE093EBB697C79678DF09A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e1:f1:74:bf:04:88:b1:5a:8f:b0:c2:17:57:
fb:ff:0b:14:8e:7d:e6:4b:5b:e8:55:db:13:e1:2d:
61:98:d2:21:fa:c2:3d:00:e8:35:bd:89:7b:f8:c4:
e6:11:ee:dc:6d:b2:18:39:b0:b7:da:ac:67:30:d7:
57:75:f4:20:ce:40:d5:3c:d5:48:69:ba:a1:92:7f:
f9:cb:c8:b8:80:62:b0:bb:d9:8d:3f:d4:83:ae:85:
ae:dd:3d:da:39:b6:22:67:3a:70:1e:b5:c0:99:44:
fe:8f:ad:50:a7:b5:bf:4c:62:a4:8f:c8:ee:ca:c5:
cc:32:14:89:e9:72:8e:8a:d5:a1:52:e5:0b:b5:49:
6d:e2:af:82:ab:0c:bb:4b:48:23:ce:af:63:ce:ea:
32:83:4a:30:68:a6:5b:2a:45:99:15:b0:b7:d5:f6:
8d:bb:80:33:75:52:85:b3:be:c9:75:17:e2:57:04:
be:fa:24:a4:01:e0:12:3b:1c:6c:dc:b5:33:bd:21:
08:ac:df:c7:02:a4:a6:74:a6:e5:7d:17:ad:93:35:
05:1b:bc:92:59:ec:dc:54:26:20:4d:8b:14:b9:5f:
1e:2e:c8:ed:3f:e8:b9:e0:45:8d:e0:14:36:d6:e5:
90:a3:3c:30:57:91:6c:4e:0d:11:45:87:e9:9b:cf:
f5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2D:CC:8B:14:3A:77:07:3B:E0:93:EB:B6:97:C7:96:78:DF:09:A5
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663930303a3a2f34302d3438203d3e20323139343836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:f900::/40
Signature Algorithm: sha256WithRSAEncryption
45:a3:d4:b5:b5:3b:b0:9e:90:0b:73:11:3b:52:54:7f:54:fd:
0b:39:d5:16:90:6b:9e:70:ba:11:d4:d2:e7:63:e7:42:7f:4e:
9d:38:f2:05:1c:68:5a:ef:bc:c6:fe:d0:8c:40:27:d4:68:7e:
5e:27:90:34:de:c3:fd:22:11:c7:9e:21:49:b1:3e:ae:da:3f:
05:14:47:05:2c:9d:3d:15:38:39:ab:d6:96:dc:84:0b:c4:0f:
ad:a9:f2:7c:8b:10:e0:f4:06:64:8e:ca:42:e7:21:86:30:9e:
54:1c:8c:05:a8:10:e6:0e:2d:a4:5e:0a:7c:f8:12:62:fa:7c:
84:be:39:61:5b:e7:d2:4a:d8:d9:0b:de:81:13:70:81:8a:9b:
76:16:93:22:5e:8a:84:7b:0e:39:0d:7c:2d:4b:c1:53:39:b1:
6d:fd:c9:59:30:71:33:37:94:ad:d8:d7:d6:36:83:a3:8f:1b:
7c:37:19:85:8e:b7:85:d6:a6:f0:85:0b:d8:6f:d5:48:15:09:
8e:48:38:f9:eb:26:cb:1f:96:8c:82:7c:cc:78:eb:79:e2:e5:
9a:4b:5d:28:9a:83:64:a8:0a:d3:ae:4b:c0:e5:72:7e:a2:f6:
17:2f:d8:e2:b4:7c:ad:f5:02:30:21:58:80:06:2f:8f:b2:3c:
d7:b7:c7:95
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUZcmpOOpnathFDkK1uV1FM/MstmUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEzNGVlOTg3ZTA4ZDhiNTU4M2ZlZWY2MjFhMDMxNTBj
NGYzNTQzNDAeFw0yNjA2MjkxMzU1MTdaFw0yNzA2MjgxNDAwMTdaMDMxMTAvBgNV
BAMTKEYxMkRDQzhCMTQzQTc3MDczQkUwOTNFQkI2OTdDNzk2NzhERjA5QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU4fF0vwSIsVqPsMIXV/v/CxSO
feZLW+hV2xPhLWGY0iH6wj0A6DW9iXv4xOYR7txtshg5sLfarGcw11d19CDOQNU8
1UhpuqGSf/nLyLiAYrC72Y0/1IOuha7dPdo5tiJnOnAetcCZRP6PrVCntb9MYqSP
yO7KxcwyFInpco6K1aFS5Qu1SW3ir4KrDLtLSCPOr2PO6jKDSjBoplsqRZkVsLfV
9o27gDN1UoWzvsl1F+JXBL76JKQB4BI7HGzctTO9IQis38cCpKZ0puV9F62TNQUb
vJJZ7NxUJiBNixS5Xx4uyO0/6LngRY3gFDbW5ZCjPDBXkWxODRFFh+mbz/XZAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQU8S3MixQ6dwc74JPrtpfHlnjfCaUwHwYDVR0j
BBgwFoAUMTTumH4I2LVYP+72IaAxUMTzVDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWEzYmI5M2YtOThhNC00YzdlLWEwZTEtODA1N2E0ZjA4
NmM5LzAvMzEzNEVFOTg3RTA4RDhCNTU4M0ZFRUY2MjFBMDMxNTBDNEYzNTQzNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01UVHVtSDRJMkxWWVAtNzJJYUF4VU1U
elZEUS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWEzYmI5M2Yt
OThhNC00YzdlLWEwZTEtODA1N2E0ZjA4NmM5LzAvMzI2MTMxMzQzYTMxNjU2MzM3
M2E2NjM5MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzOTM0MzgzNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoUHsf5MA0GCSqGSIb3DQEBCwUAA4IBAQBFo9S1tTuwnpALcxE7
UlR/VP0LOdUWkGuecLoR1NLnY+dCf06dOPIFHGha77zG/tCMQCfUaH5eJ5A03sP9
IhHHniFJsT6u2j8FFEcFLJ09FTg5q9aW3IQLxA+tqfJ8ixDg9AZkjspC5yGGMJ5U
HIwFqBDmDi2kXgp8+BJi+nyEvjlhW+fSStjZC96BE3CBipt2FpMiXoqEew45DXwt
S8FTObFt/clZMHEzN5St2NfWNoOjjxt8NxmFjreF1qbwhQvYb9VIFQmOSDj56ybL
H5aMgnzMeOt54uWaS10omoNkqArTrkvA5XJ+ovYXL9jitHyt9QIwIViABi+PsjzX
t8eV
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:47 2026 by rpki-client