Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a666330303a3a2f34302d3438203d3e20323130363435.roa
File: 326131343a316563373a666330303a3a2f34302d3438203d3e20323130363435.roa (raw, json)
Hash identifier: RfkBU8NJpbOif2dOHGWJSCZr3u5D5gLbyUQX0KEcKIM=
Subject key identifier: F5:B4:2E:10:F2:A8:12:F8:19:4D:5C:69:DD:B1:83:C4:40:B3:03:68
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 1D3DA8D22FA5766E6C406F2A08044F0825D77764
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a666330303a3a2f34302d3438203d3e20323130363435.roa
Signing time: Wed 15 Jul 2026 09:55:51 +0000
ROA not before: Wed 15 Jul 2026 09:50:51 +0000
ROA not after: Wed 14 Jul 2027 09:55:51 +0000
asID: 210645
IP address blocks: 2a14:1ec7:fc00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:3d:a8:d2:2f:a5:76:6e:6c:40:6f:2a:08:04:4f:08:25:d7:77:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Jul 15 09:50:51 2026 GMT
Not After : Jul 14 09:55:51 2027 GMT
Subject: CN=F5B42E10F2A812F8194D5C69DDB183C440B30368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:6e:90:64:d4:f7:ee:4d:e9:0c:c1:26:01:
56:36:13:ec:ef:b8:3f:8c:27:36:26:04:63:e1:73:
97:94:e2:c6:57:5c:f1:2a:71:0f:70:1d:b5:71:4a:
cc:7d:48:78:d9:8c:da:4c:35:36:2c:88:95:d6:59:
73:64:31:e5:e1:17:77:03:e0:a4:8b:31:ba:89:3f:
f5:60:e3:d5:fd:dd:18:ef:91:f7:21:54:33:c4:1d:
c0:20:84:ce:5e:2b:af:df:7c:76:b6:8c:d9:97:11:
55:1a:d0:d8:f6:e9:14:49:66:21:e3:18:9c:11:f9:
09:58:78:af:16:92:b6:10:0b:99:96:19:99:62:42:
b9:25:8c:b9:80:8a:12:2f:95:5d:91:62:60:55:75:
da:5e:6e:05:be:2c:93:37:8d:45:00:bb:ff:08:46:
34:c9:9b:de:18:03:96:ab:da:e3:06:62:37:c6:d3:
9e:25:30:83:d0:23:00:b8:f7:49:1f:d9:7b:ef:ef:
79:c8:6c:7b:05:62:b2:72:58:7f:5e:97:65:cb:e6:
c2:3d:23:5f:dd:11:dc:39:56:59:56:80:c6:80:ca:
39:5a:3e:5b:3f:76:77:27:86:97:11:fc:37:57:44:
2b:21:33:92:74:d6:c3:a5:06:58:ad:a0:af:e1:20:
86:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B4:2E:10:F2:A8:12:F8:19:4D:5C:69:DD:B1:83:C4:40:B3:03:68
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a666330303a3a2f34302d3438203d3e20323130363435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:fc00::/40
Signature Algorithm: sha256WithRSAEncryption
09:45:a9:8b:87:ee:c2:1c:16:32:58:d7:82:3e:51:d7:bc:08:
64:e7:51:e9:0e:35:09:32:00:49:9e:b8:00:ec:27:f5:39:b6:
94:ca:b6:49:0d:22:01:77:72:8d:aa:f8:22:f1:36:42:91:f5:
58:bd:bd:fa:1e:c7:e7:ca:e9:a8:3c:cb:73:4f:4c:57:84:b8:
66:fe:23:31:fd:84:e9:62:9b:28:db:4f:bb:d4:83:3d:38:db:
ca:98:90:d5:4b:96:83:0a:87:c9:55:22:db:74:40:24:17:0c:
14:c6:8d:6c:0c:b6:9b:f4:43:d9:8e:c6:70:71:b9:5e:c4:3a:
51:ac:fd:d7:39:1f:f4:d3:c3:9f:1e:18:34:01:d6:18:20:d5:
21:d7:da:d4:bb:6d:32:04:ae:d3:be:70:6f:7c:c5:07:10:05:
9e:cd:36:e7:14:57:12:96:c2:09:52:3b:d0:c1:fb:0b:9c:40:
c3:8d:c3:67:4e:70:3c:93:ed:ba:0e:cd:66:a7:3b:78:f4:20:
35:7f:c0:95:07:b1:d6:96:92:80:6e:6f:67:44:4f:e9:6a:3c:
cd:05:e9:26:81:73:94:8c:84:0b:d9:3f:d4:20:61:1e:7f:02:
76:97:38:54:28:5d:98:d0:cb:a0:d7:a2:b6:34:c6:67:c6:5c:
ab:23:7a:70
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUHT2o0i+ldm5sQG8qCARPCCXXd2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEzNGVlOTg3ZTA4ZDhiNTU4M2ZlZWY2MjFhMDMxNTBj
NGYzNTQzNDAeFw0yNjA3MTUwOTUwNTFaFw0yNzA3MTQwOTU1NTFaMDMxMTAvBgNV
BAMTKEY1QjQyRTEwRjJBODEyRjgxOTRENUM2OUREQjE4M0M0NDBCMzAzNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyUG6QZNT37k3pDMEmAVY2E+zv
uD+MJzYmBGPhc5eU4sZXXPEqcQ9wHbVxSsx9SHjZjNpMNTYsiJXWWXNkMeXhF3cD
4KSLMbqJP/Vg49X93RjvkfchVDPEHcAghM5eK6/ffHa2jNmXEVUa0Nj26RRJZiHj
GJwR+QlYeK8WkrYQC5mWGZliQrkljLmAihIvlV2RYmBVddpebgW+LJM3jUUAu/8I
RjTJm94YA5ar2uMGYjfG054lMIPQIwC490kf2Xvv73nIbHsFYrJyWH9el2XL5sI9
I1/dEdw5VllWgMaAyjlaPls/dncnhpcR/DdXRCshM5J01sOlBlitoK/hIIa7AgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQU9bQuEPKoEvgZTVxp3bGDxECzA2gwHwYDVR0j
BBgwFoAUMTTumH4I2LVYP+72IaAxUMTzVDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWEzYmI5M2YtOThhNC00YzdlLWEwZTEtODA1N2E0ZjA4
NmM5LzAvMzEzNEVFOTg3RTA4RDhCNTU4M0ZFRUY2MjFBMDMxNTBDNEYzNTQzNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01UVHVtSDRJMkxWWVAtNzJJYUF4VU1U
elZEUS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWEzYmI5M2Yt
OThhNC00YzdlLWEwZTEtODA1N2E0ZjA4NmM5LzAvMzI2MTMxMzQzYTMxNjU2MzM3
M2E2NjYzMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzMDM2MzQzNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoUHsf8MA0GCSqGSIb3DQEBCwUAA4IBAQAJRamLh+7CHBYyWNeC
PlHXvAhk51HpDjUJMgBJnrgA7Cf1ObaUyrZJDSIBd3KNqvgi8TZCkfVYvb36Hsfn
yumoPMtzT0xXhLhm/iMx/YTpYpso20+71IM9ONvKmJDVS5aDCofJVSLbdEAkFwwU
xo1sDLab9EPZjsZwcblexDpRrP3XOR/008OfHhg0AdYYINUh19rUu20yBK7TvnBv
fMUHEAWezTbnFFcSlsIJUjvQwfsLnEDDjcNnTnA8k+26Ds1mpzt49CA1f8CVB7HW
lpKAbm9nRE/pajzNBekmgXOUjIQL2T/UIGEefwJ2lzhUKF2Y0Mug16K2NMZnxlyr
I3pw
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:35:09 2026 by rpki-client