Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a3a2f34382d3438203d3e20323135323438.roa
File: 326131343a333863303a3a2f34382d3438203d3e20323135323438.roa (raw, json)
Hash identifier: lS1Iql8MBgdrATO78dHDXVjUA4qYq6WwDN1XR+tCAz8=
Subject key identifier: CF:9E:97:96:F8:52:7A:48:9B:D8:C1:A2:E3:31:3C:BB:72:7E:4A:E4
Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial: 61E7EB47E9B59E6EA5EFCBCA2F6EEC1D915A7AF6
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a3a2f34382d3438203d3e20323135323438.roa
Signing time: Sun 29 Jun 2025 21:56:05 +0000
ROA not before: Sun 29 Jun 2025 21:51:05 +0000
ROA not after: Sun 28 Jun 2026 21:56:05 +0000
asID: 215248
IP address blocks: 2a14:38c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:e7:eb:47:e9:b5:9e:6e:a5:ef:cb:ca:2f:6e:ec:1d:91:5a:7a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Validity
Not Before: Jun 29 21:51:05 2025 GMT
Not After : Jun 28 21:56:05 2026 GMT
Subject: CN=CF9E9796F8527A489BD8C1A2E3313CBB727E4AE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:84:2a:46:65:e9:ec:e1:60:12:c2:12:3c:c6:
40:b9:c5:17:c5:4b:91:61:62:fa:69:dd:21:a0:f7:
62:dd:44:d0:f7:eb:c3:2d:f8:e1:a2:7f:9f:f3:cd:
83:3a:b1:8d:2f:15:12:28:9f:37:66:e4:90:11:02:
42:af:ca:93:f1:80:5d:de:32:d9:c5:70:dd:76:7f:
fe:a3:c7:18:86:5d:34:58:69:6c:2a:d4:0f:f3:56:
89:9e:66:c2:88:01:61:bf:e3:eb:9e:7d:60:c1:c6:
7e:2d:51:d0:dd:6f:09:38:0f:69:6e:43:43:e5:80:
7a:44:ac:93:c6:f3:9f:e2:89:8a:e2:62:ac:a0:ed:
78:a4:ce:35:d9:cb:cc:39:9f:f6:2b:a2:f7:95:3b:
0c:76:fb:86:a6:40:4f:86:d8:f2:ee:6f:a2:9f:0d:
03:3e:b0:60:5a:96:fa:1e:60:91:1b:85:ee:46:02:
cf:02:97:3b:3d:1d:06:0e:b2:1a:5e:00:57:96:aa:
72:8d:72:2b:8d:79:b9:82:b1:85:47:46:06:fd:93:
24:79:50:4b:e6:f3:fe:8c:94:8a:29:e6:35:b2:34:
5d:e4:25:9e:cf:e7:34:45:c2:7c:48:c6:bd:f2:fd:
a6:a7:57:90:68:87:94:a7:cd:32:b4:46:68:a0:04:
ae:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9E:97:96:F8:52:7A:48:9B:D8:C1:A2:E3:31:3C:BB:72:7E:4A:E4
X509v3 Authority Key Identifier:
keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a3a2f34382d3438203d3e20323135323438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:38c0::/48
Signature Algorithm: sha256WithRSAEncryption
c8:40:6c:56:4e:9f:2c:75:51:d9:81:54:76:ba:1e:ae:54:e8:
c9:12:e0:b3:16:c0:ea:e2:d5:f6:95:9a:26:81:69:e3:ce:51:
8c:22:9d:1d:e5:59:60:e2:67:48:ae:f3:20:6e:7e:76:53:aa:
fe:41:cc:78:3f:bd:e4:2b:79:58:27:04:33:da:dd:9f:b7:5a:
bc:c0:9c:27:49:ad:83:cb:30:95:d7:c0:a0:74:ac:b7:af:78:
1d:ea:c3:d9:82:dc:de:3b:a3:a3:a5:4e:c7:e1:4c:17:11:bc:
d8:02:71:40:6f:81:d6:d4:13:06:25:ba:a1:01:58:db:7a:cd:
57:cb:10:dd:42:1f:d3:04:7d:60:58:aa:4c:cd:12:46:ab:2b:
3a:cd:aa:e2:a0:3f:fd:1c:e8:45:c2:bb:b8:10:0e:7f:72:54:
30:b7:9f:c6:3c:31:63:fd:a6:66:db:33:93:22:08:ca:fa:8e:
c4:ba:98:38:a9:b6:02:82:9e:e8:32:ba:26:fc:2e:d3:c2:6c:
34:af:73:0f:ad:ea:cd:1d:da:62:53:5d:f2:f3:33:6e:51:fb:
f1:ab:01:cc:0f:5e:a7:06:5a:74:e2:2c:8f:33:f8:31:44:f9:
77:c4:30:ae:68:9a:20:ad:bb:d8:99:40:3e:17:a6:ea:0a:9f:
ea:a0:e0:12
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUYefrR+m1nm6l78vKL27sHZFaevYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWNkYzA0YmIyM2VhYTRjZWNjNzkxZGZlMDRiYjAyOGI3
ZTc5N2I2ODAeFw0yNTA2MjkyMTUxMDVaFw0yNjA2MjgyMTU2MDVaMDMxMTAvBgNV
BAMTKENGOUU5Nzk2Rjg1MjdBNDg5QkQ4QzFBMkUzMzEzQ0JCNzI3RTRBRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCohCpGZens4WASwhI8xkC5xRfF
S5FhYvpp3SGg92LdRND368Mt+OGif5/zzYM6sY0vFRIonzdm5JARAkKvypPxgF3e
MtnFcN12f/6jxxiGXTRYaWwq1A/zVomeZsKIAWG/4+uefWDBxn4tUdDdbwk4D2lu
Q0PlgHpErJPG85/iiYriYqyg7XikzjXZy8w5n/YroveVOwx2+4amQE+G2PLub6Kf
DQM+sGBalvoeYJEbhe5GAs8Clzs9HQYOshpeAFeWqnKNciuNebmCsYVHRgb9kyR5
UEvm8/6MlIop5jWyNF3kJZ7P5zRFwnxIxr3y/aanV5Boh5SnzTK0RmigBK7ZAgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQUz56XlvhSekib2MGi4zE8u3J+SuQwHwYDVR0j
BBgwFoAUXNwEuyPqpM7MeR3+BLsCi355e2gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjli
N2M0LzAvNUNEQzA0QkIyM0VBQTRDRUNDNzkxREZFMDRCQjAyOEI3RTc5N0I2OC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hOd0V1eVBxcE03TWVSMy1CTHNDaTM1
NWUyZy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAt
NDY1My00OGQ0LThmYzQtNTgwZDEzNjliN2M0LzAvMzI2MTMxMzQzYTMzMzg2MzMw
M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMTM1MzIzNDM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcA
KhQ4wAAAMA0GCSqGSIb3DQEBCwUAA4IBAQDIQGxWTp8sdVHZgVR2uh6uVOjJEuCz
FsDq4tX2lZomgWnjzlGMIp0d5Vlg4mdIrvMgbn52U6r+Qcx4P73kK3lYJwQz2t2f
t1q8wJwnSa2DyzCV18CgdKy3r3gd6sPZgtzeO6OjpU7H4UwXEbzYAnFAb4HW1BMG
JbqhAVjbes1XyxDdQh/TBH1gWKpMzRJGqys6zarioD/9HOhFwru4EA5/clQwt5/G
PDFj/aZm2zOTIgjK+o7Eupg4qbYCgp7oMrom/C7Twmw0r3MPrerNHdpiU13y8zNu
UfvxqwHMD16nBlp04iyPM/gxRPl3xDCuaJogrbvYmUA+F6bqCp/qoOAS
-----END CERTIFICATE-----
Generated at Sun Jul 20 20:12:34 2025 by rpki-client