Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a383230303a3a2f34302d3438203d3e20323139303538.roa
File: 326131343a316563373a383230303a3a2f34302d3438203d3e20323139303538.roa (raw, json)
Hash identifier: PNPDN66ZRcmurtaNOVwhS4nUS5hhfJbbUwbMOvvrGgw=
Subject key identifier: 5A:4E:24:3F:A4:CB:A4:6D:CB:1D:89:2D:1C:1D:01:2C:F4:B2:F8:E0
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 697F7AEDE2F9364DF4D5EBDEEE5861A7A7C6A4B4
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a383230303a3a2f34302d3438203d3e20323139303538.roa
Signing time: Tue 04 Aug 2026 13:25:27 +0000
ROA not before: Tue 04 Aug 2026 13:20:27 +0000
ROA not after: Tue 03 Aug 2027 13:25:27 +0000
asID: 219058
IP address blocks: 2a14:1ec7:8200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:7f:7a:ed:e2:f9:36:4d:f4:d5:eb:de:ee:58:61:a7:a7:c6:a4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Aug 4 13:20:27 2026 GMT
Not After : Aug 3 13:25:27 2027 GMT
Subject: CN=5A4E243FA4CBA46DCB1D892D1C1D012CF4B2F8E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f9:13:c0:d2:49:bd:9a:02:76:b4:34:c0:c7:
88:35:f9:36:0d:d6:a0:b9:18:36:12:e3:0c:cd:e5:
96:7f:5a:7f:95:c1:a7:97:74:a5:a4:12:10:71:c2:
2e:55:d2:20:58:c3:4c:a2:10:4b:17:46:85:a9:38:
61:0e:e6:23:89:38:fc:5d:da:90:78:fc:e6:2b:96:
92:ea:82:cc:58:33:10:89:c3:44:28:f7:c1:07:1e:
d4:09:26:52:6f:48:d2:a1:e1:3a:5e:bc:fc:f1:8a:
82:0c:8b:23:b8:48:aa:fb:07:ac:a2:ee:c1:e3:bf:
01:5a:df:ea:dc:41:0e:d0:4c:a7:58:fe:c3:7e:87:
69:18:29:60:c4:fe:2f:f1:99:18:07:55:66:08:a5:
90:82:bb:98:fa:2e:28:d3:bd:1d:e2:ec:42:51:8b:
90:65:00:75:47:2b:82:52:f1:12:4a:4f:6a:50:41:
dc:a1:5c:d6:00:bf:67:08:11:91:f1:98:46:04:35:
fc:f5:5e:f2:83:e7:41:af:30:bb:12:3d:f6:53:da:
11:c6:4d:02:3f:64:48:2d:8d:2f:db:a7:09:79:bf:
47:ee:9c:13:4c:87:eb:bb:f0:c2:45:3e:68:4a:ab:
3d:ad:9f:55:43:cf:1c:79:19:2e:aa:3c:8f:4f:eb:
7f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4E:24:3F:A4:CB:A4:6D:CB:1D:89:2D:1C:1D:01:2C:F4:B2:F8:E0
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a383230303a3a2f34302d3438203d3e20323139303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:8200::/40
Signature Algorithm: sha256WithRSAEncryption
82:d4:34:38:53:f8:60:f7:9b:bd:3a:a4:92:48:0a:a4:f7:1a:
28:96:0f:32:94:44:bb:0f:11:a8:64:95:03:fe:62:c2:e7:19:
05:8e:b9:5b:15:91:9f:30:07:da:0d:d7:ab:54:03:bc:a8:69:
64:a7:2d:dd:73:c2:0b:fb:69:df:52:8b:56:fa:4f:87:8b:96:
bf:00:6d:3b:96:a7:96:a4:1d:0d:f3:ac:9d:0b:24:02:ea:b1:
59:5f:2d:20:92:9e:62:27:a0:6a:8f:4b:95:ba:b3:8a:e6:f0:
9c:8d:f2:de:10:5f:57:d4:a4:dc:a1:ab:fb:54:f0:88:9a:f0:
49:dc:c5:ab:31:37:38:7b:74:f4:e7:59:88:1f:68:55:27:a0:
9c:c3:a1:fe:8d:d8:07:5a:8a:96:61:47:41:e9:cc:a6:d1:66:
02:42:cb:fd:23:8a:9a:8a:54:00:6e:cd:65:6e:4c:ef:61:f8:
13:11:82:39:62:16:eb:fd:35:33:7c:47:d8:20:ce:68:27:52:
d6:07:27:b4:f1:33:4b:03:f3:82:cd:04:54:3d:97:f3:88:fe:
0f:b7:d8:64:d7:57:03:c2:41:9b:25:f6:82:25:08:98:f4:8c:
59:84:dc:69:ba:25:22:9e:9c:43:de:3f:38:10:73:7a:76:e9:
36:99:f3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:33:23 2026 by rpki-client