Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a623030303a3a2f33362d3430203d3e20323135343637.roa
File: 326131343a316563373a623030303a3a2f33362d3430203d3e20323135343637.roa (raw, json)
Hash identifier: KED5nPIvCXgX/lcIIamnkRtxLU/RZT0c3MMATyt0zfY=
Subject key identifier: BE:79:DB:AB:C0:5B:DC:FF:28:A7:1E:55:34:A0:1D:DA:09:AB:B9:48
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 3764EA6E07D00D111EC922D340C8A485B21E2ED6
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a623030303a3a2f33362d3430203d3e20323135343637.roa
Signing time: Sat 22 Aug 2026 18:18:53 +0000
ROA not before: Sat 22 Aug 2026 18:13:53 +0000
ROA not after: Sat 21 Aug 2027 18:18:53 +0000
asID: 215467
IP address blocks: 2a14:1ec7:b000::/36 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:64:ea:6e:07:d0:0d:11:1e:c9:22:d3:40:c8:a4:85:b2:1e:2e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Aug 22 18:13:53 2026 GMT
Not After : Aug 21 18:18:53 2027 GMT
Subject: CN=BE79DBABC05BDCFF28A71E5534A01DDA09ABB948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:18:ad:0f:06:f6:2b:e3:cc:64:b9:06:69:12:
c9:b2:0a:6f:2b:8b:a0:35:e7:a3:19:85:02:41:bf:
bc:d8:c7:a6:51:15:66:88:df:36:12:4a:bc:6d:b1:
f4:84:34:37:40:41:50:3a:07:7b:cd:9d:21:5f:5a:
96:b1:a7:a2:43:af:ce:5e:6b:6e:28:7f:e0:34:44:
9d:56:ac:f3:55:ec:09:4b:cb:ea:81:8f:c8:e2:a0:
ec:00:50:7a:da:a7:ca:ec:d0:fb:bd:6a:94:75:8d:
58:13:59:b8:ca:2e:3d:c8:28:2f:65:68:86:92:0d:
ee:5b:a7:97:f6:43:e0:90:75:f4:aa:d6:2b:92:f1:
a1:a6:7b:36:bb:c8:c0:a4:10:07:8d:1a:ee:41:37:
ec:b6:d7:8c:3a:42:15:10:a5:04:73:74:0f:37:af:
73:e9:cd:f0:ef:09:b6:b3:94:55:59:d4:c1:8e:2c:
b3:0a:ee:8b:58:45:91:2e:d0:f9:7d:4f:d5:ef:39:
14:77:35:45:57:02:c9:09:b8:f5:4d:82:a1:77:77:
8b:8c:47:bc:8a:b2:fb:2f:82:a6:fb:07:bb:c6:62:
52:4e:a7:7b:96:e0:53:8f:df:a3:3a:6e:9f:1c:f2:
2b:09:5d:ec:be:1b:8b:1c:94:63:e1:b4:bf:10:ab:
59:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:79:DB:AB:C0:5B:DC:FF:28:A7:1E:55:34:A0:1D:DA:09:AB:B9:48
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a623030303a3a2f33362d3430203d3e20323135343637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:b000::/36
Signature Algorithm: sha256WithRSAEncryption
89:48:76:a3:86:c5:ce:c3:e5:58:9d:a0:a5:58:7b:a1:db:f7:
fa:a5:23:b1:5f:25:c6:b3:58:48:1f:54:1f:dc:2c:74:21:55:
f3:46:9c:84:ba:81:67:46:94:b4:cc:f0:f2:77:97:c7:57:22:
68:6d:f9:c1:43:df:52:13:5b:f4:dd:bf:bf:2c:09:40:e2:9a:
1f:94:53:25:36:03:ff:1c:7e:6e:3b:48:fe:9b:29:00:19:4a:
c5:58:bb:30:8b:e8:e4:71:dd:f8:a0:50:62:8d:23:43:26:b5:
ac:d5:da:05:32:80:f8:f2:4f:f6:a9:b0:64:8a:1c:20:b6:04:
4d:78:b9:02:56:0e:5f:c4:52:e7:cb:e1:5d:1b:cf:aa:b5:3c:
5a:b0:c6:4a:95:0a:3f:e5:1c:17:b5:e9:df:b6:f9:f2:28:24:
7a:e7:c2:55:78:51:41:57:9c:82:35:b4:2c:46:83:f6:6c:8e:
41:b2:99:eb:77:b3:a1:21:fa:57:05:6a:bc:f6:0c:f4:1c:c0:
ab:54:0d:0c:01:83:4c:2d:f0:33:0e:05:28:cc:f9:53:5a:04:
cf:ef:f2:21:05:ff:9b:0a:7b:7d:cc:39:4b:94:a3:a8:08:27:
23:32:f5:0e:a8:04:1a:da:5f:40:81:a5:e9:01:ed:2a:89:d3:
1e:5a:51:12
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUN2TqbgfQDREeySLTQMikhbIeLtYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEzNGVlOTg3ZTA4ZDhiNTU4M2ZlZWY2MjFhMDMxNTBj
NGYzNTQzNDAeFw0yNjA4MjIxODEzNTNaFw0yNzA4MjExODE4NTNaMDMxMTAvBgNV
BAMTKEJFNzlEQkFCQzA1QkRDRkYyOEE3MUU1NTM0QTAxRERBMDlBQkI5NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClGK0PBvYr48xkuQZpEsmyCm8r
i6A156MZhQJBv7zYx6ZRFWaI3zYSSrxtsfSENDdAQVA6B3vNnSFfWpaxp6JDr85e
a24of+A0RJ1WrPNV7AlLy+qBj8jioOwAUHrap8rs0Pu9apR1jVgTWbjKLj3IKC9l
aIaSDe5bp5f2Q+CQdfSq1iuS8aGmeza7yMCkEAeNGu5BN+y214w6QhUQpQRzdA83
r3PpzfDvCbazlFVZ1MGOLLMK7otYRZEu0Pl9T9XvORR3NUVXAskJuPVNgqF3d4uM
R7yKsvsvgqb7B7vGYlJOp3uW4FOP36M6bp8c8isJXey+G4sclGPhtL8Qq1k7AgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUvnnbq8Bb3P8opx5VNKAd2gmruUgwHwYDVR0j
BBgwFoAUMTTumH4I2LVYP+72IaAxUMTzVDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWEzYmI5M2YtOThhNC00YzdlLWEwZTEtODA1N2E0ZjA4
NmM5LzAvMzEzNEVFOTg3RTA4RDhCNTU4M0ZFRUY2MjFBMDMxNTBDNEYzNTQzNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01UVHVtSDRJMkxWWVAtNzJJYUF4VU1U
elZEUS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWEzYmI5M2Yt
OThhNC00YzdlLWEwZTEtODA1N2E0ZjA4NmM5LzAvMzI2MTMxMzQzYTMxNjU2MzM3
M2E2MjMwMzAzMDNhM2EyZjMzMzYyZDM0MzAyMDNkM2UyMDMyMzEzNTM0MzYzNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGBCoUHsewMA0GCSqGSIb3DQEBCwUAA4IBAQCJSHajhsXOw+VYnaCl
WHuh2/f6pSOxXyXGs1hIH1Qf3Cx0IVXzRpyEuoFnRpS0zPDyd5fHVyJobfnBQ99S
E1v03b+/LAlA4poflFMlNgP/HH5uO0j+mykAGUrFWLswi+jkcd34oFBijSNDJrWs
1doFMoD48k/2qbBkihwgtgRNeLkCVg5fxFLny+FdG8+qtTxasMZKlQo/5RwXtenf
tvnyKCR658JVeFFBV5yCNbQsRoP2bI5Bspnrd7OhIfpXBWq89gz0HMCrVA0MAYNM
LfAzDgUozPlTWgTP7/IhBf+bCnt9zDlLlKOoCCcjMvUOqAQa2l9AgaXpAe0qidMe
WlES
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:33:22 2026 by rpki-client