Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663530303a3a2f34302d3430203d3e20323038343533.roa
File: 326131343a316563373a663530303a3a2f34302d3430203d3e20323038343533.roa (raw, json)
Hash identifier: BcERDeIiK252x3qdbXBv7TPDp2c+7ph8eqVSjbawIjQ=
Subject key identifier: 51:2E:D5:40:5E:E5:FB:9C:50:A5:E1:0E:81:C6:AA:6E:9B:27:A8:11
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 4AB313923EADCD838364CDDC4FD1E38A572FA1FB
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663530303a3a2f34302d3430203d3e20323038343533.roa
Signing time: Fri 21 Aug 2026 12:55:53 +0000
ROA not before: Fri 21 Aug 2026 12:50:53 +0000
ROA not after: Fri 20 Aug 2027 12:55:53 +0000
asID: 208453
IP address blocks: 2a14:1ec7:f500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:b3:13:92:3e:ad:cd:83:83:64:cd:dc:4f:d1:e3:8a:57:2f:a1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Aug 21 12:50:53 2026 GMT
Not After : Aug 20 12:55:53 2027 GMT
Subject: CN=512ED5405EE5FB9C50A5E10E81C6AA6E9B27A811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f3:1a:1b:ab:c5:5e:ac:7e:48:b5:ef:a9:76:
2f:1e:9f:3b:1f:fe:82:86:36:14:65:97:77:46:3f:
16:f0:c4:3e:eb:ee:7b:68:da:ab:94:71:4e:a7:66:
44:95:bb:c4:d6:9a:81:33:98:2b:5d:b4:b8:74:88:
71:90:49:6a:5d:b6:85:54:2c:88:a0:b8:70:f3:95:
d8:54:cf:f3:f1:b6:79:5d:05:4c:82:13:6c:92:9f:
12:ee:97:49:80:02:3a:14:10:5b:d2:29:c0:92:b2:
cc:2a:bf:4a:db:c1:09:1b:af:31:7e:df:26:b5:69:
47:cb:71:a8:cf:f1:cc:07:37:27:33:85:89:1a:80:
31:d6:3a:43:76:4d:dd:59:35:5c:ef:ea:2f:7d:3f:
c3:44:13:3a:f3:a0:0d:80:b2:a6:a7:69:37:46:e7:
fa:a8:c3:4d:cd:5d:76:00:d4:e5:17:db:a0:93:96:
31:cd:6e:1f:6d:73:69:e5:45:f8:ce:ee:c3:16:b9:
d3:0d:2a:47:78:47:2c:2c:72:86:8a:24:d8:ec:98:
de:e4:fc:6e:6e:85:a9:90:f9:b9:da:81:c3:e6:47:
b3:ca:67:e1:4b:1e:99:cf:e2:b5:7c:b4:b9:bd:03:
09:7a:28:7c:40:f0:08:ba:b9:a2:d7:95:af:04:dd:
34:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2E:D5:40:5E:E5:FB:9C:50:A5:E1:0E:81:C6:AA:6E:9B:27:A8:11
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663530303a3a2f34302d3430203d3e20323038343533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:f500::/40
Signature Algorithm: sha256WithRSAEncryption
4c:43:d5:a9:f4:b5:01:10:5e:c5:04:36:18:80:d6:f3:1d:5a:
fc:13:6a:92:93:e0:a2:40:ce:c6:b6:c5:75:35:c7:1b:8c:cb:
a0:6b:28:a8:ab:4e:2d:eb:ab:1a:eb:75:7b:d0:5a:ab:4d:09:
b2:b9:6d:50:49:9e:a0:43:d9:d5:0c:1d:76:66:a4:cc:13:35:
04:62:1d:b1:33:5d:e6:ea:36:5c:31:5b:53:cd:59:49:54:83:
ab:72:e5:fc:5f:28:88:49:17:8f:81:28:67:a4:03:4c:d2:ac:
cd:48:65:66:35:ab:7d:d0:c9:31:96:92:5b:ae:40:43:69:e5:
f9:65:24:f0:64:92:61:84:24:3a:4d:52:7d:af:78:4a:62:cd:
92:96:41:6d:d1:8a:90:bb:d7:c6:41:9c:d2:7b:6c:c1:a3:dc:
23:cf:a3:cd:24:32:16:a0:13:6f:78:0a:bc:36:c9:1d:89:a4:
22:29:4e:70:ca:86:b0:2f:7c:b5:76:af:f4:d9:5a:4c:f1:a1:
8a:16:06:d3:ae:bf:ab:57:11:59:41:f4:9b:b6:b6:64:46:32:
81:11:75:cc:9d:4b:73:f5:df:3c:c7:65:8c:eb:42:84:3b:84:
88:b7:23:64:41:25:4e:3b:94:15:8c:02:ac:4f:f4:a5:08:54:
16:7f:99:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:48:11 2026 by rpki-client