Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663630303a3a2f34302d3438203d3e20323133393938.roa
File: 326131343a316563373a663630303a3a2f34302d3438203d3e20323133393938.roa (raw, json)
Hash identifier: g++RCkx0VHOPXk1iLZ9917a+TZd+RtWd2EdJRuHWjVo=
Subject key identifier: 4E:30:26:20:65:62:55:59:1E:70:AB:68:78:76:E9:53:B2:5A:48:8A
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 31CABF08E8C0F8589DE900BDA3E620C5BAF53A1F
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663630303a3a2f34302d3438203d3e20323133393938.roa
Signing time: Mon 24 Aug 2026 10:55:53 +0000
ROA not before: Mon 24 Aug 2026 10:50:53 +0000
ROA not after: Mon 23 Aug 2027 10:55:53 +0000
asID: 213998
IP address blocks: 2a14:1ec7:f600::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:ca:bf:08:e8:c0:f8:58:9d:e9:00:bd:a3:e6:20:c5:ba:f5:3a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Aug 24 10:50:53 2026 GMT
Not After : Aug 23 10:55:53 2027 GMT
Subject: CN=4E302620656255591E70AB687876E953B25A488A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:03:ac:6b:55:71:c7:93:c9:d1:a9:04:d7:93:
d4:a8:c7:e4:fe:9a:e9:1b:e1:c9:d1:e3:b3:ea:68:
15:af:31:e5:f7:86:98:4a:6e:07:e8:47:49:33:4d:
7a:c4:f0:d7:e8:0f:8a:08:a8:2b:c3:a7:62:08:de:
fb:88:e5:bf:be:29:8a:1d:05:39:54:1a:24:d6:21:
84:99:57:35:d3:a4:96:61:53:6b:63:8a:ad:6d:6b:
8b:17:17:32:fe:ce:33:93:c2:e1:5a:ec:81:88:5f:
98:c2:63:86:26:3a:28:12:60:bb:55:24:35:26:1e:
f3:94:93:a1:b1:01:86:fb:58:2d:97:ee:dc:3f:26:
ea:3e:e1:29:a8:a4:71:f0:8f:15:84:71:dd:2e:4b:
6f:7e:02:bb:86:37:b3:f4:bd:d9:af:e0:5a:e4:84:
75:8e:39:2c:e6:4d:d4:91:19:ce:d9:56:f6:1c:22:
ad:ff:c7:80:50:42:7f:d3:3e:8e:b5:cb:44:06:5d:
21:99:c7:4f:16:4a:15:b9:f8:af:0d:56:46:83:8b:
1a:19:7d:38:16:9c:6f:6f:8a:a6:c4:46:76:c1:53:
35:47:d7:33:c4:5d:97:d9:f8:c4:37:c6:f8:53:43:
da:17:f5:10:a7:4d:ce:95:da:a1:f6:04:61:51:86:
4c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:30:26:20:65:62:55:59:1E:70:AB:68:78:76:E9:53:B2:5A:48:8A
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663630303a3a2f34302d3438203d3e20323133393938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:f600::/40
Signature Algorithm: sha256WithRSAEncryption
3d:03:4a:5c:da:99:50:b5:92:b8:40:35:3f:34:63:ce:fe:fa:
e2:e1:b0:58:48:f7:9e:bd:4d:e9:26:b8:4a:82:aa:a8:53:7e:
86:5b:3e:49:55:83:fe:24:78:30:f7:86:01:ad:bd:34:32:be:
54:fa:ad:c5:fe:94:0e:24:32:ab:59:a3:ef:93:89:9f:85:24:
bb:cf:d2:7c:35:ca:ef:9e:6c:d1:33:a2:65:ef:97:c3:38:7a:
9b:1b:5b:e5:44:df:83:d6:ad:6b:f5:03:55:44:a7:7c:3a:97:
d2:92:52:57:c8:1f:f0:dd:1c:ad:4a:73:e1:5d:a4:74:69:79:
94:e2:f5:23:6d:67:e0:07:54:1b:05:f5:e7:0b:1e:3f:71:de:
9e:2c:e9:2d:32:0e:25:9e:5a:b8:56:40:98:6e:5f:f7:af:fd:
1b:f4:21:02:20:21:8b:c4:8a:8c:3d:15:6b:a1:db:32:b6:e2:
d4:6c:0b:cc:d0:aa:d5:ef:22:47:40:e9:6e:72:d1:f1:a4:fb:
48:7f:f2:81:8d:32:7a:83:d7:75:43:b5:6c:83:85:77:0f:61:
6d:7a:fe:2c:52:8a:ae:a6:aa:72:c8:bf:d1:60:71:46:77:e2:
26:04:84:c0:5c:3f:46:84:9a:6c:15:d8:f1:95:b7:e4:be:f1:
b4:f5:7c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:29:29 2026 by rpki-client