Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663730303a3a2f34302d3438203d3e20323033363632.roa
File: 326131343a316563373a663730303a3a2f34302d3438203d3e20323033363632.roa (raw, json)
Hash identifier: 9cIJmpgofY2Wgn/FiyPbnpAf2fJ35GPHJYps435XTj8=
Subject key identifier: AA:8B:B8:0A:32:16:22:DE:A1:90:D4:8C:B0:20:D8:AF:41:A1:29:74
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 1AC20BF8ECDB3A006BB418A87DE8A0B7929C3C0B
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663730303a3a2f34302d3438203d3e20323033363632.roa
Signing time: Mon 19 Oct 2026 19:55:54 +0000
ROA not before: Mon 19 Oct 2026 19:50:54 +0000
ROA not after: Mon 18 Oct 2027 19:55:54 +0000
asID: 203662
IP address blocks: 2a14:1ec7:f700::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:c2:0b:f8:ec:db:3a:00:6b:b4:18:a8:7d:e8:a0:b7:92:9c:3c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Oct 19 19:50:54 2026 GMT
Not After : Oct 18 19:55:54 2027 GMT
Subject: CN=AA8BB80A321622DEA190D48CB020D8AF41A12974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d9:ed:6a:26:de:8a:6c:54:f6:f7:05:bd:3c:
aa:6a:59:51:89:b6:f1:06:08:85:de:f6:fe:de:8a:
db:c2:5a:18:bf:21:6b:73:0f:f5:f7:3b:64:67:99:
04:9f:a6:c9:d0:af:67:7d:93:3b:a5:5b:6c:67:f2:
fc:a0:24:2e:97:4c:a4:40:2a:5e:d1:68:90:f6:cb:
ba:a8:dc:76:50:c0:f8:66:2e:e6:30:ea:57:82:c5:
76:ee:5a:2d:0e:b2:27:ae:87:76:ce:2a:44:ca:10:
61:ce:ed:f8:73:75:ff:75:58:9b:53:e8:69:f2:c4:
dd:9e:8f:c6:98:83:65:d2:e1:03:8b:dc:c1:9f:db:
b6:ff:c2:f0:65:ef:42:9d:69:60:15:ad:ac:49:7d:
50:5c:9f:8b:c3:ae:51:63:d7:ae:61:4a:ec:56:0d:
33:d6:b5:7c:27:24:93:94:65:9e:60:1e:e4:c8:89:
50:e0:35:3e:a7:ed:d8:96:b0:ce:7f:51:cf:1f:a3:
77:a6:1d:a1:7f:2a:e4:f0:58:e2:c3:1b:36:de:8a:
32:7e:63:e1:34:1f:ee:c6:2f:fd:ad:82:db:02:65:
7a:74:8c:cc:86:9d:b6:78:92:c6:3f:1f:85:be:74:
23:83:f1:27:29:ed:54:62:9d:ec:c1:cd:a9:d8:38:
a2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8B:B8:0A:32:16:22:DE:A1:90:D4:8C:B0:20:D8:AF:41:A1:29:74
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663730303a3a2f34302d3438203d3e20323033363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:f700::/40
Signature Algorithm: sha256WithRSAEncryption
12:7d:3c:1c:c1:82:db:1a:b0:a8:4a:2b:45:c1:2d:a6:6b:8d:
94:ab:12:ca:03:cb:1d:6c:82:89:f6:cc:f1:81:db:fa:f9:56:
1c:e7:10:93:a4:97:3e:85:3c:0f:67:d0:82:6a:78:b6:8e:ea:
75:50:dd:30:f4:cd:3e:15:85:cd:59:ae:ce:d9:17:d8:4e:2e:
9a:af:96:a2:87:cd:bf:37:a5:f6:91:61:0d:3e:c6:f1:2f:33:
5c:b6:3d:33:46:0f:34:21:51:e2:6a:b4:b3:cd:a5:52:28:7e:
0f:6d:e1:13:f0:0a:a4:0c:bf:97:be:8d:45:ca:6f:d8:23:85:
1e:6a:71:9a:57:d4:7f:3a:bf:62:67:29:1c:38:56:1f:2a:b1:
32:31:3e:3d:69:74:3c:f3:c4:b9:2d:ce:b7:98:c0:e7:d5:0e:
cd:5f:28:e1:6f:7f:c5:b6:82:ec:34:4b:50:c0:bc:20:ba:81:
73:27:8b:41:f4:59:20:25:e5:09:64:ca:b6:c4:2a:d9:20:99:
af:22:a8:13:63:43:ed:8e:9f:48:98:f8:d0:6c:b6:75:8e:a1:
53:80:24:40:9b:b9:ee:d0:23:d9:8b:ba:11:d6:d8:52:76:ee:
02:05:11:56:d6:73:a2:06:3c:1a:c7:b9:2c:ff:d1:cc:2c:2a:
e9:27:f7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:03:32 2026 by rpki-client