Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663730303a3a2f34342d3438203d3e20333937343233.roa
File: 326131343a316563373a663730303a3a2f34342d3438203d3e20333937343233.roa (raw, json)
Hash identifier: MFlZZxQrIyqu9b/yl8NSnrY/Zaqm7swPj8koIBhgngI=
Subject key identifier: 06:8A:86:5C:A0:14:28:C5:EE:78:90:BA:82:F7:77:8C:E4:18:AF:37
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 55D37158B44F2489C86421347F53C5FE8C1E4C08
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663730303a3a2f34342d3438203d3e20333937343233.roa
Signing time: Wed 02 Sep 2026 18:55:53 +0000
ROA not before: Wed 02 Sep 2026 18:50:53 +0000
ROA not after: Wed 01 Sep 2027 18:55:53 +0000
asID: 397423
IP address blocks: 2a14:1ec7:f700::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:d3:71:58:b4:4f:24:89:c8:64:21:34:7f:53:c5:fe:8c:1e:4c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Sep 2 18:50:53 2026 GMT
Not After : Sep 1 18:55:53 2027 GMT
Subject: CN=068A865CA01428C5EE7890BA82F7778CE418AF37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:7b:b9:4b:63:74:e7:7e:cf:9a:9e:20:dd:
90:0e:3c:6a:2c:55:08:55:9f:92:fd:99:4f:ff:aa:
b6:33:bb:a0:21:7c:29:5f:8a:e4:20:6a:80:0c:b8:
88:b4:7f:11:55:d4:59:ce:cf:54:e4:17:9d:d4:74:
2c:ea:2a:c9:2b:48:88:bc:23:5d:ec:75:e9:1a:48:
cb:98:64:73:65:e5:42:9b:05:48:22:ed:e0:11:7b:
74:fc:34:89:1b:e3:5e:97:99:9f:f8:68:64:ee:f1:
c5:49:22:22:48:71:6c:df:7a:4d:a7:ee:16:4f:36:
24:9c:b1:57:c1:6a:54:b1:d2:f3:75:a3:30:f1:a3:
ae:60:ad:e3:2b:67:e5:e6:48:87:af:37:56:6a:e5:
96:f9:03:d9:9c:8f:b6:a1:08:d0:d7:c5:cf:29:59:
a6:e5:5a:d7:ed:37:50:16:cf:77:9f:cf:f5:c6:23:
92:65:06:59:88:d5:f8:37:3b:ba:2d:3f:75:66:5e:
d5:92:ba:7b:b7:94:78:e3:e5:6f:47:51:ed:98:cf:
1f:06:29:fb:da:a0:67:fa:c3:f3:3f:b8:7c:89:03:
51:38:1a:88:e9:18:81:b7:3d:a2:29:a6:fb:3f:ae:
7c:ee:50:ff:19:a4:be:6e:d6:98:e2:15:2f:da:10:
e6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8A:86:5C:A0:14:28:C5:EE:78:90:BA:82:F7:77:8C:E4:18:AF:37
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663730303a3a2f34342d3438203d3e20333937343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:f700::/44
Signature Algorithm: sha256WithRSAEncryption
9f:9c:d0:f5:a4:f4:5b:e5:85:d9:97:f9:b1:ca:a4:b3:d6:d5:
85:c2:e7:12:c7:21:50:96:fe:7b:04:11:21:12:6a:09:24:2e:
6e:d0:93:51:28:02:79:cb:8c:cc:33:65:1f:39:71:e2:f9:eb:
c8:d3:b9:46:fa:b6:27:4b:fd:77:c0:ff:4a:e2:7e:e5:10:6f:
d1:d3:05:15:db:34:1e:2b:77:16:98:eb:e3:64:7f:95:7d:27:
48:96:26:71:4d:52:31:7c:c9:8e:47:9f:94:42:d7:e8:fc:98:
44:0c:79:16:20:df:e6:b8:57:b8:11:c6:b6:bb:60:66:b2:2b:
bf:a7:d0:06:60:e5:ef:98:b5:35:e2:31:1c:a3:5b:30:56:73:
6a:a1:c8:03:63:e5:ca:7d:22:60:e2:e0:07:b2:88:fa:c4:1a:
ef:66:8c:e7:9a:2c:b4:16:00:9a:87:55:86:9f:5e:f4:96:e6:
18:66:60:6d:e8:c5:6b:d7:7e:d4:62:02:7b:93:93:a1:e9:1c:
20:4a:3c:95:77:e0:cc:5f:7e:ab:e4:84:eb:d3:94:02:a9:0e:
ac:78:7b:3f:41:64:4b:52:d5:d4:96:21:0d:19:19:2b:e3:0d:
2e:52:84:e2:f8:b6:d9:7f:50:33:68:14:5c:19:6e:3b:10:1c:
76:13:95:b1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUVdNxWLRPJInIZCE0f1PF/oweTAgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEzNGVlOTg3ZTA4ZDhiNTU4M2ZlZWY2MjFhMDMxNTBj
NGYzNTQzNDAeFw0yNjA5MDIxODUwNTNaFw0yNzA5MDExODU1NTNaMDMxMTAvBgNV
BAMTKDA2OEE4NjVDQTAxNDI4QzVFRTc4OTBCQTgyRjc3NzhDRTQxOEFGMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5a3u5S2N0537Pmp4g3ZAOPGos
VQhVn5L9mU//qrYzu6AhfClfiuQgaoAMuIi0fxFV1FnOz1TkF53UdCzqKskrSIi8
I13sdekaSMuYZHNl5UKbBUgi7eARe3T8NIkb416XmZ/4aGTu8cVJIiJIcWzfek2n
7hZPNiScsVfBalSx0vN1ozDxo65greMrZ+XmSIevN1Zq5Zb5A9mcj7ahCNDXxc8p
WablWtftN1AWz3efz/XGI5JlBlmI1fg3O7otP3VmXtWSunu3lHjj5W9HUe2Yzx8G
KfvaoGf6w/M/uHyJA1E4GojpGIG3PaIppvs/rnzuUP8ZpL5u1pjiFS/aEObLAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUBoqGXKAUKMXueJC6gvd3jOQYrzcwHwYDVR0j
BBgwFoAUMTTumH4I2LVYP+72IaAxUMTzVDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWEzYmI5M2YtOThhNC00YzdlLWEwZTEtODA1N2E0ZjA4
NmM5LzAvMzEzNEVFOTg3RTA4RDhCNTU4M0ZFRUY2MjFBMDMxNTBDNEYzNTQzNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01UVHVtSDRJMkxWWVAtNzJJYUF4VU1U
elZEUS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWEzYmI5M2Yt
OThhNC00YzdlLWEwZTEtODA1N2E0ZjA4NmM5LzAvMzI2MTMxMzQzYTMxNjU2MzM3
M2E2NjM3MzAzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMzMzkzNzM0MzIzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHBCoUHsf3ADANBgkqhkiG9w0BAQsFAAOCAQEAn5zQ9aT0W+WF2Zf5
scqks9bVhcLnEschUJb+ewQRIRJqCSQubtCTUSgCecuMzDNlHzlx4vnryNO5Rvq2
J0v9d8D/SuJ+5RBv0dMFFds0Hit3Fpjr42R/lX0nSJYmcU1SMXzJjkeflELX6PyY
RAx5FiDf5rhXuBHGtrtgZrIrv6fQBmDl75i1NeIxHKNbMFZzaqHIA2Plyn0iYOLg
B7KI+sQa72aM55ostBYAmodVhp9e9JbmGGZgbejFa9d+1GICe5OToekcIEo8lXfg
zF9+q+SE69OUAqkOrHh7P0FkS1LV1JYhDRkZK+MNLlKE4vi22X9QM2gUXBluOxAc
dhOVsQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:58:28 2026 by rpki-client