Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663732303a3a2f34342d3438203d3e203139333138.roa
File: 326131343a316563373a663732303a3a2f34342d3438203d3e203139333138.roa (raw, json)
Hash identifier: olzB1bFx3oZ24zLBCOr2WP/95Xl1ntEYGB6eb9O26TU=
Subject key identifier: 79:41:53:E2:E4:42:4E:29:1C:D0:D2:34:93:3F:DA:12:4C:34:B2:38
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 7668016B4FDA6CC4279CA1F71701B0CB901B521F
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663732303a3a2f34342d3438203d3e203139333138.roa
Signing time: Wed 02 Sep 2026 19:55:53 +0000
ROA not before: Wed 02 Sep 2026 19:50:53 +0000
ROA not after: Wed 01 Sep 2027 19:55:53 +0000
asID: 19318
IP address blocks: 2a14:1ec7:f720::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:68:01:6b:4f:da:6c:c4:27:9c:a1:f7:17:01:b0:cb:90:1b:52:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Sep 2 19:50:53 2026 GMT
Not After : Sep 1 19:55:53 2027 GMT
Subject: CN=794153E2E4424E291CD0D234933FDA124C34B238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2d:62:16:bb:80:57:9a:24:c5:ae:0e:72:3e:
c7:8a:1b:ba:05:e3:c0:a9:d8:4b:f0:b3:c5:0d:c9:
29:9c:56:0d:f4:b0:02:66:97:5a:3d:f2:6e:84:12:
22:09:34:51:98:ef:9f:71:17:a8:e8:a3:f4:34:d2:
c0:27:b6:71:a0:53:43:00:6b:16:d1:92:f0:84:09:
e7:fe:db:f3:db:7d:f6:8a:40:3a:5c:e8:da:34:dd:
57:5a:6c:da:73:60:6a:48:8a:1a:52:e3:e8:b7:4e:
d1:af:5d:46:84:95:25:7d:1a:78:4e:1b:bf:bc:31:
7f:4d:69:1c:92:26:5c:38:51:07:26:47:dd:15:45:
8f:96:2a:0a:a1:20:a7:ab:22:10:16:1f:1c:5b:d1:
a5:49:ed:ae:d7:03:7d:1e:b4:ef:60:e1:8c:8a:27:
2f:4a:c1:e9:73:4b:ef:7b:e5:9e:3c:b6:bf:ef:37:
7a:59:ba:17:d1:78:56:7b:cb:a1:11:6c:04:19:6e:
49:78:32:0d:08:e4:71:6e:f2:a0:f3:08:b5:ea:f9:
b9:e5:91:a4:eb:12:19:f6:7a:83:5d:fb:c6:c9:bf:
96:d7:39:d3:c5:94:bf:61:99:de:05:40:41:8d:06:
54:86:eb:86:97:52:f7:aa:ac:62:8c:48:aa:76:ec:
a1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:41:53:E2:E4:42:4E:29:1C:D0:D2:34:93:3F:DA:12:4C:34:B2:38
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663732303a3a2f34342d3438203d3e203139333138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:f720::/44
Signature Algorithm: sha256WithRSAEncryption
6d:b1:1c:8b:0e:e3:a3:d0:21:26:2f:fb:f4:b5:fb:5a:42:87:
8b:ee:8f:22:cc:19:2b:eb:7f:88:29:93:b4:8c:cb:31:f8:93:
02:29:8e:c5:34:9c:a0:f2:f2:48:fc:b4:f7:5c:e4:dc:57:45:
91:87:f3:5d:04:1e:2a:28:b9:08:34:09:db:38:10:f6:6e:57:
7e:af:c4:fc:f0:bc:d2:80:22:77:de:19:6d:b4:75:4a:e4:f7:
c2:99:9c:4e:54:43:a7:c6:01:1c:b7:09:f1:98:ac:9e:6a:8d:
f3:52:01:a4:7e:6c:32:ad:22:82:98:fe:bd:b0:02:fc:13:bc:
04:1d:3e:48:07:51:33:2b:8d:8b:1b:73:77:66:d6:f6:6a:fe:
a8:2b:34:0d:1b:85:d9:fe:98:86:b6:47:41:f8:5d:ce:e7:f7:
58:e8:2c:d2:b4:cc:b9:bd:cd:05:b7:dd:8b:9b:d5:a3:02:8e:
9a:46:fb:39:1c:a6:5b:39:2b:39:1a:4d:4c:b8:32:c3:71:53:
00:34:c5:40:b5:bc:ce:26:2a:05:ca:78:fb:17:dd:99:f1:f1:
dc:1c:b9:65:0d:4b:39:e2:b4:80:84:fa:28:e6:64:cc:38:38:
37:95:24:08:d5:2d:73:d2:03:93:a7:d4:4e:3b:e2:c2:16:30:
24:f2:ec:c2
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUdmgBa0/abMQnnKH3FwGwy5AbUh8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEzNGVlOTg3ZTA4ZDhiNTU4M2ZlZWY2MjFhMDMxNTBj
NGYzNTQzNDAeFw0yNjA5MDIxOTUwNTNaFw0yNzA5MDExOTU1NTNaMDMxMTAvBgNV
BAMTKDc5NDE1M0UyRTQ0MjRFMjkxQ0QwRDIzNDkzM0ZEQTEyNEMzNEIyMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcLWIWu4BXmiTFrg5yPseKG7oF
48Cp2Evws8UNySmcVg30sAJml1o98m6EEiIJNFGY759xF6joo/Q00sAntnGgU0MA
axbRkvCECef+2/PbffaKQDpc6No03VdabNpzYGpIihpS4+i3TtGvXUaElSV9GnhO
G7+8MX9NaRySJlw4UQcmR90VRY+WKgqhIKerIhAWHxxb0aVJ7a7XA30etO9g4YyK
Jy9KwelzS+975Z48tr/vN3pZuhfReFZ7y6ERbAQZbkl4Mg0I5HFu8qDzCLXq+bnl
kaTrEhn2eoNd+8bJv5bXOdPFlL9hmd4FQEGNBlSG64aXUveqrGKMSKp27KFvAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUeUFT4uRCTikc0NI0kz/aEkw0sjgwHwYDVR0j
BBgwFoAUMTTumH4I2LVYP+72IaAxUMTzVDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWEzYmI5M2YtOThhNC00YzdlLWEwZTEtODA1N2E0ZjA4
NmM5LzAvMzEzNEVFOTg3RTA4RDhCNTU4M0ZFRUY2MjFBMDMxNTBDNEYzNTQzNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01UVHVtSDRJMkxWWVAtNzJJYUF4VU1U
elZEUS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWEzYmI5M2Yt
OThhNC00YzdlLWEwZTEtODA1N2E0ZjA4NmM5LzAvMzI2MTMxMzQzYTMxNjU2MzM3
M2E2NjM3MzIzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMxMzkzMzMxMzgucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwQqFB7H9yAwDQYJKoZIhvcNAQELBQADggEBAG2xHIsO46PQISYv+/S1
+1pCh4vujyLMGSvrf4gpk7SMyzH4kwIpjsU0nKDy8kj8tPdc5NxXRZGH810EHioo
uQg0Cds4EPZuV36vxPzwvNKAInfeGW20dUrk98KZnE5UQ6fGARy3CfGYrJ5qjfNS
AaR+bDKtIoKY/r2wAvwTvAQdPkgHUTMrjYsbc3dm1vZq/qgrNA0bhdn+mIa2R0H4
Xc7n91joLNK0zLm9zQW33Yub1aMCjppG+zkcpls5KzkaTUy4MsNxUwA0xUC1vM4m
KgXKePsX3Znx8dwcuWUNSznitICE+ijmZMw4ODeVJAjVLXPSA5On1E474sIWMCTy
7MI=
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:10:15 2026 by rpki-client