Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663930303a3a2f34302d3438203d3e20323131363733.roa
File: 326131343a316563373a663930303a3a2f34302d3438203d3e20323131363733.roa (raw, json)
Hash identifier: buXaPYL+gAGKk1IHk3lvG8jlAutUl6qkBc+DQRHuryc=
Subject key identifier: 84:B4:EA:A2:56:31:B3:D1:CE:D9:C5:9D:03:35:08:3B:01:D4:C7:35
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 5AA609E4203777C6C21B77310CE2C67DB73D694F
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663930303a3a2f34302d3438203d3e20323131363733.roa
Signing time: Thu 27 Aug 2026 12:55:53 +0000
ROA not before: Thu 27 Aug 2026 12:50:53 +0000
ROA not after: Thu 26 Aug 2027 12:55:53 +0000
asID: 211673
IP address blocks: 2a14:1ec7:f900::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:a6:09:e4:20:37:77:c6:c2:1b:77:31:0c:e2:c6:7d:b7:3d:69:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Aug 27 12:50:53 2026 GMT
Not After : Aug 26 12:55:53 2027 GMT
Subject: CN=84B4EAA25631B3D1CED9C59D0335083B01D4C735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:92:23:09:03:81:1f:23:60:a8:90:e6:c3:
0a:c3:ac:8f:f7:91:bc:4b:1c:e8:41:1c:48:0b:68:
7e:cd:13:25:85:1b:01:c0:4b:72:60:01:8a:4f:2c:
b8:65:82:4c:d6:cf:d0:54:fd:1f:71:e2:f2:cf:79:
18:52:fe:5c:5b:e8:9a:e7:7c:99:2b:fa:fb:bd:68:
23:96:e3:1a:0a:8c:8c:6c:44:d4:42:9f:ba:50:a2:
8b:ca:cf:0d:38:73:ea:cb:d9:4b:be:12:4d:26:1e:
a2:e1:f6:5b:a0:ee:49:5c:d5:4c:3c:21:6c:c8:cc:
6c:d7:2c:d9:df:ca:7a:76:de:34:28:09:70:cf:f0:
9d:94:cd:01:93:97:0b:dc:62:27:c7:5a:56:2a:08:
6b:e4:ac:2e:ae:18:1c:97:91:55:2c:5d:ce:80:21:
82:67:4c:ce:2d:72:61:7b:42:9c:70:8d:59:5c:98:
a2:8c:8e:89:6b:ab:01:16:97:43:6e:24:e3:cf:c8:
ae:24:00:f3:d4:52:c8:00:5f:64:9f:c1:a8:cc:d9:
d2:1d:34:92:27:35:2a:63:f1:28:e9:10:27:fa:62:
13:90:06:99:de:1c:2a:09:cb:4b:1e:61:24:0e:b6:
f9:5b:72:1d:ab:c0:0a:dd:9b:52:03:fd:82:be:0b:
e1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B4:EA:A2:56:31:B3:D1:CE:D9:C5:9D:03:35:08:3B:01:D4:C7:35
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663930303a3a2f34302d3438203d3e20323131363733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:f900::/40
Signature Algorithm: sha256WithRSAEncryption
76:41:30:4e:a0:4e:b9:be:4c:6f:ee:dd:09:eb:e1:2c:fc:36:
29:78:03:30:07:4f:4f:d6:d2:c5:da:a4:ad:05:a4:e2:28:e6:
5f:65:4c:86:1f:33:48:0e:8a:9c:a1:7c:f2:35:cf:e4:40:28:
79:93:9d:c6:9b:ca:17:d4:81:fa:3f:b5:ea:5c:74:84:5c:c7:
c0:33:e3:89:fc:d0:5f:70:23:3f:9c:3c:0e:f6:cf:1f:15:2e:
c5:75:1f:75:a6:a5:4f:28:8f:ba:98:39:28:0c:85:98:5b:13:
ff:b6:72:19:e4:49:3c:20:b3:9e:aa:12:8c:5d:1b:fa:24:39:
f2:f2:9f:71:ca:99:44:07:0f:20:52:cc:ee:09:ec:65:0d:38:
05:fb:b9:a8:7f:f7:0e:85:4e:a7:81:58:7c:16:b4:7e:7f:ac:
7b:d4:a7:30:e6:95:c8:fc:ac:9d:69:14:c4:18:ae:34:0b:ef:
8b:b9:95:3c:2f:58:0f:ff:83:49:ba:aa:e5:35:82:65:a5:d2:
b0:00:60:69:5e:ef:ed:0a:28:51:be:39:65:3e:a7:9a:66:74:
05:8d:ec:67:c8:2a:f7:4c:90:13:cf:12:13:fc:6b:1b:b7:3d:
f0:84:17:67:d0:b0:9a:e7:96:0d:d3:d2:da:92:5b:3a:9e:2c:
6a:a3:9b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:24:09 2026 by rpki-client