Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a666230303a3a2f34302d3438203d3e20323134373435.roa
File: 326131343a316563373a666230303a3a2f34302d3438203d3e20323134373435.roa (raw, json)
Hash identifier: rW+6MZy/HcgHF+tq+Zj0MntUPvUvfthpuYEkGLsWMro=
Subject key identifier: 80:BB:C2:6B:E1:2D:0B:7C:B8:E8:40:F0:43:92:71:D9:13:F4:A7:55
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 35D0D07CDE82E929BE2462B4A964762A06566335
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a666230303a3a2f34302d3438203d3e20323134373435.roa
Signing time: Sun 26 Jul 2026 21:55:52 +0000
ROA not before: Sun 26 Jul 2026 21:50:52 +0000
ROA not after: Sun 25 Jul 2027 21:55:52 +0000
asID: 214745
IP address blocks: 2a14:1ec7:fb00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:d0:d0:7c:de:82:e9:29:be:24:62:b4:a9:64:76:2a:06:56:63:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Jul 26 21:50:52 2026 GMT
Not After : Jul 25 21:55:52 2027 GMT
Subject: CN=80BBC26BE12D0B7CB8E840F0439271D913F4A755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ad:10:14:6e:02:6e:f3:fb:70:43:40:2c:47:
1e:24:57:58:58:bf:03:ed:b0:b5:5d:f5:ad:39:72:
00:9d:b4:f5:fa:f5:5d:69:e7:90:4b:26:3a:4a:ba:
dc:02:4d:81:4e:1c:79:13:23:1d:eb:14:2b:21:1d:
6a:69:3d:4f:7a:bc:86:3e:fc:3e:5a:ef:13:58:c9:
b1:8f:d5:ce:c6:98:50:d3:78:e1:3c:c8:e4:03:09:
60:9a:64:3b:bb:57:9b:12:81:c3:64:88:9f:44:8b:
c6:77:76:04:fb:38:17:ca:f1:c0:cf:59:98:71:ad:
6d:a2:ab:bd:4f:64:fb:08:a7:1c:27:d0:04:89:8f:
97:02:e9:ed:66:c2:1f:57:fa:ac:70:f7:6f:0e:7c:
0e:9e:d9:58:b6:56:54:94:ef:29:f2:3e:55:a1:9c:
d1:a1:2f:a3:32:83:4e:01:c0:f8:a3:99:70:e1:fe:
f0:ac:d4:8e:dd:48:be:a3:d2:29:3e:14:35:be:97:
e2:27:26:01:a3:61:a5:1f:d2:7e:b0:46:64:99:fc:
df:a6:4f:b2:ab:61:f5:0e:c5:29:05:a1:d9:2b:fc:
73:be:7d:98:00:e1:73:70:81:25:84:14:af:df:38:
46:ec:8e:db:11:3e:ef:b8:e3:ef:70:8e:4e:aa:57:
52:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BB:C2:6B:E1:2D:0B:7C:B8:E8:40:F0:43:92:71:D9:13:F4:A7:55
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a666230303a3a2f34302d3438203d3e20323134373435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:fb00::/40
Signature Algorithm: sha256WithRSAEncryption
0c:65:8c:07:4d:5d:54:e2:61:94:73:24:8d:2b:ea:7b:1c:6b:
0d:ed:95:dd:f2:b0:94:27:13:51:4b:4e:a0:e8:6a:b1:b4:42:
d9:34:12:b0:97:65:48:81:95:0e:18:dd:40:65:fe:4e:a6:e7:
d9:14:06:a2:22:f5:65:f3:ef:a4:32:73:83:c0:5a:10:44:c0:
40:ea:66:7d:13:4c:59:64:1b:d4:55:f5:d0:ff:fa:2a:17:44:
50:b9:28:59:b4:52:21:22:57:56:51:7b:ee:40:bb:8e:d9:63:
c4:e8:05:9d:a8:f3:90:7e:91:06:49:dc:4c:b5:30:49:a4:99:
6c:a3:c5:d3:e1:ba:05:db:df:5a:69:bf:9d:d7:3f:40:27:7b:
5c:4a:3d:b9:66:91:58:d0:3f:7c:c6:5a:f1:db:5d:23:bb:84:
c0:da:8b:71:fe:02:dc:2b:08:4a:5d:c9:4a:15:1f:f7:5e:bc:
d2:f5:29:c9:d9:9e:f3:9d:6c:6c:0d:29:56:e1:70:80:36:25:
e6:ed:c1:a1:9a:3d:1b:ae:13:9a:ed:e2:89:c0:40:1a:a2:1c:
c9:d6:21:c1:96:e4:a3:a2:b0:12:64:ea:2d:f6:b1:a3:44:7e:
19:0f:6b:50:c0:9a:31:4e:f3:c2:eb:c6:fd:3b:57:a8:cd:b0:
90:c4:30:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:56:42 2026 by rpki-client