Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a666430303a3a2f34302d3438203d3e20323136323034.roa
File: 326131343a316563373a666430303a3a2f34302d3438203d3e20323136323034.roa (raw, json)
Hash identifier: lY9qRZlCF1x3WyT4j/vwyonfixf2WO9GNpZp+F7kANw=
Subject key identifier: 62:EB:DE:8E:F9:0E:37:9F:F8:40:4F:3B:68:68:B9:E7:AB:CA:AF:0E
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 134BCC5CA63F6690B1E9D96EE51AE1364873BA92
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a666430303a3a2f34302d3438203d3e20323136323034.roa
Signing time: Mon 17 Aug 2026 12:55:53 +0000
ROA not before: Mon 17 Aug 2026 12:50:53 +0000
ROA not after: Mon 16 Aug 2027 12:55:53 +0000
asID: 216204
IP address blocks: 2a14:1ec7:fd00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:4b:cc:5c:a6:3f:66:90:b1:e9:d9:6e:e5:1a:e1:36:48:73:ba:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Aug 17 12:50:53 2026 GMT
Not After : Aug 16 12:55:53 2027 GMT
Subject: CN=62EBDE8EF90E379FF8404F3B6868B9E7ABCAAF0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:27:b2:8e:53:01:c7:43:78:73:ed:03:4c:ff:
66:49:f4:37:98:7b:67:09:37:3e:a4:54:d2:71:66:
e8:9d:03:93:84:e0:6c:4a:71:cd:2c:e1:42:b6:f0:
ea:58:76:bb:a1:6e:aa:2a:4b:21:5d:3c:24:f1:ff:
6e:6e:f2:bd:f0:ec:d5:9f:1d:bb:51:89:99:34:b0:
65:46:2a:eb:37:ef:26:5c:e2:25:89:a2:fa:45:2f:
cb:e0:d5:db:1b:94:57:2e:6f:30:27:a7:34:e5:86:
da:1b:8c:03:53:b5:bf:42:48:0f:b0:e2:e4:bf:cc:
ee:cf:7b:dc:a8:ff:a9:1b:64:7e:43:ef:d6:73:04:
40:fa:bc:b5:f9:81:6c:a8:85:4c:46:c9:ae:99:3f:
71:60:c7:98:02:ca:60:e7:e7:b8:44:2c:af:c4:89:
36:40:17:64:f0:14:8d:4b:ae:5e:44:42:b4:2e:c5:
5a:79:f7:53:56:18:0d:3c:3c:36:d7:49:e2:a8:3c:
86:29:27:34:43:ff:2e:67:7a:c9:00:7a:b7:e2:f8:
d7:88:66:2b:23:9c:5f:d1:0f:f1:2c:61:a9:e0:98:
dc:5f:4b:3f:06:53:2c:a0:a6:65:ed:b4:51:bc:eb:
d5:c5:3d:35:e7:53:3e:fb:ab:1a:b6:5a:1e:7b:b9:
ae:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EB:DE:8E:F9:0E:37:9F:F8:40:4F:3B:68:68:B9:E7:AB:CA:AF:0E
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a666430303a3a2f34302d3438203d3e20323136323034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:fd00::/40
Signature Algorithm: sha256WithRSAEncryption
3c:61:c2:a1:b0:95:f4:ad:2c:75:cb:82:ad:5a:98:4e:f4:d7:
4b:f8:9a:db:78:da:9d:de:a4:83:1f:07:56:ba:7d:5e:95:0c:
03:72:28:1c:06:8b:51:29:ea:ed:a2:ca:15:b7:41:6a:06:2b:
ab:84:e6:9c:de:f2:f4:1e:62:39:bb:f9:a4:b2:69:c7:b6:6f:
2d:a5:e8:31:d1:75:6e:82:13:e5:08:7e:48:2e:28:83:e1:53:
c0:53:b2:7c:86:39:fa:fb:91:d8:2f:6a:0e:f5:4d:63:05:8e:
b2:20:c6:ec:03:4b:90:d7:67:f6:a5:73:27:5f:34:90:c4:24:
2a:87:15:5f:e1:d0:b8:e6:7d:e4:00:bf:87:56:6f:6c:35:e7:
98:f9:b4:86:9d:e3:f6:1d:44:c6:52:a2:6e:39:d8:e3:3e:b4:
6f:6f:9f:c9:a3:e4:7b:be:c7:48:82:ac:60:0d:67:a5:90:ff:
5c:93:b2:25:6d:1b:9c:08:50:56:ed:44:3d:83:97:fe:3b:8f:
1c:c4:cc:b6:6e:ea:85:53:9d:59:95:65:0e:8d:b2:ff:81:de:
50:18:f1:16:3e:2a:5a:be:df:f9:a0:73:3c:c6:5e:43:9a:ba:
0b:be:f1:09:eb:85:77:33:3f:ee:01:7d:8c:16:9d:47:67:47:
dd:01:27:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:41:19 2026 by rpki-client