Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/326130323a313334383a3a2f33322d3332203d3e203531303539.roa
File: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (raw, json)
Hash identifier: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=
Subject key identifier: 44:61:18:4C:D8:7B:4A:A4:A8:D0:13:DA:A7:0E:00:54:F0:D4:87:2B
Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial: 6749FCE21201B1CEEF04A444319AF77C047A9EF5
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/326130323a313334383a3a2f33322d3332203d3e203531303539.roa
Signing time: Tue 09 Sep 2025 10:51:11 +0000
ROA not before: Tue 09 Sep 2025 10:46:11 +0000
ROA not after: Tue 08 Sep 2026 10:51:11 +0000
asID: 51059
IP address blocks: 2a02:1348::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 03:17:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:49:fc:e2:12:01:b1:ce:ef:04:a4:44:31:9a:f7:7c:04:7a:9e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Validity
Not Before: Sep 9 10:46:11 2025 GMT
Not After : Sep 8 10:51:11 2026 GMT
Subject: CN=4461184CD87B4AA4A8D013DAA70E0054F0D4872B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d6:d6:82:6c:0e:98:43:54:49:2c:74:cf:c5:
76:f4:74:f7:82:2d:37:ba:87:7f:b5:44:4c:cb:8a:
72:c8:89:96:92:6d:f7:fc:61:23:db:ca:65:9b:7b:
25:50:c8:86:0d:c9:73:22:26:6c:94:91:dc:86:25:
95:0a:70:d8:1c:d3:13:d2:99:03:28:93:5c:b7:5f:
dd:91:06:d3:9f:59:b3:61:2d:40:fa:b5:7f:8d:e9:
01:a4:80:7a:c7:1d:44:fe:ed:10:96:00:57:8a:f2:
45:72:3f:99:a1:a0:95:1b:a0:ad:7b:ca:46:55:bb:
68:83:a6:51:44:d0:cf:35:46:01:d3:89:b4:ca:ed:
4f:b9:a4:72:37:0c:75:af:b3:85:a8:77:31:ff:a1:
6b:59:e9:8e:e4:f7:2d:54:2c:c4:c6:6a:7d:d6:ae:
96:0f:51:56:ec:44:37:ef:64:88:79:b3:4f:50:74:
bc:5a:d5:21:88:e8:85:d7:42:10:9d:15:58:7f:e3:
e6:30:7f:7e:a5:d6:75:4c:50:e6:e6:cf:dd:98:9a:
e0:4c:0e:38:7e:46:e7:85:ce:a5:e7:8b:58:b3:5c:
84:a8:02:b0:30:57:2b:d8:2c:a9:11:9f:27:92:31:
9f:cb:b4:68:a1:8e:ef:94:3c:64:30:1f:f5:cb:b8:
36:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:61:18:4C:D8:7B:4A:A4:A8:D0:13:DA:A7:0E:00:54:F0:D4:87:2B
X509v3 Authority Key Identifier:
keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/326130323a313334383a3a2f33322d3332203d3e203531303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:1348::/32
Signature Algorithm: sha256WithRSAEncryption
16:9f:a4:e5:4d:25:c9:e8:f5:f9:1e:89:63:67:2e:d3:be:f2:
e8:0c:c3:a7:2c:47:1d:28:8a:48:62:e3:46:6b:8f:ee:1b:73:
85:bd:c5:4c:10:1c:09:b4:15:e9:dc:a7:61:84:a0:e7:60:a3:
7f:73:39:b8:5f:0a:7f:c0:53:7a:04:de:15:84:81:c6:c6:a9:
7b:a6:44:ef:7c:4b:3f:91:43:11:94:c3:c6:d8:3d:84:b6:41:
77:d2:4f:7a:93:1f:87:8c:f9:e7:26:2c:8d:41:a0:b2:8f:4a:
ce:20:8c:e0:d3:43:61:9a:8a:10:04:8e:58:95:d7:87:37:44:
8c:7d:23:42:4d:87:19:bd:a4:e7:39:5b:6a:e4:75:47:a3:e4:
d9:c9:0d:59:31:31:9f:f9:e3:bf:99:2c:2b:26:28:d0:d2:56:
bf:db:24:50:e9:b8:2f:e1:c0:6a:be:f7:a8:27:a9:c3:bb:3b:
29:c8:a2:a8:50:ed:f8:ee:c9:4d:0d:54:a5:41:e1:5b:2d:95:
4c:d9:f2:5c:73:31:a6:46:28:54:cc:37:9f:6b:59:d5:6d:fb:
12:95:bf:ea:1a:ea:6b:70:0b:cf:a4:c5:2c:de:c2:a6:c5:41:
43:7d:7b:8f:a8:7c:9d:1a:dc:81:af:c3:ca:d7:81:de:6f:b1:
96:88:1b:1e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZ0n84hIBsc7vBKREMZr3fAR6nvUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0
N2RjZWVlYTAeFw0yNTA5MDkxMDQ2MTFaFw0yNjA5MDgxMDUxMTFaMDMxMTAvBgNV
BAMTKDQ0NjExODRDRDg3QjRBQTRBOEQwMTNEQUE3MEUwMDU0RjBENDg3MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq1taCbA6YQ1RJLHTPxXb0dPeC
LTe6h3+1REzLinLIiZaSbff8YSPbymWbeyVQyIYNyXMiJmyUkdyGJZUKcNgc0xPS
mQMok1y3X92RBtOfWbNhLUD6tX+N6QGkgHrHHUT+7RCWAFeK8kVyP5mhoJUboK17
ykZVu2iDplFE0M81RgHTibTK7U+5pHI3DHWvs4WodzH/oWtZ6Y7k9y1ULMTGan3W
rpYPUVbsRDfvZIh5s09QdLxa1SGI6IXXQhCdFVh/4+Ywf36l1nVMUObmz92YmuBM
Djh+RueFzqXni1izXISoArAwVyvYLKkRnyeSMZ/LtGihju+UPGQwH/XLuDbrAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQURGEYTNh7SqSo0BPapw4AVPDUhyswHwYDVR0j
BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx
MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm
Yzd1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOWRmMzNhNTct
N2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUxMWI0LzAvMzI2MTMwMzIzYTMxMzMzNDM4
M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzMTMwMzUzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoC
E0gwDQYJKoZIhvcNAQELBQADggEBABafpOVNJcno9fkeiWNnLtO+8ugMw6csRx0o
ikhi40Zrj+4bc4W9xUwQHAm0Fencp2GEoOdgo39zObhfCn/AU3oE3hWEgcbGqXum
RO98Sz+RQxGUw8bYPYS2QXfST3qTH4eM+ecmLI1BoLKPSs4gjODTQ2GaihAEjliV
14c3RIx9I0JNhxm9pOc5W2rkdUej5NnJDVkxMZ/547+ZLCsmKNDSVr/bJFDpuC/h
wGq+96gnqcO7OynIoqhQ7fjuyU0NVKVB4VstlUzZ8lxzMaZGKFTMN59rWdVt+xKV
v+oa6mtwC8+kxSzewqbFQUN9e4+ofJ0a3IGvw8rXgd5vsZaIGx4=
-----END CERTIFICATE-----
Generated at Tue Sep 16 09:23:43 2025 by rpki-client