Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a3130343a3a2f34382d3438203d3e20323135323438.roa
File: 326131343a333863303a3130343a3a2f34382d3438203d3e20323135323438.roa (raw, json)
Hash identifier: 4FcEdfeTo0+Jky2+dtu3oW4JSykidOJrfRq9Wn0jmuU=
Subject key identifier: BE:7E:82:EF:A2:9C:0D:20:E8:E5:4E:C9:A8:28:9D:D1:4E:0A:AD:E1
Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial: 32A716F8F749DE2D5AA871F3794609AB5FFA3660
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a3130343a3a2f34382d3438203d3e20323135323438.roa
Signing time: Sun 02 Aug 2026 15:16:50 +0000
ROA not before: Sun 02 Aug 2026 15:11:50 +0000
ROA not after: Sun 01 Aug 2027 15:16:50 +0000
asID: 215248
IP address blocks: 2a14:38c0:104::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 09:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:a7:16:f8:f7:49:de:2d:5a:a8:71:f3:79:46:09:ab:5f:fa:36:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Validity
Not Before: Aug 2 15:11:50 2026 GMT
Not After : Aug 1 15:16:50 2027 GMT
Subject: CN=BE7E82EFA29C0D20E8E54EC9A8289DD14E0AADE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:48:a8:99:ca:98:e6:61:58:49:21:1b:78:80:
16:b3:2b:53:2e:1e:6a:05:22:28:af:a5:fa:de:0b:
02:7a:eb:c1:30:e8:1d:4c:f1:0c:7b:23:44:aa:6d:
3b:bd:13:43:b8:05:91:df:40:59:a3:3c:cc:53:21:
e5:d4:ce:a1:c7:72:3e:ca:ce:e6:95:a3:e7:d4:4c:
e5:ba:75:4d:24:ce:1b:8e:0e:bc:b6:d2:87:8b:59:
fa:e6:2b:d1:85:90:12:60:8c:54:9a:4e:c6:92:93:
90:5d:ea:4f:a0:58:f2:03:9b:c4:68:69:a4:4d:9c:
05:fb:13:d3:71:66:f6:ba:ed:a1:e0:6d:c3:c8:13:
be:01:04:23:2a:86:e4:46:6b:d8:96:b1:f5:aa:00:
f1:a9:ed:d6:87:45:43:ff:86:1a:2d:7d:ca:3b:41:
90:48:51:86:20:33:2b:74:27:e3:b9:54:78:f8:22:
8e:64:0d:11:5b:8f:16:d8:fb:c3:71:f0:aa:88:d8:
a6:80:69:b3:d1:86:ee:3a:00:23:19:f5:08:a2:b6:
29:84:49:29:26:a7:75:b5:c8:4c:9e:09:53:34:3d:
46:8b:01:29:83:c6:60:38:17:c5:bd:6b:9f:41:5f:
b6:fb:52:b9:2a:c3:be:ea:30:8d:5c:93:41:46:13:
5b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7E:82:EF:A2:9C:0D:20:E8:E5:4E:C9:A8:28:9D:D1:4E:0A:AD:E1
X509v3 Authority Key Identifier:
keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a3130343a3a2f34382d3438203d3e20323135323438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:38c0:104::/48
Signature Algorithm: sha256WithRSAEncryption
36:7f:94:93:5d:47:af:18:a7:37:0b:c5:71:b8:70:c3:9e:e5:
54:bf:49:a4:e2:63:a0:27:2f:b6:7c:d0:07:bd:0d:b4:67:68:
72:43:80:d5:8d:8a:43:cd:92:11:db:cc:3a:bd:67:86:4d:de:
36:d6:21:bb:69:ee:86:f4:dc:67:04:b3:f4:9b:78:54:7e:7f:
93:55:f4:06:c7:3f:16:26:38:1f:5c:34:33:16:c1:9f:0e:da:
85:82:f8:1e:c9:b4:8f:e7:f7:0e:b1:74:d7:f6:4f:18:cb:82:
fd:c5:35:5d:64:90:52:69:32:53:28:5d:30:02:35:bc:f9:4b:
00:44:9c:50:97:98:85:d8:07:38:d0:01:8e:50:02:da:9b:d5:
13:aa:d8:ad:f7:a8:9f:d8:64:bd:da:7a:9f:b6:ea:15:9d:29:
98:21:37:0d:b9:a8:c3:a3:de:c7:c0:81:de:8a:5b:08:b8:e0:
2a:17:2b:b6:8d:70:19:89:45:cf:d4:4a:79:e0:56:e3:da:8c:
bd:7e:74:ab:f3:d3:31:af:b9:95:44:74:24:3e:74:03:40:37:
41:81:e7:24:6c:cc:fe:cb:dd:41:ed:82:3d:9e:f3:99:13:e3:
74:45:93:0f:e7:cc:bc:79:a5:5a:d9:c0:3d:c6:c5:23:75:91:
ea:44:d9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 14:48:33 2026 by rpki-client