Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a3130343a3a2f34382d3438203d3e20333936303634.roa
File: 326131343a333863303a3130343a3a2f34382d3438203d3e20333936303634.roa (raw, json)
Hash identifier: PSyqDUSSGWFciwSkriMI3jwSQFjheGM8BVR6XqAmftA=
Subject key identifier: A7:00:2C:6C:3C:16:6A:51:30:C7:D3:D9:27:BA:F0:8B:BB:FA:07:48
Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial: 128482B4DB5A0C6B9EA6E0ADEEA4C6C831D9FCBB
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a3130343a3a2f34382d3438203d3e20333936303634.roa
Signing time: Sun 02 Aug 2026 15:16:50 +0000
ROA not before: Sun 02 Aug 2026 15:11:50 +0000
ROA not after: Sun 01 Aug 2027 15:16:50 +0000
asID: 396064
IP address blocks: 2a14:38c0:104::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 09:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:84:82:b4:db:5a:0c:6b:9e:a6:e0:ad:ee:a4:c6:c8:31:d9:fc:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Validity
Not Before: Aug 2 15:11:50 2026 GMT
Not After : Aug 1 15:16:50 2027 GMT
Subject: CN=A7002C6C3C166A5130C7D3D927BAF08BBBFA0748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f1:86:a9:df:57:69:e7:7f:2d:86:5f:f3:5e:
82:2f:ac:ec:c4:49:a9:bd:09:24:cf:c5:84:f4:75:
31:ce:9a:1f:8a:03:fa:ae:c4:17:2d:1a:50:f9:66:
75:46:79:f7:f8:b9:ac:98:09:a8:2b:40:ed:12:f5:
96:77:df:21:b3:8e:12:e6:a3:c3:3c:8e:72:a3:a3:
b7:fa:0b:f4:07:83:f7:31:83:e8:13:99:01:55:b2:
67:2c:59:6d:0a:73:dd:30:5f:16:c6:ef:2c:a9:f7:
55:4c:63:8a:db:f4:8e:bb:d9:6a:2f:e4:8a:44:5e:
f0:59:1d:94:3a:e2:cc:2f:e6:cf:7d:0d:ef:fa:d1:
86:91:97:ef:87:3d:43:3a:10:66:08:3f:78:b6:53:
46:8c:63:fc:28:5c:1c:da:31:2d:7a:cb:8f:1b:35:
bf:d9:36:57:64:d5:8a:fc:92:3f:fe:f9:b1:07:f5:
82:0e:08:63:38:e7:77:af:2f:80:7d:40:ff:37:33:
23:89:1a:c3:bd:cf:9b:fe:e4:20:a7:6c:7b:e0:ed:
3c:73:5f:f7:7f:89:58:cf:86:52:32:d6:eb:67:d5:
70:d6:03:5b:00:ab:34:49:b5:32:fb:78:74:a6:6f:
1d:b7:e1:0d:be:0e:b8:18:c9:49:81:52:49:fb:ef:
7e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:00:2C:6C:3C:16:6A:51:30:C7:D3:D9:27:BA:F0:8B:BB:FA:07:48
X509v3 Authority Key Identifier:
keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a3130343a3a2f34382d3438203d3e20333936303634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:38c0:104::/48
Signature Algorithm: sha256WithRSAEncryption
49:37:b4:b9:65:55:d1:ca:5a:cb:e3:61:09:ec:b0:78:1a:c8:
c4:0e:3a:fa:51:20:99:69:06:a7:26:00:d4:d3:28:69:a0:1d:
22:9b:6f:74:79:fb:89:05:a4:5f:30:66:88:c6:1a:c9:4c:ea:
d1:e6:c2:79:80:72:2e:12:b3:a0:3b:f2:33:12:99:ec:db:2c:
bf:3f:fe:0c:0d:08:57:47:b9:90:e6:10:49:1d:1a:f4:73:89:
fb:ab:7b:26:39:bd:d9:ce:a4:c0:19:b1:6e:30:40:b6:b0:b0:
c6:7c:9c:73:bf:66:61:83:ff:36:87:53:48:22:5f:4e:32:e5:
5b:24:12:13:fa:0b:83:65:61:1b:b9:39:a6:58:9d:ac:ae:a6:
49:31:43:e0:89:7d:5b:33:db:6c:e7:e8:3c:0d:2e:1e:a9:e8:
96:5b:a2:05:19:39:5a:70:42:cd:81:4f:4e:d1:55:aa:1c:d3:
da:56:4b:26:42:fe:46:30:83:06:63:27:2d:b4:fa:c7:9a:56:
2b:86:2f:61:30:48:1b:c0:10:5e:5c:09:47:f7:9d:2c:38:e6:
41:11:7e:50:aa:8f:d9:f7:2c:de:88:26:18:7b:bb:85:db:2b:
02:29:8b:eb:16:e9:7f:21:17:02:53:6f:8c:1a:8f:85:cf:f4:
8e:6f:11:bf
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUEoSCtNtaDGuepuCt7qTGyDHZ/LswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWNkYzA0YmIyM2VhYTRjZWNjNzkxZGZlMDRiYjAyOGI3
ZTc5N2I2ODAeFw0yNjA4MDIxNTExNTBaFw0yNzA4MDExNTE2NTBaMDMxMTAvBgNV
BAMTKEE3MDAyQzZDM0MxNjZBNTEzMEM3RDNEOTI3QkFGMDhCQkJGQTA3NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn8Yap31dp538thl/zXoIvrOzE
Sam9CSTPxYT0dTHOmh+KA/quxBctGlD5ZnVGeff4uayYCagrQO0S9ZZ33yGzjhLm
o8M8jnKjo7f6C/QHg/cxg+gTmQFVsmcsWW0Kc90wXxbG7yyp91VMY4rb9I672Wov
5IpEXvBZHZQ64swv5s99De/60YaRl++HPUM6EGYIP3i2U0aMY/woXBzaMS16y48b
Nb/ZNldk1Yr8kj/++bEH9YIOCGM453evL4B9QP83MyOJGsO9z5v+5CCnbHvg7Txz
X/d/iVjPhlIy1utn1XDWA1sAqzRJtTL7eHSmbx234Q2+DrgYyUmBUkn7734lAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUpwAsbDwWalEwx9PZJ7rwi7v6B0gwHwYDVR0j
BBgwFoAUXNwEuyPqpM7MeR3+BLsCi355e2gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjli
N2M0LzAvNUNEQzA0QkIyM0VBQTRDRUNDNzkxREZFMDRCQjAyOEI3RTc5N0I2OC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hOd0V1eVBxcE03TWVSMy1CTHNDaTM1
NWUyZy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAt
NDY1My00OGQ0LThmYzQtNTgwZDEzNjliN2M0LzAvMzI2MTMxMzQzYTMzMzg2MzMw
M2EzMTMwMzQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM5MzYzMDM2MzQucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqFDjAAQQwDQYJKoZIhvcNAQELBQADggEBAEk3tLllVdHKWsvjYQns
sHgayMQOOvpRIJlpBqcmANTTKGmgHSKbb3R5+4kFpF8wZojGGslM6tHmwnmAci4S
s6A78jMSmezbLL8//gwNCFdHuZDmEEkdGvRzifureyY5vdnOpMAZsW4wQLawsMZ8
nHO/ZmGD/zaHU0giX04y5VskEhP6C4NlYRu5OaZYnayupkkxQ+CJfVsz22zn6DwN
Lh6p6JZbogUZOVpwQs2BT07RVaoc09pWSyZC/kYwgwZjJy20+seaViuGL2EwSBvA
EF5cCUf3nSw45kERflCqj9n3LN6IJhh7u4XbKwIpi+sW6X8hFwJTb4waj4XP9I5v
Eb8=
-----END CERTIFICATE-----
Generated at Sat Aug 15 14:48:03 2026 by rpki-client