Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563323a3a2f34302d3434203d3e20323135333138.roa
File: 326131343a316563323a3a2f34302d3434203d3e20323135333138.roa (raw, json)
Hash identifier: Gdy/dRxqTsvrntuyx+c7lbJ9LKalRwpPzKPu9YagYX4=
Subject key identifier: EA:B5:D7:DB:14:B1:B7:6D:32:11:66:63:48:F5:9E:7B:15:29:4B:11
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 563CE1AB77EB980D9D3C820B82F5B90ED62D5EE1
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563323a3a2f34302d3434203d3e20323135333138.roa
Signing time: Sun 13 Sep 2026 11:55:54 +0000
ROA not before: Sun 13 Sep 2026 11:50:54 +0000
ROA not after: Sun 12 Sep 2027 11:55:54 +0000
asID: 215318
IP address blocks: 2a14:1ec2::/40 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:27:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:3c:e1:ab:77:eb:98:0d:9d:3c:82:0b:82:f5:b9:0e:d6:2d:5e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Sep 13 11:50:54 2026 GMT
Not After : Sep 12 11:55:54 2027 GMT
Subject: CN=EAB5D7DB14B1B76D3211666348F59E7B15294B11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6b:55:b4:20:43:de:5e:b4:04:58:ce:72:4f:
b1:04:4f:34:af:00:93:28:61:2b:af:bc:ac:7d:45:
c4:9e:8a:a8:88:a4:e4:94:e8:4a:dd:c4:6d:14:2e:
30:22:2a:4c:af:d9:a1:2d:0d:2b:b9:c9:fd:a4:75:
83:93:66:4b:d5:4a:f9:2d:d9:2e:df:19:24:7d:af:
c9:68:02:1d:30:2e:25:33:b6:09:5c:44:7b:75:27:
78:ed:ea:60:db:6b:f4:8f:9e:a0:25:9e:85:f9:0d:
2e:59:c1:e8:f3:db:fa:9c:5d:78:a4:a7:b3:64:2c:
a1:1c:17:5d:dd:65:29:4f:d6:33:7d:c8:a4:7d:a9:
42:cb:41:42:a0:8f:e7:62:5e:ef:c8:68:21:fb:e7:
59:07:ca:15:a8:d8:c9:0b:0a:33:97:a6:30:8e:85:
62:90:90:82:60:c5:a7:ec:a9:f8:fc:22:e8:6f:ef:
31:b1:7c:f6:0d:2c:d3:d7:30:39:f5:c8:2d:b7:a9:
6b:10:a5:b4:25:d1:33:55:1c:7b:12:4b:4c:19:c6:
d2:d8:91:32:6d:8e:55:b1:e9:53:c8:bb:a8:a1:54:
95:bd:d6:8a:2b:b6:36:b2:18:e7:55:77:b1:27:9c:
07:49:fa:f7:a7:47:68:d3:f0:3c:0d:a7:f1:4b:0c:
78:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B5:D7:DB:14:B1:B7:6D:32:11:66:63:48:F5:9E:7B:15:29:4B:11
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563323a3a2f34302d3434203d3e20323135333138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec2::/40
Signature Algorithm: sha256WithRSAEncryption
62:fb:49:fc:4d:fa:7f:fb:7d:92:6b:63:84:87:34:38:e9:d3:
f8:23:77:34:1f:cb:25:d1:a8:91:44:26:0b:9f:67:50:04:97:
0a:85:77:d2:d4:78:4f:fd:4e:b6:6a:d9:c1:ad:de:f9:f6:87:
18:7e:78:2d:b3:2a:f6:5e:9c:50:3a:b3:0e:06:1a:7f:e0:72:
bd:1f:e9:a1:32:53:24:9e:16:69:0a:b1:02:38:19:a3:40:ae:
04:69:3d:0b:df:f1:42:17:10:47:cc:e6:1d:25:22:76:96:a5:
a2:be:d8:e0:22:78:c8:13:30:ab:ea:68:a4:97:5f:3f:ef:bd:
e6:46:b8:7a:fb:c9:07:7e:3e:29:b5:fc:f9:26:73:e0:e8:3d:
f2:41:95:45:b7:1e:1b:f3:84:d0:2b:37:7c:cd:ad:24:bc:c6:
55:1e:b6:a6:e0:0e:5b:7d:0c:4b:3f:d6:a9:f7:82:25:76:b2:
17:ba:48:43:91:65:c2:77:4e:cc:b9:d0:29:e4:68:c7:b2:4a:
b0:0e:2f:c5:c8:a2:9d:65:8c:a7:65:57:e8:52:fa:af:06:66:
26:af:3c:b0:e6:e6:c6:aa:1d:11:c7:05:c3:96:60:c2:c4:1c:
e1:98:a9:05:2b:d6:b0:b7:c5:6c:fb:85:d1:47:58:c4:9a:ac:
cb:9e:7f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:46:15 2026 by rpki-client