Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563343a3a2f33322d3430203d3e203535323031.roa
File: 326131343a316563343a3a2f33322d3430203d3e203535323031.roa (raw, json)
Hash identifier: J7TluaWBMRkzmoR+yQUgqy6TY9pp5e+qFllmxawGaBk=
Subject key identifier: 00:AC:B6:8F:97:A6:D2:6E:AE:A8:C2:C8:2C:B6:9B:59:6A:67:4D:F6
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 38F339E43D43BC0ED2ACB146E5E058315E2DFB70
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563343a3a2f33322d3430203d3e203535323031.roa
Signing time: Tue 02 Sep 2025 08:31:45 +0000
ROA not before: Tue 02 Sep 2025 08:26:45 +0000
ROA not after: Tue 01 Sep 2026 08:31:45 +0000
asID: 55201
IP address blocks: 2a14:1ec4::/32 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:f3:39:e4:3d:43:bc:0e:d2:ac:b1:46:e5:e0:58:31:5e:2d:fb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Sep 2 08:26:45 2025 GMT
Not After : Sep 1 08:31:45 2026 GMT
Subject: CN=00ACB68F97A6D26EAEA8C2C82CB69B596A674DF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b6:27:b9:ae:1e:41:b8:cf:5e:b8:c2:11:55:
c4:f8:47:75:ba:fc:32:fa:14:93:4f:99:56:be:f0:
96:9b:e4:fd:fd:81:b0:dc:50:11:b2:b4:0e:08:09:
98:6b:0d:05:5d:97:e4:1d:5c:94:61:dc:54:d2:4c:
98:1c:bd:fc:ea:e9:e1:92:72:b8:d2:0e:41:1d:84:
46:f6:ce:77:97:40:0c:ff:1c:63:22:51:19:b6:01:
b9:c5:c2:3a:b3:ff:59:f0:09:f6:c7:89:42:c3:4d:
d1:51:e8:88:a5:bd:03:8a:13:5d:17:80:9e:bd:b6:
0c:40:a1:2b:01:fa:3c:0e:01:d3:3c:fe:b8:9d:ae:
0d:c6:46:be:e5:f8:0e:93:40:be:fd:b7:d1:a8:39:
d2:38:e1:1d:4e:85:4b:83:61:46:b1:6b:1b:df:37:
dc:27:00:cf:f9:a5:8f:c4:a2:50:e6:ab:b7:a3:0d:
53:b4:ec:f7:22:26:78:62:31:1b:70:cf:c6:77:56:
8e:04:51:65:9a:cc:3e:da:d3:55:31:8f:c7:dc:bf:
c9:fe:47:43:19:f3:89:aa:f7:df:9e:06:d6:49:00:
4c:74:17:35:89:50:5e:a3:bc:f3:5e:29:2b:91:be:
98:9b:50:ab:50:41:a8:57:c6:4c:3f:86:99:06:fc:
7b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AC:B6:8F:97:A6:D2:6E:AE:A8:C2:C8:2C:B6:9B:59:6A:67:4D:F6
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563343a3a2f33322d3430203d3e203535323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec4::/32
Signature Algorithm: sha256WithRSAEncryption
3e:c4:69:e5:f3:ef:70:a6:26:95:55:3e:47:c6:1b:88:8f:26:
a1:6e:cd:78:cd:50:ec:5a:3e:9d:80:9f:0c:9d:1a:45:ce:2e:
a7:08:7d:e4:77:0d:51:13:ef:a2:eb:8e:4d:b0:b4:42:69:f9:
49:29:8a:9e:50:3f:49:33:36:50:2f:dc:ab:73:9f:f8:75:30:
6e:9a:d4:4f:b6:bd:15:7a:10:4b:f8:75:b3:fc:6f:ea:4e:e1:
a5:d9:88:a0:6d:8c:fc:94:77:9c:be:d3:5a:f0:05:09:1c:70:
b2:4d:9b:f6:d7:11:22:fc:3f:0d:3d:3a:6c:c9:cc:4a:e5:f5:
70:28:be:0b:ca:74:18:54:b5:26:f0:e6:28:19:3e:97:71:06:
87:16:e9:25:d3:a0:e8:76:ce:05:06:96:2a:db:cb:f2:82:88:
03:e0:88:81:f5:ae:9b:c5:4d:97:5a:db:e7:2c:21:c2:e3:94:
eb:b4:b2:e8:33:d8:ff:8c:99:d2:40:50:d5:ba:0a:a2:31:fa:
8d:4e:7e:de:9e:60:e9:df:20:10:88:e4:2c:be:0a:cd:21:64:
0a:fb:ad:97:be:e3:39:34:1d:cc:05:fb:fb:9a:e7:b7:25:5a:
52:70:34:42:3f:db:54:3a:02:7d:c6:e5:4d:ab:96:9e:23:13:
78:da:36:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:04 2025 by rpki-client