Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a323030303a3a2f34302d3438203d3e20323133353135.roa
File: 326131343a316563373a323030303a3a2f34302d3438203d3e20323133353135.roa (raw, json)
Hash identifier: +6Y3KVlvaUJJZxInhCfF9G7aeXeQiHstagBkncM3DOw=
Subject key identifier: F3:78:FF:CC:F6:4F:B3:7F:EB:99:A8:2C:C4:89:E4:F0:EC:A0:C4:B5
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 5226959D649DA416E73A7B9079EBFD96A9DC7A96
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a323030303a3a2f34302d3438203d3e20323133353135.roa
Signing time: Mon 16 Mar 2026 13:55:50 +0000
ROA not before: Mon 16 Mar 2026 13:50:50 +0000
ROA not after: Mon 15 Mar 2027 13:55:50 +0000
asID: 213515
IP address blocks: 2a14:1ec7:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:26:95:9d:64:9d:a4:16:e7:3a:7b:90:79:eb:fd:96:a9:dc:7a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Mar 16 13:50:50 2026 GMT
Not After : Mar 15 13:55:50 2027 GMT
Subject: CN=F378FFCCF64FB37FEB99A82CC489E4F0ECA0C4B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ea:70:a3:b7:29:71:e8:eb:5b:27:52:5c:05:
9f:91:67:79:e8:02:8f:f7:cd:e0:b8:17:e3:17:38:
7d:ca:84:ea:cf:16:58:41:6c:4e:09:c2:8b:67:4b:
a0:ef:8d:bc:81:ed:2f:67:b9:78:19:44:fa:57:77:
7a:04:3d:d3:7c:c3:74:01:af:99:95:7a:04:12:80:
ed:49:df:0c:a3:87:a2:a4:9c:65:19:14:e4:b3:54:
7b:c3:be:05:93:d7:f9:32:08:50:61:48:fa:d3:33:
c8:4a:d1:27:8d:6c:9b:7e:de:9e:60:15:f2:cf:64:
93:7b:f6:ea:da:fe:4e:b2:d7:32:4e:e1:5f:72:fb:
f1:11:8d:1b:22:8a:68:50:83:85:07:aa:42:84:09:
b0:ed:0b:ba:8d:2e:c9:e2:9b:5e:c6:39:0e:21:fe:
81:2b:04:9c:da:7e:88:eb:6f:93:c9:30:17:71:c2:
66:96:65:d7:ed:82:86:cb:45:06:de:01:7d:63:2b:
ee:ab:7e:af:96:3f:ca:fc:bb:34:0a:3e:75:29:7c:
b5:7e:56:64:80:c5:51:1d:24:34:bc:0b:0f:c5:1a:
41:e3:ae:74:17:1a:d5:11:bd:a5:48:34:87:e4:09:
8c:04:4d:1a:15:26:67:33:4e:53:65:45:82:8b:dc:
76:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:78:FF:CC:F6:4F:B3:7F:EB:99:A8:2C:C4:89:E4:F0:EC:A0:C4:B5
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a323030303a3a2f34302d3438203d3e20323133353135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:2000::/40
Signature Algorithm: sha256WithRSAEncryption
0a:fa:05:10:39:6b:fd:95:ba:db:9a:ea:ef:a3:d5:9d:70:68:
fa:63:0c:4c:0f:ea:13:5c:d6:d0:2c:db:c7:44:03:d5:eb:1a:
07:9a:61:1f:38:80:aa:70:92:7d:54:ff:1c:e7:a2:d6:cf:00:
f6:fb:a0:27:9b:9b:ee:d7:0b:4c:65:97:f0:eb:90:08:56:1c:
94:4c:cd:f7:b8:ee:c1:00:b1:42:b8:f7:e6:e8:2e:2d:a7:05:
81:5a:2e:bb:78:a0:da:52:ba:e7:23:a1:74:85:cf:bd:05:28:
5e:7e:38:75:66:09:41:b9:5c:c8:db:06:79:58:cb:23:82:55:
dd:6c:5e:32:34:1f:19:35:1f:b4:c8:e0:15:5e:e4:e7:1f:a5:
31:39:69:1c:89:15:43:bc:23:06:2c:66:7e:7c:5c:6f:48:88:
19:82:09:39:ac:e4:d4:e9:7a:e0:5c:c2:21:a3:7e:62:60:14:
2f:a4:a9:0a:db:e7:11:82:8a:6b:65:09:6c:68:48:df:c5:4f:
0a:65:6e:bf:7c:54:e1:58:59:11:84:25:e4:e4:ab:ac:cd:d4:
7e:b4:14:c9:41:a3:e4:98:c6:a6:ab:16:98:b7:d1:a1:29:cc:
48:23:b6:cc:45:f3:f6:8e:13:59:0b:51:46:04:22:fc:96:c8:
7c:e2:86:fd
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUUiaVnWSdpBbnOnuQeev9lqncepYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEzNGVlOTg3ZTA4ZDhiNTU4M2ZlZWY2MjFhMDMxNTBj
NGYzNTQzNDAeFw0yNjAzMTYxMzUwNTBaFw0yNzAzMTUxMzU1NTBaMDMxMTAvBgNV
BAMTKEYzNzhGRkNDRjY0RkIzN0ZFQjk5QTgyQ0M0ODlFNEYwRUNBMEM0QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX6nCjtylx6OtbJ1JcBZ+RZ3no
Ao/3zeC4F+MXOH3KhOrPFlhBbE4JwotnS6DvjbyB7S9nuXgZRPpXd3oEPdN8w3QB
r5mVegQSgO1J3wyjh6KknGUZFOSzVHvDvgWT1/kyCFBhSPrTM8hK0SeNbJt+3p5g
FfLPZJN79ura/k6y1zJO4V9y+/ERjRsiimhQg4UHqkKECbDtC7qNLsnim17GOQ4h
/oErBJzafojrb5PJMBdxwmaWZdftgobLRQbeAX1jK+6rfq+WP8r8uzQKPnUpfLV+
VmSAxVEdJDS8Cw/FGkHjrnQXGtURvaVINIfkCYwETRoVJmczTlNlRYKL3HarAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQU83j/zPZPs3/rmagsxInk8OygxLUwHwYDVR0j
BBgwFoAUMTTumH4I2LVYP+72IaAxUMTzVDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWEzYmI5M2YtOThhNC00YzdlLWEwZTEtODA1N2E0ZjA4
NmM5LzAvMzEzNEVFOTg3RTA4RDhCNTU4M0ZFRUY2MjFBMDMxNTBDNEYzNTQzNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01UVHVtSDRJMkxWWVAtNzJJYUF4VU1U
elZEUS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWEzYmI5M2Yt
OThhNC00YzdlLWEwZTEtODA1N2E0ZjA4NmM5LzAvMzI2MTMxMzQzYTMxNjU2MzM3
M2EzMjMwMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzMzM1MzEzNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoUHscgMA0GCSqGSIb3DQEBCwUAA4IBAQAK+gUQOWv9lbrbmurv
o9WdcGj6YwxMD+oTXNbQLNvHRAPV6xoHmmEfOICqcJJ9VP8c56LWzwD2+6Anm5vu
1wtMZZfw65AIVhyUTM33uO7BALFCuPfm6C4tpwWBWi67eKDaUrrnI6F0hc+9BShe
fjh1ZglBuVzI2wZ5WMsjglXdbF4yNB8ZNR+0yOAVXuTnH6UxOWkciRVDvCMGLGZ+
fFxvSIgZggk5rOTU6XrgXMIho35iYBQvpKkK2+cRgoprZQlsaEjfxU8KZW6/fFTh
WFkRhCXk5KuszdR+tBTJQaPkmMamqxaYt9GhKcxII7bMRfP2jhNZC1FGBCL8lsh8
4ob9
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:47:08 2026 by rpki-client