Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663630303a3a2f34302d3438203d3e20323133393938.roa
File: 326131343a316563373a663630303a3a2f34302d3438203d3e20323133393938.roa (raw, json)
Hash identifier: jfvc4Qyrnftgf9GYsuLUox0bHp6mia0CtR4lMdTVrZY=
Subject key identifier: 0C:29:12:BC:14:F4:B9:55:20:32:BE:5C:99:38:4F:92:FC:62:B7:6D
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 2B20DB63D630915CC21F4829434B49A22E48EF7D
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663630303a3a2f34302d3438203d3e20323133393938.roa
Signing time: Mon 22 Sep 2025 10:55:33 +0000
ROA not before: Mon 22 Sep 2025 10:50:33 +0000
ROA not after: Mon 21 Sep 2026 10:55:33 +0000
asID: 213998
IP address blocks: 2a14:1ec7:f600::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:20:db:63:d6:30:91:5c:c2:1f:48:29:43:4b:49:a2:2e:48:ef:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Sep 22 10:50:33 2025 GMT
Not After : Sep 21 10:55:33 2026 GMT
Subject: CN=0C2912BC14F4B9552032BE5C99384F92FC62B76D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c1:a4:c5:40:c5:f8:cd:cd:09:5f:05:ee:aa:
d9:df:f2:a7:3b:61:be:d7:be:2a:22:8e:2f:5e:1e:
45:f3:75:a1:42:91:c2:c5:5f:ea:a5:25:59:45:1a:
3a:ce:3a:c5:6f:1a:be:03:ec:69:a1:6b:21:bf:36:
f4:4d:68:b9:c8:14:44:6e:23:22:ba:a8:67:66:51:
46:39:4e:a2:fb:3b:87:37:9a:aa:c4:6d:0d:82:d3:
70:e2:19:10:53:a7:c9:c2:42:ae:24:23:19:a4:63:
7c:77:7a:1d:c3:3c:2a:c8:03:ec:da:11:94:3c:a4:
cd:62:83:5d:bd:cf:5e:27:a8:2a:21:a7:1b:26:a0:
32:74:07:fe:13:f8:ed:c8:14:4d:be:e0:6c:bb:47:
0c:61:59:96:67:37:8e:91:2b:74:e7:7c:a5:1f:c0:
06:82:41:6d:bb:bf:52:34:ef:53:54:73:14:d7:54:
33:a9:59:6f:16:e6:85:b4:dc:28:80:38:4d:67:d0:
53:ef:eb:d7:18:9a:38:77:f5:ea:df:28:18:f7:ca:
79:a1:8d:da:cd:b7:fe:b4:2e:5e:a7:2b:51:e3:c4:
33:a6:d2:15:22:60:7c:53:52:85:16:82:d8:01:10:
3b:18:6f:69:6a:0d:ea:fc:72:38:2d:09:ec:f5:5a:
58:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:29:12:BC:14:F4:B9:55:20:32:BE:5C:99:38:4F:92:FC:62:B7:6D
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663630303a3a2f34302d3438203d3e20323133393938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:f600::/40
Signature Algorithm: sha256WithRSAEncryption
6b:93:71:51:fa:be:8b:4e:77:46:17:ae:ae:53:aa:8c:1f:55:
c0:4e:9f:5e:f8:66:1a:56:d0:92:9f:9e:df:f4:16:9f:57:91:
74:36:ab:b2:16:27:0c:ae:a8:30:e1:8a:84:71:86:c0:4e:08:
b6:7e:cb:e5:87:26:db:b8:e5:65:0a:4e:af:48:53:55:f3:33:
be:64:45:b7:d9:6f:b0:54:a1:57:e2:57:ff:82:4b:3c:16:b4:
8c:71:a9:1e:01:d4:ce:a8:16:4a:72:48:8d:f7:3a:9e:f1:37:
64:fb:54:2b:2b:66:e9:7d:ee:cd:c2:c8:44:1c:e0:51:1a:2f:
25:23:52:0d:82:2d:18:45:78:ec:86:e8:dc:56:85:b3:ba:87:
b8:a3:93:df:63:11:6d:46:2b:f9:5a:5a:45:24:2d:d8:f2:4c:
33:82:82:ae:ab:ab:05:7a:d3:b8:58:82:eb:69:ea:a3:62:a8:
25:d9:ba:2b:3c:ee:ef:96:72:09:a0:8d:62:71:21:4f:76:43:
9b:10:4b:fd:20:be:43:f9:f0:29:b5:64:b3:ae:75:1f:c6:ef:
28:52:ee:36:f2:1d:e4:6a:21:f0:6d:be:d3:b7:02:26:95:b0:
da:ac:99:2c:cb:7b:1d:31:18:ca:75:85:25:65:ef:e9:3b:ce:
54:15:2e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:09:16 2025 by rpki-client