Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663731303a3a2f34342d3438203d3e20323030303838.roa
File: 326131343a316563373a663731303a3a2f34342d3438203d3e20323030303838.roa (raw, json)
Hash identifier: AEg6jBnmgaUb2x64BLtcycaY+zMRMacIwLXjCKOp0Kc=
Subject key identifier: 04:3E:DA:99:25:FD:A5:4C:5B:42:64:E3:21:E3:AC:F6:9B:C6:CE:FE
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 42F8891E09E1F14195B76B4A0BDEB157989789B4
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663731303a3a2f34342d3438203d3e20323030303838.roa
Signing time: Wed 01 Oct 2025 18:42:34 +0000
ROA not before: Wed 01 Oct 2025 18:37:34 +0000
ROA not after: Wed 30 Sep 2026 18:42:34 +0000
asID: 200088
IP address blocks: 2a14:1ec7:f710::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:f8:89:1e:09:e1:f1:41:95:b7:6b:4a:0b:de:b1:57:98:97:89:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Oct 1 18:37:34 2025 GMT
Not After : Sep 30 18:42:34 2026 GMT
Subject: CN=043EDA9925FDA54C5B4264E321E3ACF69BC6CEFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ce:4e:63:69:46:58:f6:3a:5e:12:6a:20:9b:
74:dd:6b:b7:70:a0:2f:86:db:2a:00:2f:42:0c:31:
b7:d9:01:f4:60:ec:f4:76:cf:93:a7:20:be:fe:e7:
45:37:b1:34:3d:d5:60:27:25:6a:4c:ac:12:84:15:
f9:2a:48:08:c8:5d:b7:f0:57:58:3b:b9:e1:8d:7d:
64:21:1c:43:b8:33:6a:34:39:6c:64:59:9d:a2:ee:
7a:54:cc:6a:c0:dc:e0:cb:19:63:58:e1:4c:55:1c:
a9:d2:65:47:64:c4:8e:fd:98:57:d5:f9:fa:72:16:
b3:e8:de:ea:84:a3:72:a3:d0:7a:7c:1d:e5:00:c3:
1e:a5:d0:60:c1:4c:41:a7:f3:86:96:ff:ff:8a:8e:
4f:ce:38:4a:ff:57:6e:c8:2c:82:da:36:4c:12:3c:
a0:ff:6a:c3:df:84:21:a8:b1:8b:13:15:93:16:90:
6f:bf:be:0e:9a:33:6c:fd:4b:00:98:dc:e6:7b:0d:
f2:6b:c0:2e:4d:49:21:3c:ea:4d:54:6d:9f:f4:91:
2c:23:67:bd:9c:c6:e3:4c:88:2d:c9:91:d9:33:d2:
91:c9:eb:8c:7c:f0:a7:20:01:e1:db:c1:03:bd:0a:
7d:c4:28:0f:7a:a1:ca:ad:bf:3f:4e:1f:ef:a1:d1:
61:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3E:DA:99:25:FD:A5:4C:5B:42:64:E3:21:E3:AC:F6:9B:C6:CE:FE
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663731303a3a2f34342d3438203d3e20323030303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:f710::/44
Signature Algorithm: sha256WithRSAEncryption
7c:e2:67:7d:87:ec:c9:aa:1d:9f:13:0b:05:50:c5:14:58:f7:
9d:aa:ec:d8:0f:ec:3c:fb:11:77:45:fc:ad:f8:53:04:7c:1f:
25:8f:7d:ed:72:32:8a:45:b6:b9:7c:00:4d:94:3e:8d:95:c0:
1e:0a:92:10:7c:b1:b7:e3:30:db:28:26:9b:b8:59:da:d2:7f:
ee:2e:c1:c4:dd:78:d0:fc:87:9c:9a:c9:73:0e:3f:a5:6d:c7:
63:0e:50:fa:2c:7b:0f:47:6a:51:57:ec:4f:10:bf:a3:39:0c:
52:8a:9c:92:bb:76:76:a6:9a:75:96:5e:96:42:c0:58:2c:93:
54:5f:31:97:96:09:fb:7a:f2:81:bd:3f:98:e7:15:46:d2:94:
de:cb:3d:91:db:ed:f1:9c:d3:5a:ab:96:3d:dd:4a:92:1a:04:
ea:fa:82:66:0f:f1:18:9b:a0:92:31:fe:fc:66:2e:81:20:85:
8b:07:a9:07:ee:8d:ac:f4:28:d1:77:4f:2d:0a:a6:5c:cf:a1:
96:d0:ae:d1:2e:88:69:c9:36:a7:72:d1:bc:eb:d8:92:ab:51:
96:5f:75:56:4b:3c:f2:65:28:3f:98:14:2e:b8:c6:25:3f:9f:
47:4b:22:57:0b:06:f7:39:dc:f0:6b:ba:96:60:1c:d0:32:bc:
bd:6c:2b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:44 2025 by rpki-client