Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663732303a3a2f34342d3438203d3e203139333138.roa
File: 326131343a316563373a663732303a3a2f34342d3438203d3e203139333138.roa (raw, json)
Hash identifier: 354DUYTmwYIpJ7s6pAfElMpcSbsG0UySE6atyDydlaw=
Subject key identifier: 45:30:07:46:6B:B7:5D:C5:F8:5B:D3:AD:CC:9D:50:76:A1:0A:DE:7D
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 29A74976F2C4C7F19581FD11AB8F1A52EF379CC6
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663732303a3a2f34342d3438203d3e203139333138.roa
Signing time: Wed 01 Oct 2025 19:18:00 +0000
ROA not before: Wed 01 Oct 2025 19:13:00 +0000
ROA not after: Wed 30 Sep 2026 19:18:00 +0000
asID: 19318
IP address blocks: 2a14:1ec7:f720::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:a7:49:76:f2:c4:c7:f1:95:81:fd:11:ab:8f:1a:52:ef:37:9c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Oct 1 19:13:00 2025 GMT
Not After : Sep 30 19:18:00 2026 GMT
Subject: CN=453007466BB75DC5F85BD3ADCC9D5076A10ADE7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:69:f7:85:06:62:09:7f:ba:f4:56:de:9f:6a:
89:76:3e:44:22:86:52:ad:f4:a2:5a:75:d7:aa:80:
27:72:e0:2a:30:54:ab:af:55:e0:2d:be:96:7a:46:
2f:51:0a:f3:2c:84:99:34:44:8e:97:d7:f2:b1:13:
04:8f:44:44:d9:10:4b:d7:a5:57:f0:84:1d:c9:25:
96:b2:2e:d3:62:06:be:cc:0c:c0:a9:d8:72:04:85:
6c:81:8f:99:06:db:b2:a6:85:2f:e8:25:8f:af:91:
0c:bd:37:fe:15:02:3f:81:30:fd:11:75:da:48:c0:
7e:5c:7f:f5:41:a9:ea:77:69:3a:99:6f:9f:60:58:
e9:47:0d:c3:06:30:f7:45:03:37:64:9b:75:7b:62:
a9:c1:47:b9:13:ec:51:69:17:0e:95:ad:46:b4:de:
a5:a3:c2:f0:c1:8d:78:7f:ae:3e:59:86:1a:5c:e8:
6a:f4:b6:ce:dc:86:82:c3:4c:d4:a5:49:ea:14:c9:
21:d0:b8:95:a9:d8:bb:43:7f:d1:18:7c:11:7e:9f:
3e:15:bf:4b:bd:0f:59:7e:27:93:a2:db:34:f5:c0:
15:33:5c:75:07:8d:c6:8a:04:fc:72:5c:96:7d:8a:
65:4f:bc:06:df:cb:b2:11:8f:7a:13:90:92:78:30:
a2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:30:07:46:6B:B7:5D:C5:F8:5B:D3:AD:CC:9D:50:76:A1:0A:DE:7D
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663732303a3a2f34342d3438203d3e203139333138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:f720::/44
Signature Algorithm: sha256WithRSAEncryption
7e:c9:81:82:b0:79:85:7e:3c:45:53:c5:83:6c:9c:fb:41:f4:
83:3e:88:04:9c:ac:55:4c:32:ff:ae:48:7e:63:fc:6a:37:3c:
30:50:0c:c4:fa:68:6e:96:91:c7:0a:f7:92:57:9e:73:fd:90:
d2:ef:c1:a9:5e:71:36:38:7b:83:4c:45:9d:1c:a5:9d:5a:8c:
5e:7f:e0:7e:51:ef:cc:7c:59:f9:6b:7f:98:a4:72:d9:62:0d:
f1:5c:e1:5d:f7:07:5d:f7:b9:48:25:7d:72:b7:aa:c7:4d:5a:
98:2f:e2:ad:20:39:c1:50:a5:08:2c:ed:ca:a7:22:8f:84:03:
fc:72:35:5f:39:44:a5:a9:08:29:24:ca:1b:f3:32:cc:b0:d9:
7b:45:fa:9a:ce:c6:4f:37:f0:01:0e:65:c4:8d:2e:7a:a9:43:
1d:35:8a:0c:cb:ae:e3:22:b5:d1:51:9e:9a:4d:c6:df:66:1e:
f6:7a:5a:6e:33:26:84:e4:90:fe:fc:16:f9:31:6b:98:0f:73:
87:c7:73:98:39:22:b7:87:71:08:81:be:32:04:2d:c7:ca:2e:
42:aa:9e:f0:b5:cf:84:50:51:18:cc:8b:ba:bd:77:28:e1:a6:
3b:dd:f6:3a:2f:7e:2c:17:6c:78:27:dd:fc:ed:d7:67:6a:67:
35:91:4b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:09 2025 by rpki-client