Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663830303a3a2f34382d3438203d3e20323131303139.roa
File: 326131343a316563373a663830303a3a2f34382d3438203d3e20323131303139.roa (raw, json)
Hash identifier: IUL9dWtw0Umsxfs7xwdo1JVZ6ulAsKal+ROC0kpiHgM=
Subject key identifier: 3D:CF:61:D4:64:F3:08:B8:11:A4:EC:CB:4F:E1:41:DB:87:42:BB:F4
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 097F00E678ECD569E7A5C286A31699FAE371F9DF
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663830303a3a2f34382d3438203d3e20323131303139.roa
Signing time: Mon 06 Oct 2025 12:17:56 +0000
ROA not before: Mon 06 Oct 2025 12:12:56 +0000
ROA not after: Mon 05 Oct 2026 12:17:56 +0000
asID: 211019
IP address blocks: 2a14:1ec7:f800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:7f:00:e6:78:ec:d5:69:e7:a5:c2:86:a3:16:99:fa:e3:71:f9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Oct 6 12:12:56 2025 GMT
Not After : Oct 5 12:17:56 2026 GMT
Subject: CN=3DCF61D464F308B811A4ECCB4FE141DB8742BBF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:80:3a:a4:90:c5:62:1e:8e:a9:92:60:85:b6:
45:53:6b:87:a1:bc:ce:85:7f:a4:b1:4e:3b:33:e4:
aa:7e:aa:5b:2e:96:e7:31:a6:29:98:75:43:34:c2:
14:54:58:c5:ce:54:da:f1:53:7b:20:84:9b:c3:57:
9d:a7:fe:c9:1b:06:fc:63:b2:87:f4:42:15:f8:0a:
51:35:7a:5b:42:a4:ab:ef:b2:7b:b5:fe:28:c8:f5:
1b:74:0b:5a:69:cd:88:ce:93:07:23:79:2d:5f:76:
60:a3:dc:a1:80:a2:ac:0e:ce:e9:84:8a:62:e4:2d:
8c:67:36:1b:cd:8d:b6:d8:47:55:90:70:38:22:32:
ea:ce:f4:65:69:82:62:06:d6:07:51:7f:f4:8d:12:
22:96:67:7c:bd:1b:3b:07:69:bd:d2:55:1b:06:c0:
1f:e8:67:7b:50:75:4f:4e:d9:76:c3:91:58:21:a5:
83:a7:e3:50:15:ab:1e:a4:43:10:c6:0f:b5:59:6b:
71:0f:44:5f:20:a9:36:7b:b2:28:59:3c:3f:eb:59:
81:1c:af:12:a7:6e:d1:ff:bb:af:6a:68:e7:4d:84:
06:1e:c5:88:ec:04:f3:2c:5d:38:0b:22:47:e8:18:
7a:68:c1:3c:7b:74:c5:cb:d0:4d:20:87:b8:52:f5:
ec:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CF:61:D4:64:F3:08:B8:11:A4:EC:CB:4F:E1:41:DB:87:42:BB:F4
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663830303a3a2f34382d3438203d3e20323131303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:f800::/48
Signature Algorithm: sha256WithRSAEncryption
7b:30:32:fc:c8:c5:e7:27:d7:c1:51:f5:5f:0d:8f:17:77:41:
dd:22:7d:e4:21:e6:62:8b:cc:c5:2a:58:c9:9e:cd:e0:9d:b3:
23:f0:49:fa:4d:82:7b:44:13:41:4e:21:08:94:37:f1:06:8a:
9d:22:ec:1a:af:fc:04:ec:ef:0e:8d:d8:42:93:8b:f4:62:38:
98:e1:a0:a3:eb:45:bf:12:20:91:e8:33:75:80:87:fe:a5:fe:
c6:c0:19:76:3e:55:78:79:2f:b8:e5:53:2e:4c:2b:7c:13:69:
1e:80:57:af:27:c1:22:a6:ea:73:a3:f8:47:b6:52:3b:4a:11:
8f:fb:8b:f4:17:9f:25:d5:42:8a:02:33:a8:0e:27:60:cb:2f:
80:3c:17:4e:bc:dc:6d:c4:e2:e3:ae:b7:45:75:06:bd:3c:86:
bd:98:56:11:75:37:e5:36:d1:a9:06:cd:ca:60:39:2b:f2:be:
26:8f:ad:f4:6d:eb:87:e0:32:95:a2:40:f4:e3:35:63:c9:34:
49:03:1f:ae:1c:e1:de:ea:1d:46:15:ff:c6:39:db:0c:20:9f:
8b:1d:7e:eb:d7:cc:5b:05:72:17:bf:6b:16:aa:23:e8:05:78:
42:c5:23:66:c7:d1:8b:99:54:0b:75:dd:eb:0e:4e:2d:c4:d3:
2a:85:e2:8a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUCX8A5njs1WnnpcKGoxaZ+uNx+d8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEzNGVlOTg3ZTA4ZDhiNTU4M2ZlZWY2MjFhMDMxNTBj
NGYzNTQzNDAeFw0yNTEwMDYxMjEyNTZaFw0yNjEwMDUxMjE3NTZaMDMxMTAvBgNV
BAMTKDNEQ0Y2MUQ0NjRGMzA4QjgxMUE0RUNDQjRGRTE0MURCODc0MkJCRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/gDqkkMViHo6pkmCFtkVTa4eh
vM6Ff6SxTjsz5Kp+qlsulucxpimYdUM0whRUWMXOVNrxU3sghJvDV52n/skbBvxj
sof0QhX4ClE1eltCpKvvsnu1/ijI9Rt0C1ppzYjOkwcjeS1fdmCj3KGAoqwOzumE
imLkLYxnNhvNjbbYR1WQcDgiMurO9GVpgmIG1gdRf/SNEiKWZ3y9GzsHab3SVRsG
wB/oZ3tQdU9O2XbDkVghpYOn41AVqx6kQxDGD7VZa3EPRF8gqTZ7sihZPD/rWYEc
rxKnbtH/u69qaOdNhAYexYjsBPMsXTgLIkfoGHpowTx7dMXL0E0gh7hS9ewzAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUPc9h1GTzCLgRpOzLT+FB24dCu/QwHwYDVR0j
BBgwFoAUMTTumH4I2LVYP+72IaAxUMTzVDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWEzYmI5M2YtOThhNC00YzdlLWEwZTEtODA1N2E0ZjA4
NmM5LzAvMzEzNEVFOTg3RTA4RDhCNTU4M0ZFRUY2MjFBMDMxNTBDNEYzNTQzNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01UVHVtSDRJMkxWWVAtNzJJYUF4VU1U
elZEUS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWEzYmI5M2Yt
OThhNC00YzdlLWEwZTEtODA1N2E0ZjA4NmM5LzAvMzI2MTMxMzQzYTMxNjU2MzM3
M2E2NjM4MzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzMTMwMzEzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoUHsf4ADANBgkqhkiG9w0BAQsFAAOCAQEAezAy/MjF5yfXwVH1
Xw2PF3dB3SJ95CHmYovMxSpYyZ7N4J2zI/BJ+k2Ce0QTQU4hCJQ38QaKnSLsGq/8
BOzvDo3YQpOL9GI4mOGgo+tFvxIgkegzdYCH/qX+xsAZdj5VeHkvuOVTLkwrfBNp
HoBXryfBIqbqc6P4R7ZSO0oRj/uL9BefJdVCigIzqA4nYMsvgDwXTrzcbcTi4663
RXUGvTyGvZhWEXU35TbRqQbNymA5K/K+Jo+t9G3rh+AylaJA9OM1Y8k0SQMfrhzh
3uodRhX/xjnbDCCfix1+69fMWwVyF79rFqoj6AV4QsUjZsfRi5lUC3Xd6w5OLcTT
KoXiig==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:37 2025 by rpki-client