Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663830313a3a2f34382d3438203d3e20323131303139.roa
File: 326131343a316563373a663830313a3a2f34382d3438203d3e20323131303139.roa (raw, json)
Hash identifier: HWyM08b/2m6lk4CE4jN6/X+84O4uPNVbiJ6yyFsS5wY=
Subject key identifier: AF:8A:C5:D4:50:10:92:9B:D6:34:8A:2F:9B:E7:2D:F0:FF:97:93:09
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 3763BC265F810AD05DAC01333CBD0B1216B55FF8
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663830313a3a2f34382d3438203d3e20323131303139.roa
Signing time: Mon 07 Sep 2026 12:55:53 +0000
ROA not before: Mon 07 Sep 2026 12:50:53 +0000
ROA not after: Mon 06 Sep 2027 12:55:53 +0000
asID: 211019
IP address blocks: 2a14:1ec7:f801::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:63:bc:26:5f:81:0a:d0:5d:ac:01:33:3c:bd:0b:12:16:b5:5f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Sep 7 12:50:53 2026 GMT
Not After : Sep 6 12:55:53 2027 GMT
Subject: CN=AF8AC5D45010929BD6348A2F9BE72DF0FF979309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e4:06:45:ff:65:ac:0b:a2:70:be:e5:31:63:
31:d7:20:ca:93:16:9a:98:d8:dd:13:ca:e6:86:bf:
65:8d:17:a7:ec:44:d3:82:71:ca:10:a9:3c:f9:80:
fe:b5:7c:5b:39:d6:42:c7:03:9e:aa:f5:9d:42:07:
fb:4b:86:2c:79:70:25:58:d3:91:0d:6e:ec:1e:f8:
7a:36:5f:dc:42:59:7c:4a:87:a5:7f:38:99:ed:2e:
7b:11:eb:b3:95:bf:5c:2a:52:46:e1:f3:80:13:14:
37:98:d6:77:23:56:da:1f:df:f3:87:67:61:e4:b7:
94:e8:8d:74:1e:4c:25:1f:0a:65:af:2f:4a:ba:91:
fc:4a:e4:d9:2f:cf:04:fb:0b:0c:3a:92:33:56:ad:
59:40:74:23:49:aa:ef:cf:5d:24:0c:dc:af:a1:6e:
91:62:dd:4d:d6:a0:54:34:2d:55:33:0c:af:03:73:
ec:0c:e7:dc:8b:33:b2:fe:e4:52:7d:c1:c5:6a:7c:
75:39:a2:4d:28:c0:14:06:23:70:2c:3b:a2:7c:2d:
9c:3f:31:20:7d:cc:43:4e:c9:c4:f7:6f:b8:ab:e0:
ac:97:c0:ac:cd:31:d0:90:46:06:94:02:5f:e4:62:
20:ff:83:cd:85:b4:ca:24:30:f8:01:95:90:d0:75:
a9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8A:C5:D4:50:10:92:9B:D6:34:8A:2F:9B:E7:2D:F0:FF:97:93:09
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663830313a3a2f34382d3438203d3e20323131303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:f801::/48
Signature Algorithm: sha256WithRSAEncryption
9e:1c:37:58:75:ba:41:fa:75:5c:a0:d9:79:f4:f0:18:df:0d:
ff:e0:44:41:3b:46:34:39:0d:cf:a5:7f:e6:c8:7d:f2:06:97:
d3:0e:74:23:a2:6a:cf:5a:72:f9:99:df:73:1e:84:d7:7c:a1:
bc:8b:02:ef:80:eb:8e:80:ff:99:47:43:9e:55:b5:00:7b:71:
e2:64:f6:83:22:52:ab:2c:28:7d:dd:5d:cd:25:3c:69:6c:07:
aa:2c:10:52:3c:86:e5:c9:87:70:75:f4:c1:d8:8f:e9:ba:4f:
56:0f:d4:df:57:84:01:9c:11:e8:d0:d1:88:fe:49:10:4c:39:
e1:41:42:f9:27:41:64:07:a1:f1:41:f8:2d:21:2d:bc:cc:85:
51:97:a0:f4:13:9a:83:49:f9:e4:b3:32:1d:08:f4:70:ec:d5:
e3:53:25:c3:fe:2c:12:44:29:59:f5:15:86:a8:0c:72:59:46:
51:f7:ae:5c:f1:cd:1b:34:fb:79:da:6b:cb:b3:bc:4e:4e:3f:
8b:a4:d3:e4:cf:f0:24:57:fb:5a:f3:29:a6:8a:a0:c1:f2:4b:
ca:17:00:f6:a8:7c:ef:c0:23:e4:cf:a4:4c:6f:49:a1:54:de:
7f:bd:12:8c:75:13:79:2a:5d:9f:ed:e2:7f:c4:5f:bd:44:3d:
72:95:c0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:51:23 2026 by rpki-client