Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a666430303a3a2f34302d3438203d3e20323136323034.roa
File: 326131343a316563373a666430303a3a2f34302d3438203d3e20323136323034.roa (raw, json)
Hash identifier: s/Nou3yfPszN+70d0fh1KxFGk9lHz9YF1rBNojiEJcI=
Subject key identifier: 5F:24:91:92:A7:81:33:6E:16:E0:BA:B5:3E:9D:43:27:3A:B3:03:B6
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 7BDB0542C8376CE187E741EF307411826703E59C
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a666430303a3a2f34302d3438203d3e20323136323034.roa
Signing time: Mon 15 Sep 2025 12:48:02 +0000
ROA not before: Mon 15 Sep 2025 12:43:02 +0000
ROA not after: Mon 14 Sep 2026 12:48:02 +0000
asID: 216204
IP address blocks: 2a14:1ec7:fd00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:db:05:42:c8:37:6c:e1:87:e7:41:ef:30:74:11:82:67:03:e5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Sep 15 12:43:02 2025 GMT
Not After : Sep 14 12:48:02 2026 GMT
Subject: CN=5F249192A781336E16E0BAB53E9D43273AB303B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6c:1f:11:27:ee:4a:78:04:09:f0:e5:75:ce:
84:84:db:29:8f:60:1a:23:b1:f8:15:93:f6:fb:ef:
d5:3f:6b:e7:d4:5b:e1:74:7b:33:10:80:f5:b3:59:
25:eb:d5:c7:75:5e:b3:dd:e0:0f:49:11:a2:c6:aa:
1d:14:76:3f:24:53:29:5d:ee:94:23:d5:b5:2d:3e:
00:1d:9c:00:89:89:38:b5:06:9d:2a:9e:44:21:4d:
22:5e:38:0c:0b:86:0f:86:6a:31:59:96:99:b5:da:
5a:14:d9:dd:21:e7:43:1d:f5:f5:8a:7a:40:b4:e2:
00:54:2c:d3:d0:11:26:aa:59:fa:86:b3:8f:1f:2c:
e0:e0:64:18:c1:36:d5:c7:df:8a:32:40:8c:f3:42:
3c:bb:2f:84:00:2a:b2:3e:07:b4:5d:c1:42:0a:b7:
a6:83:02:4b:af:44:50:78:fe:44:a6:66:49:34:ef:
1e:38:d2:f6:28:7e:63:6f:26:63:a8:9e:d6:92:b5:
e4:31:b6:2b:a4:7a:65:ff:be:02:54:dc:3d:96:e0:
5c:43:0a:69:70:67:e3:88:95:2c:bf:45:50:3d:75:
16:d0:5a:f4:c9:f1:d2:c4:9b:05:32:c2:9c:c9:3f:
ed:b8:20:c4:3b:a1:cf:79:35:8e:95:bd:ba:7d:d2:
7e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:24:91:92:A7:81:33:6E:16:E0:BA:B5:3E:9D:43:27:3A:B3:03:B6
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a666430303a3a2f34302d3438203d3e20323136323034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:fd00::/40
Signature Algorithm: sha256WithRSAEncryption
8e:f5:e7:e9:b6:3e:97:3c:5f:80:78:3a:a8:4b:5e:37:b6:df:
6f:85:00:69:de:38:48:db:f8:ad:2f:d7:f5:fc:13:fe:1d:52:
c0:b8:1f:5c:ad:52:b5:36:5d:71:5b:fe:64:03:c8:c0:45:36:
1a:aa:4c:1b:dd:43:31:19:a3:67:7e:55:57:92:85:f6:13:3e:
c4:da:5a:53:6c:ac:d5:a4:00:cc:d7:05:e4:f1:4d:ac:a5:83:
f8:f9:49:80:ec:31:ed:53:7c:5d:6f:02:09:d3:5c:43:db:dd:
23:39:93:60:94:a8:62:f9:b5:b8:b4:ca:8b:74:e4:82:3b:1a:
11:71:03:46:7a:bb:a9:ad:7f:ee:f0:e0:98:e4:8f:f4:10:f0:
33:76:9f:a3:c6:12:86:b3:79:cf:5b:1f:93:17:72:2f:09:df:
1e:30:37:2a:96:87:e5:c9:cc:ca:d5:73:21:08:bd:31:39:11:
ee:23:4a:52:3d:7b:b0:6a:11:11:1e:0c:02:a2:b1:35:c6:00:
ec:e8:70:5e:13:be:0c:4f:d0:d2:ba:5c:a8:15:fb:63:f9:c1:
51:e5:d2:7b:10:50:fe:c2:d8:82:a6:8b:58:ad:cf:e1:0f:99:
bb:a4:5c:54:95:de:03:3f:5a:42:e1:55:62:8d:ab:28:27:67:
2c:b9:42:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:45 2025 by rpki-client