Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/326131343a313463303a3a2f34382d3438203d3e20323037343837.roa
File: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (raw, json)
Hash identifier: AULHfw30fC5JPuaDQ09QijzFEojRfFb5/T1vtTj7hIM=
Subject key identifier: 96:A8:1B:1A:10:B6:71:A3:E7:50:62:4A:3E:2B:67:D5:57:A5:F8:CC
Certificate issuer: /CN=25827d84056b8444cc2a7842759035354b8416bc
Certificate serial: 1B8BF53370F40C30F66C6B2B0337A358FB5F668E
Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/326131343a313463303a3a2f34382d3438203d3e20323037343837.roa
Signing time: Fri 06 Mar 2026 01:00:40 +0000
ROA not before: Fri 06 Mar 2026 00:55:40 +0000
ROA not after: Fri 05 Mar 2027 01:00:40 +0000
asID: 207487
IP address blocks: 2a14:14c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl
rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:8b:f5:33:70:f4:0c:30:f6:6c:6b:2b:03:37:a3:58:fb:5f:66:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc
Validity
Not Before: Mar 6 00:55:40 2026 GMT
Not After : Mar 5 01:00:40 2027 GMT
Subject: CN=96A81B1A10B671A3E750624A3E2B67D557A5F8CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ff:9e:e1:31:72:f7:8c:ca:4f:76:c8:fa:fe:
d0:f1:69:23:d8:bb:0a:1c:06:9c:4c:f0:c2:fd:bf:
1c:12:00:1e:92:b8:d7:91:2f:7d:73:39:cf:63:f3:
51:54:a5:c5:9b:2d:07:9d:1d:35:21:ea:c9:e7:e8:
9c:33:97:b0:c2:f5:00:05:75:af:d4:c9:78:a9:38:
a9:f5:13:8f:b2:75:9c:7d:84:54:77:51:21:83:b3:
64:8b:4d:0c:e5:b9:48:9a:da:1a:ec:f4:8e:31:1f:
b7:c0:ee:23:a1:cd:43:34:9f:ba:22:8a:f2:4b:74:
21:33:52:4e:64:74:1f:30:ed:ef:c4:5f:f1:c2:ad:
58:6f:41:c2:73:6d:c4:c2:79:5b:4f:8e:69:47:6f:
a2:97:d4:d7:d1:98:86:37:84:71:b0:92:b1:8d:af:
6e:9e:a1:98:36:20:89:e5:4a:15:fc:f0:6e:b8:3e:
84:15:1a:4b:b9:dd:73:3b:c9:e8:6a:cf:95:62:c6:
b2:2b:5e:33:26:21:e0:0c:32:17:8e:d5:3d:39:c8:
2a:d1:2e:60:81:e6:d4:c6:8a:d1:31:7d:98:7a:c1:
79:93:2e:ae:42:00:1c:25:15:a9:0c:7b:e2:16:60:
ef:c8:8d:19:6c:9f:fa:9c:f1:c9:c4:5e:46:34:0c:
02:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A8:1B:1A:10:B6:71:A3:E7:50:62:4A:3E:2B:67:D5:57:A5:F8:CC
X509v3 Authority Key Identifier:
keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/326131343a313463303a3a2f34382d3438203d3e20323037343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:14c0::/48
Signature Algorithm: sha256WithRSAEncryption
61:40:6b:ba:61:7c:33:a2:34:e1:1e:cb:46:31:0b:0a:5b:a9:
c1:49:d9:0e:2e:2b:d2:0a:46:57:e9:10:37:38:95:69:76:cf:
0b:65:09:e2:08:9b:80:f8:5c:75:10:a6:00:d3:ab:5f:f0:5e:
af:fa:d1:a9:0a:05:3f:d2:64:75:76:99:ce:87:37:9a:cb:42:
f2:6e:24:a4:d1:38:ab:f3:38:76:4e:04:0a:c3:e2:33:58:37:
1c:f7:b2:42:88:e1:4f:14:9b:0a:3b:66:8b:da:7b:85:c7:64:
e6:a2:63:c5:22:3a:a0:27:be:4e:59:f0:8f:a5:0d:fb:ab:6c:
9d:45:93:9b:21:df:e8:23:f4:88:2a:7d:6e:ad:47:1f:a7:69:
8f:93:62:3f:d3:d9:c6:aa:e0:0a:a1:6a:58:95:e8:2f:1c:9e:
f8:1e:b0:a2:72:47:39:0b:5a:e5:90:5f:67:21:45:5d:82:79:
9e:f6:70:e6:63:6c:cc:8d:5a:76:65:2e:15:79:9a:79:53:50:
ff:ea:0d:b4:1e:d5:ec:20:d7:c4:e1:c5:29:78:c4:ac:58:67:
58:4e:52:55:8d:8d:83:6d:fc:e5:5c:90:8a:80:46:b7:c1:28:
72:94:13:ca:e2:62:02:7e:68:6a:4e:12:31:a1:db:c7:2c:95:
a6:a3:54:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:28:56 2026 by rpki-client