Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa
File: 326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa (raw, json)
Hash identifier: z+CH+oI+Hp/F381dhXEnc80+9gwH3lVem7Z/rJ0QrxE=
Subject key identifier: AA:F0:41:50:6D:9E:EE:B9:AE:E2:9B:D7:21:31:02:90:12:11:18:7D
Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial: 0B4317208245EAAB6AD7157F94EA00744FE4079C
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa
Signing time: Sat 04 Jul 2026 17:10:03 +0000
ROA not before: Sat 04 Jul 2026 17:05:03 +0000
ROA not after: Sat 03 Jul 2027 17:10:03 +0000
asID: 215248
IP address blocks: 2a14:38c0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:43:17:20:82:45:ea:ab:6a:d7:15:7f:94:ea:00:74:4f:e4:07:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Validity
Not Before: Jul 4 17:05:03 2026 GMT
Not After : Jul 3 17:10:03 2027 GMT
Subject: CN=AAF041506D9EEEB9AEE29BD7213102901211187D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ef:d5:00:51:bc:cc:5d:34:1f:6c:d6:0f:1b:
1c:e6:f1:4a:ad:96:a8:5c:b1:3a:e8:04:2f:d2:9c:
ed:53:1a:b1:ff:3f:f2:cd:9e:75:98:1d:7a:16:cf:
e7:d0:83:e2:1a:a7:6f:b8:30:30:4e:0e:c4:8b:b1:
c0:d0:a5:13:f3:f6:32:b2:9b:85:a3:6d:af:cc:5e:
75:dd:12:f7:77:99:cd:fd:e0:38:c4:32:f9:03:53:
f3:c3:bf:e8:c7:fd:c6:99:33:23:b2:18:fc:d9:ee:
e7:d5:4c:3c:49:cf:f0:7f:4c:f4:5a:bc:7c:95:e6:
d4:56:4a:3e:81:55:29:75:60:c7:1b:5f:cb:48:62:
5e:df:25:3f:73:14:12:f3:35:1e:ec:9c:a1:c1:8b:
7e:87:03:ec:77:1f:0e:01:46:fe:be:0a:23:1b:98:
9a:ef:21:2c:5d:cb:cb:93:ed:29:92:74:5c:ee:e2:
ec:bd:14:ed:9c:5a:63:65:df:9d:88:0f:27:09:ce:
ce:f3:c1:a0:8f:50:01:d4:88:54:39:6d:94:81:4e:
05:7d:aa:64:8b:8a:67:db:f6:ae:66:d2:8c:1f:ad:
19:d2:e4:27:62:64:7c:64:a0:d9:8a:08:ef:9d:02:
ba:4c:3d:b1:82:27:7c:59:c1:b5:9d:5a:0d:b2:77:
fa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F0:41:50:6D:9E:EE:B9:AE:E2:9B:D7:21:31:02:90:12:11:18:7D
X509v3 Authority Key Identifier:
keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:38c0:3::/48
Signature Algorithm: sha256WithRSAEncryption
6f:91:6d:68:bc:62:48:02:87:20:ce:aa:56:65:5c:45:eb:63:
02:93:b3:4d:ba:2e:f3:80:c2:9a:f4:7b:7d:39:27:cc:5d:df:
1a:54:b0:ae:a9:41:57:05:a6:24:bc:9a:f7:9e:92:91:9a:27:
dc:9d:ae:9c:35:2c:6d:dd:e4:b9:21:40:ec:e6:95:7f:23:c7:
04:df:42:bc:73:e6:3a:3e:dc:9a:98:59:65:b7:96:9a:59:3a:
b3:40:7d:fa:1b:ca:b8:73:97:0c:86:5d:ee:5e:b7:dd:38:52:
54:33:f6:a0:b9:ed:dd:16:91:01:29:07:ba:bb:8f:8e:24:da:
5c:8e:b7:52:d8:7c:0d:f5:35:6a:44:1e:ea:3a:97:59:1d:0b:
c3:d7:18:2f:86:f2:41:21:91:3b:1f:69:af:b5:1a:0e:83:cc:
76:90:f9:f9:3e:ea:a2:55:52:30:66:e7:4f:77:d7:5a:7b:61:
9c:58:9a:63:84:b1:ca:dd:fc:2c:1c:d5:ae:fa:20:3f:a3:89:
76:51:14:b9:99:81:2b:50:60:8d:ce:f8:cb:c2:e1:60:44:c7:
a7:4b:b3:cc:fd:f7:98:da:03:8b:6d:6f:5a:0d:5d:ca:90:84:
77:a8:dc:9f:18:e7:15:59:81:26:f6:ca:6a:7f:4e:f4:5a:aa:
a9:b9:93:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:13:14 2026 by rpki-client