Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa
File: 326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa (raw, json)
Hash identifier: hXmtXtl9GXfZkTMFxLpLxRdTsVn4I7OwMy1faULzKXw=
Subject key identifier: EF:4A:DD:11:EE:91:63:32:1A:56:69:02:45:81:1A:DD:9C:E0:39:FF
Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial: 10A2CD63D09EE137A4E63EC815B2A29075AC495A
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa
Signing time: Sat 04 Jul 2026 17:10:02 +0000
ROA not before: Sat 04 Jul 2026 17:05:02 +0000
ROA not after: Sat 03 Jul 2027 17:10:02 +0000
asID: 396064
IP address blocks: 2a14:38c0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:a2:cd:63:d0:9e:e1:37:a4:e6:3e:c8:15:b2:a2:90:75:ac:49:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Validity
Not Before: Jul 4 17:05:02 2026 GMT
Not After : Jul 3 17:10:02 2027 GMT
Subject: CN=EF4ADD11EE9163321A56690245811ADD9CE039FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:10:2f:81:fc:1a:0b:d4:80:03:e8:64:b8:02:
0b:32:89:5f:6a:8a:bf:fd:21:5e:fe:e9:26:78:f6:
7d:d7:30:54:09:e8:5c:d9:08:bd:5f:5c:c4:e4:2a:
b9:b0:a7:89:14:94:c7:0a:51:ff:20:41:6b:ed:33:
81:17:67:35:5d:69:a5:dc:be:fd:10:d1:5e:b0:fa:
04:73:b4:f9:8c:ae:81:46:55:63:b5:62:62:0f:8d:
dd:6e:b7:33:ec:50:4d:25:fc:cd:52:7d:52:63:67:
49:ae:83:56:32:8b:21:de:0e:61:4a:70:52:30:56:
4a:54:c4:3c:24:a0:b3:45:57:a4:00:47:aa:7f:73:
ed:e7:c0:bc:4e:90:dd:c9:9b:e1:6d:22:ab:83:64:
40:d5:c5:0b:25:a3:a9:86:22:ee:80:3f:70:4a:10:
28:f7:29:c9:30:0d:2f:0e:3c:ee:8b:df:3f:95:e1:
60:99:bb:3b:d7:77:6c:e6:3e:f4:54:b9:ac:09:c5:
54:87:40:04:db:6f:d2:ea:08:c9:92:58:6f:7c:67:
ca:c4:14:1d:a2:1c:3d:b0:9b:20:19:f0:06:a8:93:
a2:15:17:ec:73:21:00:9d:b4:96:18:83:bb:e7:88:
94:f6:8c:1a:e9:f0:e7:98:42:02:0e:66:3d:84:b4:
25:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4A:DD:11:EE:91:63:32:1A:56:69:02:45:81:1A:DD:9C:E0:39:FF
X509v3 Authority Key Identifier:
keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:38c0:3::/48
Signature Algorithm: sha256WithRSAEncryption
13:7e:5f:d2:b6:6a:52:dc:7b:bc:e9:7f:82:49:6d:29:07:75:
28:2c:7c:b3:48:ad:c1:19:27:3a:f2:de:81:5b:78:20:86:c0:
24:5e:6a:af:63:9d:18:c8:72:69:ae:86:9a:d0:93:4e:c3:46:
c1:52:b3:e4:3f:13:39:13:32:6e:10:94:72:3d:8a:3a:fa:a8:
ec:ee:15:02:b1:7b:98:a3:f1:25:b2:87:74:35:75:68:be:aa:
5c:88:92:dd:97:83:19:2a:eb:a9:fa:f1:74:b8:2d:ca:3f:28:
23:b5:69:6c:5e:c4:70:e3:17:a7:5e:49:c8:4e:d1:45:b4:13:
49:b0:7f:ef:77:1f:0d:17:ff:41:c0:8c:b1:39:03:b8:64:44:
a4:eb:ec:29:80:1e:67:68:40:47:bc:cb:9d:8f:6c:8a:2e:ab:
1a:69:bc:c5:36:51:56:db:1e:3b:51:fb:d3:1b:33:5e:a0:fd:
93:02:db:79:a6:7c:5b:bf:f3:c4:eb:e2:04:21:3d:0a:87:d2:
39:8d:d5:d2:ba:ab:ed:48:ae:ff:1f:18:b5:34:c2:08:0c:f3:
f8:be:00:89:73:f3:09:2f:38:51:a6:40:0e:c4:28:35:3b:c5:
e4:0c:ad:c6:26:a3:ea:f0:2b:fe:62:97:96:b7:4d:f5:b1:31:
1c:e4:ad:0e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:11:27 2026 by rpki-client