Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663830303a3a2f34382d3438203d3e20323131303139.roa
File: 326131343a316563373a663830303a3a2f34382d3438203d3e20323131303139.roa (raw, json)
Hash identifier: TfxMlaP1aJskebXix+AwXYK0RRZ0Jzv5CscTEG7eC5o=
Subject key identifier: 37:15:84:11:90:D7:96:ED:EB:8C:B5:62:DB:5A:D3:8A:D2:1C:18:A2
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 62ADDC9BEC8CB3122DE71E399ABCAB08BA5EE378
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663830303a3a2f34382d3438203d3e20323131303139.roa
Signing time: Mon 07 Sep 2026 12:55:53 +0000
ROA not before: Mon 07 Sep 2026 12:50:53 +0000
ROA not after: Mon 06 Sep 2027 12:55:53 +0000
asID: 211019
IP address blocks: 2a14:1ec7:f800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 11:55:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:ad:dc:9b:ec:8c:b3:12:2d:e7:1e:39:9a:bc:ab:08:ba:5e:e3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Sep 7 12:50:53 2026 GMT
Not After : Sep 6 12:55:53 2027 GMT
Subject: CN=3715841190D796EDEB8CB562DB5AD38AD21C18A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e6:c7:12:e2:27:e4:df:c4:a8:2a:d5:1a:59:
54:7a:d4:38:13:92:41:30:2c:b3:5d:b4:74:da:be:
1e:10:26:11:96:65:16:cb:68:63:5b:e9:17:c7:d9:
56:a2:08:e3:82:1e:5d:3b:1d:c4:d0:23:21:54:51:
d1:47:0a:e1:0d:bc:f4:ad:e4:0e:d4:e5:b6:47:00:
d7:b0:8d:e5:0e:23:e2:b3:2d:80:0a:c3:f4:6e:ea:
cc:48:1f:e1:14:93:c7:d1:69:b9:90:c3:a6:d7:84:
e0:ad:c9:c8:d7:98:97:d4:4e:62:ba:f3:36:d3:6c:
62:ab:e6:57:32:20:bc:25:19:c2:85:8e:23:ac:be:
9c:17:bc:a7:6a:8c:c0:32:4f:d7:ae:0a:38:79:a2:
86:b4:09:d5:48:0a:6f:1f:02:be:22:5b:1c:cf:9c:
af:5b:d5:fb:10:c6:01:65:4b:5d:c5:ab:c0:44:9b:
5b:1a:1f:6f:dc:e7:71:c1:f6:82:5e:bf:35:f6:b9:
38:86:bc:93:8e:1f:50:b9:eb:f0:1f:7d:00:5b:96:
f0:ba:c9:dc:e2:da:4a:06:ac:a1:50:0a:70:56:25:
e4:02:47:68:47:c4:fd:4e:57:e7:ee:70:8c:62:7b:
ab:66:52:7b:23:43:9d:91:ef:f2:48:6f:ed:5b:68:
4e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:15:84:11:90:D7:96:ED:EB:8C:B5:62:DB:5A:D3:8A:D2:1C:18:A2
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663830303a3a2f34382d3438203d3e20323131303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:f800::/48
Signature Algorithm: sha256WithRSAEncryption
58:a2:9c:81:6c:a1:6b:3a:fa:02:ce:b6:f2:d7:3c:3f:2e:57:
bb:ea:82:48:27:68:82:b3:f3:fa:f1:0f:fc:7b:f1:8f:f2:78:
11:3d:c4:f7:5b:22:fc:44:42:6c:06:3a:93:04:ec:ba:b8:87:
4a:5e:94:67:7c:25:9d:ba:0b:c5:a9:b4:3b:2b:a8:54:e5:35:
74:4f:24:cf:74:5f:b1:80:80:c5:1e:bd:bf:dc:c5:e0:e5:f5:
d0:7f:4d:8e:be:b0:d5:53:7c:07:a3:c8:43:bc:a2:fa:ab:00:
c0:51:48:92:04:f5:05:cf:cf:43:31:a8:17:59:a2:e5:bf:c9:
bf:18:6d:e5:11:c3:b3:b1:90:3e:2e:14:4f:8d:2a:ff:a6:dc:
b4:a1:72:eb:d6:d9:20:05:cc:dc:00:dc:18:04:97:74:bf:9f:
dd:74:e8:5c:59:56:45:ee:d6:08:d0:ea:87:16:a0:e7:72:09:
e6:a6:26:e1:26:4a:a9:4b:50:07:d9:8c:23:93:5f:63:55:81:
0d:79:f2:70:d3:16:a1:e0:b7:2a:b4:1f:57:fa:2b:d0:47:1f:
b2:b8:e9:17:c8:f1:86:d8:5f:8b:67:47:59:35:9b:c6:50:a5:
2b:b3:c4:85:1e:2e:65:dd:cb:6f:2d:45:d2:1d:09:95:2d:0c:
de:75:4c:8e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUYq3cm+yMsxIt5x45mryrCLpe43gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEzNGVlOTg3ZTA4ZDhiNTU4M2ZlZWY2MjFhMDMxNTBj
NGYzNTQzNDAeFw0yNjA5MDcxMjUwNTNaFw0yNzA5MDYxMjU1NTNaMDMxMTAvBgNV
BAMTKDM3MTU4NDExOTBENzk2RURFQjhDQjU2MkRCNUFEMzhBRDIxQzE4QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh5scS4ifk38SoKtUaWVR61DgT
kkEwLLNdtHTavh4QJhGWZRbLaGNb6RfH2VaiCOOCHl07HcTQIyFUUdFHCuENvPSt
5A7U5bZHANewjeUOI+KzLYAKw/Ru6sxIH+EUk8fRabmQw6bXhOCtycjXmJfUTmK6
8zbTbGKr5lcyILwlGcKFjiOsvpwXvKdqjMAyT9euCjh5ooa0CdVICm8fAr4iWxzP
nK9b1fsQxgFlS13Fq8BEm1saH2/c53HB9oJevzX2uTiGvJOOH1C56/AffQBblvC6
ydzi2koGrKFQCnBWJeQCR2hHxP1OV+fucIxie6tmUnsjQ52R7/JIb+1baE6fAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUNxWEEZDXlu3rjLVi21rTitIcGKIwHwYDVR0j
BBgwFoAUMTTumH4I2LVYP+72IaAxUMTzVDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWEzYmI5M2YtOThhNC00YzdlLWEwZTEtODA1N2E0ZjA4
NmM5LzAvMzEzNEVFOTg3RTA4RDhCNTU4M0ZFRUY2MjFBMDMxNTBDNEYzNTQzNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01UVHVtSDRJMkxWWVAtNzJJYUF4VU1U
elZEUS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWEzYmI5M2Yt
OThhNC00YzdlLWEwZTEtODA1N2E0ZjA4NmM5LzAvMzI2MTMxMzQzYTMxNjU2MzM3
M2E2NjM4MzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzMTMwMzEzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoUHsf4ADANBgkqhkiG9w0BAQsFAAOCAQEAWKKcgWyhazr6As62
8tc8Py5Xu+qCSCdogrPz+vEP/Hvxj/J4ET3E91si/ERCbAY6kwTsuriHSl6UZ3wl
nboLxam0OyuoVOU1dE8kz3RfsYCAxR69v9zF4OX10H9Njr6w1VN8B6PIQ7yi+qsA
wFFIkgT1Bc/PQzGoF1mi5b/Jvxht5RHDs7GQPi4UT40q/6bctKFy69bZIAXM3ADc
GASXdL+f3XToXFlWRe7WCNDqhxag53IJ5qYm4SZKqUtQB9mMI5NfY1WBDXnycNMW
oeC3KrQfV/or0EcfsrjpF8jxhthfi2dHWTWbxlClK7PEhR4uZd3Lby1F0h0JlS0M
3nVMjg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 20:48:11 2026 by rpki-client