Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a666130303a3a2f34302d3438203d3e20323134333635.roa
File: 326131343a316563373a666130303a3a2f34302d3438203d3e20323134333635.roa (raw, json)
Hash identifier: +3u9qmsILpHMBej9gDFj/UcgpMQR1Sc7WslKz2itbCY=
Subject key identifier: 74:0A:E7:8B:96:5A:51:76:5D:ED:46:D6:19:39:E5:0C:BC:A4:6E:E4
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 4CC69EB6A6CD63C3734054CA4A47A61C4AF8DA3F
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a666130303a3a2f34302d3438203d3e20323134333635.roa
Signing time: Sun 26 Jul 2026 21:55:52 +0000
ROA not before: Sun 26 Jul 2026 21:50:52 +0000
ROA not after: Sun 25 Jul 2027 21:55:52 +0000
asID: 214365
IP address blocks: 2a14:1ec7:fa00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:c6:9e:b6:a6:cd:63:c3:73:40:54:ca:4a:47:a6:1c:4a:f8:da:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Jul 26 21:50:52 2026 GMT
Not After : Jul 25 21:55:52 2027 GMT
Subject: CN=740AE78B965A51765DED46D61939E50CBCA46EE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:7d:dd:02:5b:b0:12:02:0b:6b:d1:02:5a:
68:b2:2b:96:c7:ad:e2:b2:5b:ac:91:86:eb:30:fa:
3a:96:e9:c2:fb:ed:e3:51:e7:ba:c0:e3:07:45:e1:
ca:e6:05:1e:26:0d:b6:47:b1:26:c8:ea:f6:08:44:
f6:f4:03:21:ba:62:75:56:b8:73:59:cf:16:25:1d:
76:fd:7d:d7:d7:e1:2c:45:51:25:41:56:06:ed:c9:
ad:3d:11:72:4f:1e:9a:eb:36:c1:30:50:04:10:7f:
1a:13:82:a3:db:d8:b7:b7:e0:af:88:8b:c8:0c:8a:
33:0e:32:7e:a2:c7:be:05:95:1a:04:f6:fc:4e:c8:
91:d5:82:da:6d:ad:52:a0:1d:fe:b5:c7:a7:7b:20:
fe:2d:f2:f4:6a:4a:80:78:57:16:8d:32:4b:76:6c:
fb:3c:5f:80:67:58:3a:e2:63:1c:08:e9:0e:fd:50:
a1:af:96:75:0b:89:0c:74:3e:aa:e7:60:c0:39:1d:
9b:03:00:24:46:86:30:6a:21:55:57:06:e7:32:48:
ce:ab:db:4e:c0:2e:67:f9:52:07:b9:77:0b:1d:0f:
93:b5:f8:53:4e:ce:4b:4f:ce:da:f2:e2:61:1c:6b:
0a:3b:e4:1a:f9:a6:7c:ad:00:e5:35:d8:c2:30:7b:
07:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0A:E7:8B:96:5A:51:76:5D:ED:46:D6:19:39:E5:0C:BC:A4:6E:E4
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a666130303a3a2f34302d3438203d3e20323134333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:fa00::/40
Signature Algorithm: sha256WithRSAEncryption
38:ab:aa:46:ca:e0:2c:ea:95:04:36:d1:53:50:cb:5a:a4:61:
f3:58:e3:a7:64:db:f7:7d:d7:fc:31:25:77:93:6e:2e:56:f7:
89:27:b3:40:e6:f8:b8:32:15:8e:0b:d8:9e:11:56:ec:36:a2:
cb:22:65:21:20:18:67:98:df:94:96:b0:11:f3:42:3e:b0:8c:
42:18:dc:9a:a6:57:bf:c3:e3:b7:a7:9b:cb:c8:a6:53:25:96:
3c:e9:f4:1c:6d:36:b0:61:e8:92:ef:14:f3:38:22:6c:e0:7f:
b2:1b:6f:de:e3:f0:be:74:d9:64:a6:80:ed:69:a6:ec:63:90:
88:e3:ac:88:34:ef:06:c8:3c:55:62:d0:74:65:28:3b:3e:ff:
54:b6:ec:de:99:5b:c9:7d:8d:3d:c9:cb:67:60:da:79:2d:35:
5a:06:9a:05:fd:c2:a4:02:ef:55:b1:ba:f5:83:25:65:32:fe:
4a:63:5e:24:70:55:86:a9:4e:c2:6e:53:f5:7b:5b:63:23:c7:
d4:40:bd:42:5a:4c:48:c1:fa:ff:37:9b:99:2a:86:bd:c0:e7:
16:6d:34:ef:cd:1a:05:fd:f9:64:aa:5d:49:9a:23:db:86:db:
11:ef:24:16:ae:5e:5d:90:9e:b2:dc:e0:49:c5:d1:25:da:4e:
46:bf:ce:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:40:21 2026 by rpki-client