Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a666666653a3a2f34382d3438203d3e20323135343733.roa
File: 326131343a316563373a666666653a3a2f34382d3438203d3e20323135343733.roa (raw, json)
Hash identifier: AzYa7RDrX7Q1VHrLi8vFoQKqyqrJXx3reOTqmh9K+u4=
Subject key identifier: 50:E2:BC:01:DA:F5:80:3C:BF:D8:08:A6:51:B7:9A:16:6C:95:93:1C
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 5ACE2044ADF6E9DF4673B9E837B21D8063405FA0
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a666666653a3a2f34382d3438203d3e20323135343733.roa
Signing time: Fri 23 Jan 2026 20:55:49 +0000
ROA not before: Fri 23 Jan 2026 20:50:49 +0000
ROA not after: Fri 22 Jan 2027 20:55:49 +0000
asID: 215473
IP address blocks: 2a14:1ec7:fffe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:ce:20:44:ad:f6:e9:df:46:73:b9:e8:37:b2:1d:80:63:40:5f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Jan 23 20:50:49 2026 GMT
Not After : Jan 22 20:55:49 2027 GMT
Subject: CN=50E2BC01DAF5803CBFD808A651B79A166C95931C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:54:74:4c:c6:c3:44:d3:1a:5a:82:21:b4:48:
43:9b:a9:1c:87:eb:65:ba:60:44:ae:20:b3:8a:94:
2e:ca:88:2d:bc:4d:94:41:13:9e:5e:7f:92:a2:04:
31:85:ca:a8:8e:12:4e:65:4f:c0:af:30:3d:41:5e:
19:16:3b:48:b5:97:6b:3f:42:77:d2:bd:c9:39:62:
50:d4:9e:9e:0d:1d:4b:01:4a:8a:85:03:a5:b5:77:
9d:97:54:24:9d:c3:a5:dd:83:d4:1d:43:63:e8:e2:
4e:f4:35:c4:ae:2b:20:f3:44:4e:c5:a3:a5:46:4a:
af:77:2d:dd:86:0b:a3:5d:32:ee:c8:f4:fa:1b:e4:
da:c9:56:47:75:07:f0:18:e5:8a:0a:0e:fd:d6:bd:
ed:6a:3e:c3:e6:19:f4:f6:53:1e:c9:5f:98:f4:e7:
a4:8c:87:14:af:08:81:42:00:44:b0:e6:d7:b4:d2:
5a:07:cf:fa:01:69:52:8b:20:53:96:d5:5a:e1:63:
29:fe:b4:e2:62:57:f2:21:32:f3:0e:07:1d:0b:5a:
da:1a:a5:5e:74:2d:55:cb:0f:f1:a3:5f:fe:fc:b3:
2a:0f:37:37:47:12:a0:c1:7c:dc:68:b4:90:72:16:
22:8e:dc:f4:8e:28:42:9e:ef:2a:9a:4d:5c:20:da:
16:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E2:BC:01:DA:F5:80:3C:BF:D8:08:A6:51:B7:9A:16:6C:95:93:1C
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a666666653a3a2f34382d3438203d3e20323135343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:fffe::/48
Signature Algorithm: sha256WithRSAEncryption
5d:a5:88:05:fc:11:a0:21:d3:3b:c0:65:b6:d3:c6:97:b0:e4:
47:33:8a:df:34:0e:bd:f8:9b:62:6c:50:9a:5b:16:ff:84:9f:
c9:60:97:76:76:92:40:c9:32:31:43:59:db:ec:d2:08:72:9f:
06:43:db:16:35:15:71:f6:c8:bd:7c:d8:17:ed:b3:fb:3e:3d:
a7:b8:83:5f:0a:8c:d5:c1:2a:f3:81:3c:1f:a4:01:4f:a4:0f:
ca:50:6a:c5:22:55:a3:0c:b7:9f:a5:69:01:70:e1:66:18:67:
23:f8:56:2a:34:59:2d:0b:30:49:c3:a8:08:93:a2:50:96:ae:
66:46:15:f7:1c:1f:10:29:c4:c8:6e:f8:f6:a0:ba:a6:e4:42:
0f:80:af:fb:b2:0f:33:82:66:5f:18:be:21:51:8a:ad:83:eb:
78:08:dc:a6:4e:e4:11:48:70:af:4b:81:7d:ef:72:06:4d:fc:
6d:f0:0c:10:93:32:2d:91:f7:cc:4f:0f:71:fe:71:35:c9:6c:
20:e5:81:d3:92:a9:11:0e:ea:31:18:8f:5d:bd:4d:cf:5e:2e:
85:d4:c7:86:97:51:ba:43:b6:0c:80:29:fe:98:8f:d0:f4:ca:
7e:e4:2c:18:ce:81:3a:6a:9f:3e:9e:f1:d2:3f:c8:d6:44:cf:
dd:e2:e2:77
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUWs4gRK326d9Gc7noN7IdgGNAX6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEzNGVlOTg3ZTA4ZDhiNTU4M2ZlZWY2MjFhMDMxNTBj
NGYzNTQzNDAeFw0yNjAxMjMyMDUwNDlaFw0yNzAxMjIyMDU1NDlaMDMxMTAvBgNV
BAMTKDUwRTJCQzAxREFGNTgwM0NCRkQ4MDhBNjUxQjc5QTE2NkM5NTkzMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVVHRMxsNE0xpagiG0SEObqRyH
62W6YESuILOKlC7KiC28TZRBE55ef5KiBDGFyqiOEk5lT8CvMD1BXhkWO0i1l2s/
QnfSvck5YlDUnp4NHUsBSoqFA6W1d52XVCSdw6Xdg9QdQ2Po4k70NcSuKyDzRE7F
o6VGSq93Ld2GC6NdMu7I9Pob5NrJVkd1B/AY5YoKDv3Wve1qPsPmGfT2Ux7JX5j0
56SMhxSvCIFCAESw5te00loHz/oBaVKLIFOW1VrhYyn+tOJiV/IhMvMOBx0LWtoa
pV50LVXLD/GjX/78syoPNzdHEqDBfNxotJByFiKO3PSOKEKe7yqaTVwg2ha7AgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUUOK8Adr1gDy/2AimUbeaFmyVkxwwHwYDVR0j
BBgwFoAUMTTumH4I2LVYP+72IaAxUMTzVDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWEzYmI5M2YtOThhNC00YzdlLWEwZTEtODA1N2E0ZjA4
NmM5LzAvMzEzNEVFOTg3RTA4RDhCNTU4M0ZFRUY2MjFBMDMxNTBDNEYzNTQzNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01UVHVtSDRJMkxWWVAtNzJJYUF4VU1U
elZEUS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWEzYmI5M2Yt
OThhNC00YzdlLWEwZTEtODA1N2E0ZjA4NmM5LzAvMzI2MTMxMzQzYTMxNjU2MzM3
M2E2NjY2NjY2NTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNTM0MzczMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoUHsf//jANBgkqhkiG9w0BAQsFAAOCAQEAXaWIBfwRoCHTO8Bl
ttPGl7DkRzOK3zQOvfibYmxQmlsW/4SfyWCXdnaSQMkyMUNZ2+zSCHKfBkPbFjUV
cfbIvXzYF+2z+z49p7iDXwqM1cEq84E8H6QBT6QPylBqxSJVowy3n6VpAXDhZhhn
I/hWKjRZLQswScOoCJOiUJauZkYV9xwfECnEyG749qC6puRCD4Cv+7IPM4JmXxi+
IVGKrYPreAjcpk7kEUhwr0uBfe9yBk38bfAMEJMyLZH3zE8Pcf5xNclsIOWB05Kp
EQ7qMRiPXb1Nz14uhdTHhpdRukO2DIAp/piP0PTKfuQsGM6BOmqfPp7x0j/I1kTP
3eLidw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:27:36 2026 by rpki-client