Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa
File: 326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa (raw, json)
Hash identifier: hT2vS1KxZCIrrbIeX36lXo5PB7z3bFiXrMszQcpSghE=
Subject key identifier: 6F:03:E0:88:9B:62:C8:71:54:1F:F8:7F:81:E9:01:97:8D:37:94:FF
Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial: 2FC36B927731E6BB07CFD86CED63448CC5406DCC
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa
Signing time: Mon 21 Jul 2025 20:25:46 +0000
ROA not before: Mon 21 Jul 2025 20:20:46 +0000
ROA not after: Mon 20 Jul 2026 20:25:46 +0000
asID: 396064
IP address blocks: 2a14:38c0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:c3:6b:92:77:31:e6:bb:07:cf:d8:6c:ed:63:44:8c:c5:40:6d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Validity
Not Before: Jul 21 20:20:46 2025 GMT
Not After : Jul 20 20:25:46 2026 GMT
Subject: CN=6F03E0889B62C871541FF87F81E901978D3794FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7a:24:a5:c7:79:3e:b3:73:51:28:53:8f:d9:
5e:64:14:e9:b9:bb:05:58:06:34:e4:c1:94:f3:d7:
fe:80:53:68:7d:25:88:b4:d0:94:87:90:5d:9f:06:
50:0a:b5:12:37:e7:4f:0e:c1:f4:d3:c9:9b:3a:24:
8f:be:f0:6e:25:5b:c2:d4:47:d9:60:a8:d3:84:67:
ef:39:d9:31:4b:ef:49:db:d1:9c:64:59:28:e0:54:
39:c8:14:fb:40:b8:06:bb:9a:ed:b0:48:64:35:c1:
57:77:a8:3a:30:93:08:cd:72:a6:47:8f:03:61:6e:
e7:df:34:c7:d8:48:25:6f:80:75:d8:6a:e8:6b:24:
fc:97:35:04:17:35:df:3f:48:5a:59:50:c3:ca:32:
73:7b:68:ff:40:75:ea:1c:a6:13:80:80:3e:13:33:
a3:7f:44:cd:6e:3e:fa:e2:80:74:17:5e:39:6a:d4:
e6:ed:a0:60:60:c5:d6:25:60:50:d3:d5:2b:08:e0:
14:00:51:fa:b2:69:14:cb:36:65:65:75:c6:68:9b:
5e:e6:cf:3a:18:3f:4b:6e:0d:f3:b1:ec:e2:79:23:
a3:90:63:bb:ca:f6:81:cf:cc:16:a7:ad:b7:8d:5f:
1c:ab:10:ca:a0:50:28:12:0a:65:e0:1d:c2:34:41:
05:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:03:E0:88:9B:62:C8:71:54:1F:F8:7F:81:E9:01:97:8D:37:94:FF
X509v3 Authority Key Identifier:
keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:38c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
3e:b4:14:ef:51:83:79:e0:d1:a0:08:da:9a:f9:ac:68:24:41:
38:8d:98:d7:49:7b:b0:03:dc:c8:d2:53:14:65:a0:19:c3:56:
fa:3e:6c:56:91:47:46:48:90:9a:17:5e:a1:af:71:92:e2:14:
06:f2:92:a1:ad:db:af:9d:86:67:8b:90:db:42:09:7f:79:20:
f8:f6:5c:d5:f3:07:bb:7f:ad:1e:65:fe:56:25:c0:35:83:3d:
21:a9:01:f3:3a:85:37:d6:88:cc:1b:ec:44:76:69:be:8c:20:
6b:f8:8c:b6:c3:a5:f1:17:c3:97:65:93:a0:1f:73:ca:f7:fb:
f6:54:2a:f1:09:b3:cc:fd:1b:90:7f:2b:ae:c8:7f:a2:f5:8b:
64:c4:8a:99:92:84:b0:33:1e:37:97:e8:66:32:86:e4:85:6c:
8e:b2:73:48:dd:1d:61:8a:1e:06:93:70:23:d0:4e:88:ac:d0:
b3:0d:9d:b1:1d:21:1c:14:fe:74:85:1c:a9:a0:a4:3c:9a:ff:
21:8c:ed:f9:b8:ae:37:8c:6d:2a:48:29:d7:43:fa:33:d4:d9:
87:4f:ff:ac:1f:90:de:c7:5c:0c:8a:d6:ee:5e:e6:0a:5a:12:
69:5a:6c:09:4a:f6:83:fa:f2:41:56:8d:fa:d3:05:86:1e:00:
8f:23:5a:1a
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUL8Nrkncx5rsHz9hs7WNEjMVAbcwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWNkYzA0YmIyM2VhYTRjZWNjNzkxZGZlMDRiYjAyOGI3
ZTc5N2I2ODAeFw0yNTA3MjEyMDIwNDZaFw0yNjA3MjAyMDI1NDZaMDMxMTAvBgNV
BAMTKDZGMDNFMDg4OUI2MkM4NzE1NDFGRjg3RjgxRTkwMTk3OEQzNzk0RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqeiSlx3k+s3NRKFOP2V5kFOm5
uwVYBjTkwZTz1/6AU2h9JYi00JSHkF2fBlAKtRI3508OwfTTyZs6JI++8G4lW8LU
R9lgqNOEZ+852TFL70nb0ZxkWSjgVDnIFPtAuAa7mu2wSGQ1wVd3qDowkwjNcqZH
jwNhbuffNMfYSCVvgHXYauhrJPyXNQQXNd8/SFpZUMPKMnN7aP9AdeocphOAgD4T
M6N/RM1uPvrigHQXXjlq1ObtoGBgxdYlYFDT1SsI4BQAUfqyaRTLNmVldcZom17m
zzoYP0tuDfOx7OJ5I6OQY7vK9oHPzBanrbeNXxyrEMqgUCgSCmXgHcI0QQUdAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUbwPgiJtiyHFUH/h/gekBl403lP8wHwYDVR0j
BBgwFoAUXNwEuyPqpM7MeR3+BLsCi355e2gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjli
N2M0LzAvNUNEQzA0QkIyM0VBQTRDRUNDNzkxREZFMDRCQjAyOEI3RTc5N0I2OC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hOd0V1eVBxcE03TWVSMy1CTHNDaTM1
NWUyZy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAt
NDY1My00OGQ0LThmYzQtNTgwZDEzNjliN2M0LzAvMzI2MTMxMzQzYTMzMzg2MzMw
M2EzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMzMzkzNjMwMzYzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACoUOMAAATANBgkqhkiG9w0BAQsFAAOCAQEAPrQU71GDeeDRoAjamvmsaCRB
OI2Y10l7sAPcyNJTFGWgGcNW+j5sVpFHRkiQmhdeoa9xkuIUBvKSoa3br52GZ4uQ
20IJf3kg+PZc1fMHu3+tHmX+ViXANYM9IakB8zqFN9aIzBvsRHZpvowga/iMtsOl
8RfDl2WToB9zyvf79lQq8QmzzP0bkH8rrsh/ovWLZMSKmZKEsDMeN5foZjKG5IVs
jrJzSN0dYYoeBpNwI9BOiKzQsw2dsR0hHBT+dIUcqaCkPJr/IYzt+biuN4xtKkgp
10P6M9TZh0//rB+Q3sdcDIrW7l7mCloSaVpsCUr2g/ryQVaN+tMFhh4AjyNaGg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:06 2025 by rpki-client