Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a623030623a3a2f34382d3438203d3e20313937393139.roa
File: 326131343a366634343a623030623a3a2f34382d3438203d3e20313937393139.roa (raw, json)
Hash identifier: Wi5+YIc762ypl+B2WINgJse4hzMgAIpn5Ywt7Gts2zw=
Subject key identifier: 69:EC:BA:3C:19:67:3B:F9:8F:91:40:E5:56:1F:83:15:F0:AE:D7:F5
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 70C1D2F279822F4543A55905A568A32B47BE55E3
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a623030623a3a2f34382d3438203d3e20313937393139.roa
Signing time: Sun 29 Jun 2025 11:43:47 +0000
ROA not before: Sun 29 Jun 2025 11:38:47 +0000
ROA not after: Sun 28 Jun 2026 11:43:47 +0000
asID: 197919
IP address blocks: 2a14:6f44:b00b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 09:58:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:c1:d2:f2:79:82:2f:45:43:a5:59:05:a5:68:a3:2b:47:be:55:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Jun 29 11:38:47 2025 GMT
Not After : Jun 28 11:43:47 2026 GMT
Subject: CN=69ECBA3C19673BF98F9140E5561F8315F0AED7F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:75:01:e4:c6:77:64:98:6e:d0:e5:90:24:
80:5a:be:21:87:30:0a:d3:64:1a:48:aa:fa:ed:d4:
31:0c:19:55:89:a2:f8:2b:14:9a:a9:8d:13:2e:a6:
b1:39:67:a1:2c:b1:bd:98:97:e1:93:11:94:3d:32:
2b:03:b7:15:ca:d2:47:a9:e4:78:3b:e9:23:7e:eb:
36:18:4a:e1:4c:9c:85:57:a1:a2:ae:cc:c9:e0:06:
7e:c3:df:13:d4:88:0f:d4:8d:22:56:fe:b7:d1:61:
82:4b:88:91:5f:db:65:64:6d:60:7f:a1:c4:e5:3e:
a6:f4:0e:18:11:92:a2:5f:d8:fe:7f:a2:60:07:98:
52:80:1e:bb:c4:02:7c:f0:99:bc:dc:11:3c:f6:3d:
21:75:d2:53:f8:bb:3a:d8:73:0b:29:08:60:81:bb:
82:69:b7:b1:b8:84:20:2d:e9:38:a7:26:25:5d:f4:
05:48:c4:4a:77:4b:c1:d4:14:94:12:c8:98:20:24:
19:00:93:cd:b9:4e:34:59:5c:37:57:cd:9b:88:f4:
2a:d3:72:e6:eb:87:72:85:49:e0:d3:76:2c:e2:cd:
51:17:4c:79:f1:69:1b:d6:2f:45:4e:28:41:67:84:
80:4c:8b:cd:c5:11:84:5f:dc:5a:77:4e:12:58:7c:
bf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EC:BA:3C:19:67:3B:F9:8F:91:40:E5:56:1F:83:15:F0:AE:D7:F5
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a623030623a3a2f34382d3438203d3e20313937393139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f44:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
99:4f:e4:86:d3:1e:b3:85:f9:bf:30:f7:8d:b5:b7:b4:bc:c1:
e7:eb:3d:5a:7f:84:d7:dd:31:81:16:30:56:d2:b5:62:14:d0:
00:62:b7:aa:13:34:7d:00:6f:96:b4:1b:6a:e3:a3:34:8e:09:
b5:48:d3:12:9a:00:3e:14:21:82:2a:e6:50:25:45:57:85:b0:
b3:80:d6:a0:67:2d:c9:7e:cd:82:52:9d:d3:44:f5:60:a0:f3:
4a:ec:22:a8:de:83:76:04:d0:db:53:dd:2e:81:74:f4:07:09:
79:86:22:f3:b1:96:85:98:a3:7b:46:ca:fd:45:85:a5:8c:04:
1b:5b:87:d9:74:e6:aa:e1:25:93:df:9b:34:52:1e:28:d7:20:
18:ff:ec:d1:fc:05:bf:3c:21:f7:72:7e:a3:27:74:52:e1:1a:
ec:c5:e0:e0:f6:f0:bb:b7:fd:ef:c1:f2:5f:27:33:42:00:e0:
cf:b4:3a:72:11:1b:58:8d:82:e1:a0:d4:0e:fb:ec:81:98:26:
f3:5e:0f:1d:12:27:b6:c3:fa:fd:c6:32:3a:27:05:9e:2a:a6:
d5:ba:95:6a:78:99:06:d8:fd:af:37:05:be:e8:77:53:35:08:
99:6c:c4:11:a0:fa:53:91:07:23:62:4a:13:32:d8:d6:8d:ab:
f1:fe:ba:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:11:02 2025 by rpki-client