Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a633066663a3a2f34382d3438203d3e203534363831.roa
File: 326131343a366634343a633066663a3a2f34382d3438203d3e203534363831.roa (raw, json)
Hash identifier: dC8rQUoWVp/X7YVAzZ2dHrxEZrdm+LkwjO9CaebKOYE=
Subject key identifier: FB:78:A7:DA:1B:8B:54:60:04:F7:49:A8:7E:D9:F1:8F:B1:09:CC:2E
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 1F1257F423F1733845FCDBBC8EC7EC2CE222AE3C
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a633066663a3a2f34382d3438203d3e203534363831.roa
Signing time: Sun 29 Jun 2025 11:43:45 +0000
ROA not before: Sun 29 Jun 2025 11:38:45 +0000
ROA not after: Sun 28 Jun 2026 11:43:45 +0000
asID: 54681
IP address blocks: 2a14:6f44:c0ff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 09:58:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:12:57:f4:23:f1:73:38:45:fc:db:bc:8e:c7:ec:2c:e2:22:ae:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Jun 29 11:38:45 2025 GMT
Not After : Jun 28 11:43:45 2026 GMT
Subject: CN=FB78A7DA1B8B546004F749A87ED9F18FB109CC2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:89:8f:2d:05:f9:dd:c3:a0:72:6d:74:06:cc:
d4:fa:01:d8:c9:a5:5b:14:39:ca:cf:45:ac:38:e7:
ef:75:45:3e:34:1b:96:f2:9b:42:94:89:9a:04:2a:
40:f8:96:1d:69:f6:7c:e8:df:1d:04:4c:bc:81:14:
fc:18:e6:66:6d:87:3b:6f:ef:20:87:e7:ea:ff:b7:
f2:72:ab:42:f1:bc:22:db:4c:e6:d7:8b:5a:ad:f5:
22:ba:48:c7:46:6c:35:e4:ab:9b:09:3e:83:ac:15:
c9:4a:58:3b:2c:17:c2:19:20:b8:d0:4d:5c:8f:c0:
24:f3:92:50:45:e8:68:c3:48:90:ba:ba:6d:76:d7:
e3:06:98:d1:b0:d0:4f:0e:1f:11:74:3a:c2:67:e0:
0a:14:ab:18:5b:be:d6:2f:3a:8b:df:5d:bb:05:7f:
a6:75:3a:1e:a9:c2:67:2a:51:d5:47:99:3d:d9:db:
cb:a1:e3:60:c6:7b:63:80:fa:01:28:13:9b:30:38:
a7:14:e4:74:88:b6:75:8e:48:65:3e:e1:e5:32:56:
14:d6:b7:82:35:1e:0c:bc:7d:07:87:9d:de:f4:69:
cc:0b:9e:27:fc:be:52:7a:bf:1c:f4:18:4f:c0:73:
d0:11:5f:ee:a7:6c:a8:d6:d3:17:94:d0:d6:32:68:
04:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:78:A7:DA:1B:8B:54:60:04:F7:49:A8:7E:D9:F1:8F:B1:09:CC:2E
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a633066663a3a2f34382d3438203d3e203534363831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f44:c0ff::/48
Signature Algorithm: sha256WithRSAEncryption
28:fb:0c:df:4c:e3:93:d8:c3:b2:f6:17:f6:98:8a:ea:fd:a8:
d5:6d:64:59:e8:f4:ef:14:53:79:fa:76:ec:f1:ab:d8:f4:db:
37:a0:38:38:df:df:ea:54:57:9b:e2:57:11:08:38:89:51:d2:
e0:df:e7:c0:c9:1e:45:72:e7:c7:45:cf:68:30:bb:39:3a:91:
9a:63:d9:95:00:c0:80:69:a4:94:18:d4:0f:b2:dc:4e:ba:5c:
4a:bf:57:36:8d:0d:9e:0f:bc:06:22:ff:88:b6:15:36:1a:9f:
d6:60:b0:f9:d0:31:0d:f0:3c:9c:a3:88:ce:b5:5f:39:b6:15:
87:52:42:6a:02:66:49:e4:0b:9a:f6:95:73:0e:76:6f:5d:02:
9a:e5:be:14:65:76:9e:66:e0:80:fc:e0:35:56:c3:b9:75:99:
7d:1a:85:b5:68:d6:79:3d:8c:d0:8e:b5:b0:00:ab:ac:c4:e0:
34:96:68:69:38:0b:c8:d8:34:fb:62:a6:0a:68:f5:d5:8a:1a:
69:f5:a1:09:84:9b:76:a9:ed:20:12:85:b7:9e:c3:ff:02:91:
de:e3:17:8c:bc:75:27:26:a6:1c:0f:f0:f4:60:8d:62:93:74:
56:c3:e5:59:00:3d:2e:60:c5:70:6f:dd:5d:8d:ba:c3:b3:db:
cc:fb:ae:05
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUHxJX9CPxczhF/Nu8jsfsLOIirjwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2VlZWJiOTQ2YThkMjFkNDA4M2M5M2RjMDljZWU1NTdi
YjJhYzMyZTAeFw0yNTA2MjkxMTM4NDVaFw0yNjA2MjgxMTQzNDVaMDMxMTAvBgNV
BAMTKEZCNzhBN0RBMUI4QjU0NjAwNEY3NDlBODdFRDlGMThGQjEwOUNDMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOiY8tBfndw6BybXQGzNT6AdjJ
pVsUOcrPRaw45+91RT40G5bym0KUiZoEKkD4lh1p9nzo3x0ETLyBFPwY5mZthztv
7yCH5+r/t/Jyq0LxvCLbTObXi1qt9SK6SMdGbDXkq5sJPoOsFclKWDssF8IZILjQ
TVyPwCTzklBF6GjDSJC6um121+MGmNGw0E8OHxF0OsJn4AoUqxhbvtYvOovfXbsF
f6Z1Oh6pwmcqUdVHmT3Z28uh42DGe2OA+gEoE5swOKcU5HSItnWOSGU+4eUyVhTW
t4I1Hgy8fQeHnd70acwLnif8vlJ6vxz0GE/Ac9ARX+6nbKjW0xeU0NYyaASxAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQU+3in2huLVGAE90moftnxj7EJzC4wHwYDVR0j
BBgwFoAUPu67lGqNIdQIPJPcCc7lV7sqwy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5
YjNkLzQvM0VFRUJCOTQ2QThEMjFENDA4M0M5M0RDMDlDRUU1NTdCQjJBQzMyRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1B1NjdsR3FOSWRRSVBKUGNDYzdsVjdz
cXd5NC5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmZmN2E5ODkt
ZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5YjNkLzQvMzI2MTMxMzQzYTM2NjYzNDM0
M2E2MzMwNjY2NjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzQzNjM4MzEucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqFG9EwP8wDQYJKoZIhvcNAQELBQADggEBACj7DN9M45PYw7L2F/aY
iur9qNVtZFno9O8UU3n6duzxq9j02zegODjf3+pUV5viVxEIOIlR0uDf58DJHkVy
58dFz2gwuzk6kZpj2ZUAwIBppJQY1A+y3E66XEq/VzaNDZ4PvAYi/4i2FTYan9Zg
sPnQMQ3wPJyjiM61Xzm2FYdSQmoCZknkC5r2lXMOdm9dAprlvhRldp5m4ID84DVW
w7l1mX0ahbVo1nk9jNCOtbAAq6zE4DSWaGk4C8jYNPtipgpo9dWKGmn1oQmEm3ap
7SAShbeew/8Ckd7jF4y8dScmphwP8PRgjWKTdFbD5VkAPS5gxXBv3V2NusOz28z7
rgU=
-----END CERTIFICATE-----
Generated at Sun Jul 20 20:12:21 2025 by rpki-client