Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a31303a3a2f34342d3438203d3e20323037313138.roa
File: 326131343a366634343a31303a3a2f34342d3438203d3e20323037313138.roa (raw, json)
Hash identifier: yZmoIGgCQZQtzFZ9xz0oUp9fyP+/y76ZpGN0VwuV0LA=
Subject key identifier: 2A:9C:55:1D:37:C5:42:81:A3:FC:0E:E8:31:AE:5B:8D:C4:39:CD:1E
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 706AC4346F0CC392DCC9A7646042B0528A8CD3A7
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a31303a3a2f34342d3438203d3e20323037313138.roa
Signing time: Wed 24 Jun 2026 11:52:34 +0000
ROA not before: Wed 24 Jun 2026 11:47:34 +0000
ROA not after: Wed 23 Jun 2027 11:52:34 +0000
asID: 207118
IP address blocks: 2a14:6f44:10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:6a:c4:34:6f:0c:c3:92:dc:c9:a7:64:60:42:b0:52:8a:8c:d3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Jun 24 11:47:34 2026 GMT
Not After : Jun 23 11:52:34 2027 GMT
Subject: CN=2A9C551D37C54281A3FC0EE831AE5B8DC439CD1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:77:cd:d2:a1:6d:e3:72:8f:2a:60:d2:ff:
47:1c:b9:24:ba:0e:1f:87:04:a9:0f:0a:b8:8f:55:
76:fa:59:1d:2a:01:b7:a2:09:4c:8a:7d:9e:8d:df:
06:72:63:44:26:c0:d1:b4:92:1b:d3:4c:cb:03:e7:
6d:67:04:57:f8:a3:e0:2e:ad:f8:c3:af:95:3a:00:
ef:54:fb:e6:fc:33:0f:36:69:98:15:e5:71:bc:a7:
bf:79:e7:c4:13:3e:d9:b4:a8:3e:44:37:c0:33:76:
a7:c9:2d:72:ad:f7:8a:86:0a:33:56:20:61:e4:12:
70:8b:d9:0f:fb:0e:9a:14:c7:e0:5d:5e:cf:00:6b:
b0:b7:ba:33:72:14:d4:00:2a:d0:78:b1:b8:9b:a4:
f4:58:52:2a:77:a9:56:18:08:fe:53:6c:1b:1a:98:
49:38:db:6b:10:79:ed:68:83:81:ef:90:1c:d4:9f:
bc:ad:01:d3:9a:e2:2f:06:61:cf:84:7d:3b:83:ac:
0b:d0:9a:e9:7b:85:8f:ba:d0:b7:d8:f9:9b:3d:13:
58:02:fe:da:1e:07:65:cb:3b:c3:63:1a:ee:0f:61:
3c:8b:77:aa:1c:bd:fc:61:a1:7c:03:45:7b:93:83:
9c:bb:a5:94:53:0f:fc:65:cc:41:c7:53:3e:4b:44:
c4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9C:55:1D:37:C5:42:81:A3:FC:0E:E8:31:AE:5B:8D:C4:39:CD:1E
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a31303a3a2f34342d3438203d3e20323037313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f44:10::/44
Signature Algorithm: sha256WithRSAEncryption
30:07:d7:4e:4a:40:16:0b:84:84:6b:cd:69:17:e4:3f:da:ac:
5e:69:44:c3:f9:ef:c3:47:60:3e:a6:05:65:68:54:17:c2:cc:
ef:ba:5d:d6:eb:8e:be:e8:04:01:b5:83:8c:83:d7:2b:c3:4c:
b9:11:ae:24:bd:a9:4c:7b:c6:a7:04:1c:a4:95:2a:49:a8:a0:
2f:dc:b6:fd:16:b6:4b:e0:3c:e4:5f:a7:6c:7c:a2:df:35:a6:
ae:35:ea:10:cf:ad:4b:5e:04:fd:6d:f2:80:7e:07:37:93:fd:
5d:e5:39:b3:c0:0f:57:cb:4b:92:2b:f4:c6:c2:91:17:8c:f3:
a9:57:b3:84:1f:57:b0:49:70:44:e8:5c:3a:45:3c:71:f4:54:
0d:c5:26:9d:7a:21:ab:80:39:16:ad:12:96:1c:37:7e:f7:e1:
90:17:a3:a2:bc:fd:e2:2a:01:26:ff:a7:88:27:a5:e9:cd:14:
f6:0d:92:fe:a4:fb:4a:a0:f4:02:bc:bf:11:4d:92:dd:b9:bf:
dd:88:28:bb:4d:f7:fb:e9:02:b6:74:e0:9e:53:2f:9f:f1:dd:
a0:ac:96:5d:f1:42:39:ec:ba:f9:10:88:bd:47:00:3b:a4:58:
e2:11:84:56:ce:96:2b:09:e5:82:d1:23:01:40:0b:0d:a8:43:
95:ef:9e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 09:36:01 2026 by rpki-client