Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a323339303a3a2f34342d3438203d3e20323136313135.roa
File: 326131343a366634343a323339303a3a2f34342d3438203d3e20323136313135.roa (raw, json)
Hash identifier: NewyffY6+faINHSvUWluvQYlr3nUq0nRySw/BEIvNkI=
Subject key identifier: 8C:D7:9E:7E:AD:D0:20:4D:16:F3:5B:BF:86:EE:7A:F7:B4:99:A2:38
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 3C08789F8FDD2337F0D39FC7F496D91817083367
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a323339303a3a2f34342d3438203d3e20323136313135.roa
Signing time: Mon 14 Sep 2026 18:50:41 +0000
ROA not before: Mon 14 Sep 2026 18:45:41 +0000
ROA not after: Mon 13 Sep 2027 18:50:41 +0000
asID: 216115
IP address blocks: 2a14:6f44:2390::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 00:47:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:08:78:9f:8f:dd:23:37:f0:d3:9f:c7:f4:96:d9:18:17:08:33:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Sep 14 18:45:41 2026 GMT
Not After : Sep 13 18:50:41 2027 GMT
Subject: CN=8CD79E7EADD0204D16F35BBF86EE7AF7B499A238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bf:36:d4:3a:fc:70:38:f5:c1:ce:e9:39:f8:
77:dc:92:1b:07:ce:18:b5:bf:bd:7b:c3:08:d6:9e:
ee:31:ca:28:19:83:d3:6e:aa:c2:c1:54:e0:14:6c:
da:9c:e0:3f:44:c4:69:78:22:b6:90:eb:60:18:5b:
ca:8b:7d:34:64:be:09:fd:50:db:b4:09:31:bf:9c:
85:4e:61:36:8c:34:29:c3:03:a1:d2:81:7c:b6:ba:
aa:11:31:a1:7a:20:a6:9e:2f:3e:3b:af:8c:90:c8:
e7:2d:38:ae:41:80:3e:7a:88:3c:9c:5c:e3:1f:54:
e6:74:c7:98:76:3a:08:d4:9b:f3:06:8a:9d:e0:d7:
ec:2a:81:3e:b0:4b:fd:9e:7f:d8:f7:68:0f:ba:fd:
41:b4:90:1c:ce:d6:41:9f:15:22:bf:83:5a:59:4c:
0d:43:7d:a3:9a:d0:90:d8:ae:fb:f2:3b:9c:61:ce:
20:b5:32:ed:4e:7b:c6:e4:39:a8:c8:45:60:e4:18:
48:64:11:82:90:db:81:af:f6:75:63:97:49:4a:a6:
31:f3:b0:8a:97:9e:23:4a:0e:dd:ad:88:06:a4:5f:
1e:46:5b:ff:4e:0e:97:da:0f:38:ff:04:19:f0:20:
ea:f2:a8:f4:03:d1:7f:e4:c0:74:4e:5a:e9:87:71:
4f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D7:9E:7E:AD:D0:20:4D:16:F3:5B:BF:86:EE:7A:F7:B4:99:A2:38
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a323339303a3a2f34342d3438203d3e20323136313135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f44:2390::/44
Signature Algorithm: sha256WithRSAEncryption
5a:96:f4:53:9d:54:5a:f4:a3:22:a0:0e:9a:f3:09:68:81:eb:
2d:d4:10:20:06:1f:fc:e3:9d:5a:06:8c:4a:66:f6:fc:dc:9d:
d8:14:14:19:62:c0:51:fd:7d:47:75:00:00:48:04:e7:85:5c:
87:9c:37:3d:b5:76:7e:76:43:a1:3b:03:b2:45:69:e6:c3:31:
59:eb:b5:21:9d:bc:ca:9b:81:d8:cc:4e:e4:3f:45:2d:fa:ca:
d6:82:ba:31:27:8b:4e:6e:2b:af:98:d4:70:aa:9a:86:66:8e:
74:a4:dd:02:47:f4:f2:c1:f0:62:d7:1b:9c:f1:33:bd:9e:35:
85:fa:d8:ce:3e:ef:32:6d:f1:44:25:da:7c:8f:07:2d:f2:d0:
7a:f4:7e:13:85:6e:19:90:46:35:8f:ff:29:4a:32:81:63:a2:
7f:57:5a:27:73:e3:02:b9:49:b5:3a:f8:51:2a:43:af:9a:a6:
03:8d:3e:7b:97:9c:10:db:4a:3b:be:ea:16:07:2a:be:8e:26:
b0:48:7b:ef:5d:98:be:fd:7f:77:22:ca:d4:05:b4:38:f8:49:
84:5b:78:cb:17:21:b9:2b:77:f6:e3:9d:c0:0d:96:32:ac:84:
e9:b5:52:f6:4a:04:e1:81:a6:9b:31:d8:87:e5:c0:1f:2a:79:
a1:fd:86:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:33:56 2026 by rpki-client