Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a343430303a3a2f34302d3438203d3e20323133313336.roa
File: 326131343a366634343a343430303a3a2f34302d3438203d3e20323133313336.roa (raw, json)
Hash identifier: WStt1UvxtF8UDwU2ftNEcW2NSgZc0FdvONYs2iTuCLg=
Subject key identifier: 05:C9:36:85:FD:7C:E1:A2:CE:E8:F1:41:E4:53:C3:7D:A4:85:7F:99
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 03F2834F8AA4CFD2AE42100BF489BD3024CDC7D5
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a343430303a3a2f34302d3438203d3e20323133313336.roa
Signing time: Tue 06 Oct 2026 12:50:41 +0000
ROA not before: Tue 06 Oct 2026 12:45:41 +0000
ROA not after: Tue 05 Oct 2027 12:50:41 +0000
asID: 213136
IP address blocks: 2a14:6f44:4400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 00:26:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:f2:83:4f:8a:a4:cf:d2:ae:42:10:0b:f4:89:bd:30:24:cd:c7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Oct 6 12:45:41 2026 GMT
Not After : Oct 5 12:50:41 2027 GMT
Subject: CN=05C93685FD7CE1A2CEE8F141E453C37DA4857F99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0f:fa:ff:ab:2f:32:69:6a:89:af:ba:0d:12:
2f:45:a2:04:91:ac:10:d2:66:ff:9e:b1:6b:6f:0b:
28:88:c7:95:09:af:db:73:5d:82:ba:95:81:44:81:
73:c2:7a:28:73:4c:72:d1:74:ad:29:5e:0a:80:8d:
28:be:56:72:d5:48:63:68:bc:2f:50:6f:18:39:da:
9f:01:38:3e:2b:55:9e:99:6b:90:cb:7d:01:83:7f:
b7:40:a8:87:85:66:d2:73:64:34:1e:94:e2:cc:94:
b2:ba:a5:fb:43:82:08:60:13:24:70:8e:8e:89:6a:
dc:bc:61:14:43:a5:d6:51:6a:65:cd:cf:a1:49:42:
ee:44:5e:4d:95:b6:ac:58:80:0c:2f:14:3f:da:6b:
f7:7c:9b:7c:3b:d2:70:a7:e9:68:07:f1:49:31:fb:
f7:f1:6c:8e:83:c6:e2:82:5c:bd:0d:9f:24:c7:ca:
02:92:01:ce:fe:e6:a6:6e:a4:b8:34:a5:fd:22:60:
32:7a:92:39:de:2f:6b:3e:df:d7:32:ad:c3:ba:b9:
48:99:74:91:0e:87:86:b2:32:8b:be:c2:54:9b:71:
c8:2c:bc:24:c2:85:02:8d:9d:e4:ec:60:f5:fa:88:
8e:d8:b4:13:92:b1:3c:fa:81:0b:21:e1:a0:d0:61:
35:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C9:36:85:FD:7C:E1:A2:CE:E8:F1:41:E4:53:C3:7D:A4:85:7F:99
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a343430303a3a2f34302d3438203d3e20323133313336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f44:4400::/40
Signature Algorithm: sha256WithRSAEncryption
44:35:2f:ce:91:02:8a:47:49:7c:9c:5d:af:0a:54:95:67:74:
a1:72:b1:b1:45:38:1e:6c:98:98:f4:a2:12:13:ea:82:46:fa:
b5:eb:35:d9:79:b5:57:2b:bd:c9:5b:35:d9:2b:f0:83:d9:54:
50:1b:77:82:99:25:9d:72:3c:9c:5c:84:48:eb:63:ad:ec:a6:
d9:a1:6a:99:51:3f:b9:59:62:3b:a5:d0:2b:87:b0:b6:cd:8e:
81:4f:55:d5:54:e7:50:e8:86:da:2a:d9:fe:0e:89:56:4c:23:
44:38:63:9b:f7:8a:95:2f:c4:7d:af:fa:2e:11:e7:3b:59:ad:
ea:4a:5b:ea:fe:3c:1f:9e:fb:70:ec:e6:e6:89:2c:7f:5f:a8:
fe:6c:8d:49:bc:22:a0:dd:6a:a7:f3:1e:d8:21:9f:4c:bd:96:
82:69:56:15:d6:08:6b:22:91:11:e4:69:18:d0:da:aa:7f:22:
61:91:a9:a0:84:99:3e:68:18:b0:36:3d:c0:e2:0f:eb:56:c9:
3c:99:a0:21:31:f7:df:33:63:ae:1b:42:1a:ef:44:7c:11:e2:
8d:1e:73:a5:6a:16:13:58:4b:1c:d3:1a:11:96:74:df:b1:06:
42:b0:97:a0:30:28:27:e4:d5:d5:6f:84:ff:b0:6c:d9:c1:03:
08:bf:7e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:21:44 2026 by rpki-client