Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a353336303a3a2f34342d3438203d3e20323136303338.roa
File: 326131343a366634343a353336303a3a2f34342d3438203d3e20323136303338.roa (raw, json)
Hash identifier: zW78HgeXKJcpXDGvUiGJTuZstEm7PMNmFUrh0W8stwk=
Subject key identifier: 92:BC:91:3A:1E:55:D5:7E:8D:22:EF:3C:43:D4:9E:54:17:83:71:90
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 556A27A6408C140684E82FACC32258269697A6D7
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a353336303a3a2f34342d3438203d3e20323136303338.roa
Signing time: Mon 22 Jun 2026 12:50:40 +0000
ROA not before: Mon 22 Jun 2026 12:45:40 +0000
ROA not after: Mon 21 Jun 2027 12:50:40 +0000
asID: 216038
IP address blocks: 2a14:6f44:5360::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Jun 2026 05:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:6a:27:a6:40:8c:14:06:84:e8:2f:ac:c3:22:58:26:96:97:a6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Jun 22 12:45:40 2026 GMT
Not After : Jun 21 12:50:40 2027 GMT
Subject: CN=92BC913A1E55D57E8D22EF3C43D49E5417837190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:28:1d:a6:e2:ba:f4:22:25:6b:bb:18:6b:1b:
1f:25:7b:0b:26:2d:bb:72:78:d0:b7:c7:be:e7:2d:
4c:56:d3:2e:1e:76:84:cd:a6:cb:df:0b:85:8f:91:
db:2a:d2:ad:4a:73:f3:65:ff:04:ba:e9:5f:d5:43:
ee:eb:ac:0f:8e:07:db:39:f0:4a:5c:ba:35:e3:c8:
a3:fd:eb:da:d7:89:95:f9:a9:3a:98:cc:91:e8:ae:
f1:2c:5e:54:93:4b:e6:97:ce:9d:5a:2b:b0:4e:d0:
49:ed:54:57:a5:e6:ca:ae:93:8f:d0:9b:63:23:b5:
72:83:b8:ae:bf:bb:05:4f:a9:18:f8:f1:57:62:de:
af:f9:4a:a8:36:c8:be:89:d0:c7:59:a7:f9:73:2a:
ee:4b:71:4f:15:73:f0:9b:d9:51:58:22:fe:92:d1:
81:93:66:04:52:f4:d7:56:92:22:97:26:d7:3d:1d:
4b:43:70:fd:b6:43:3c:1a:9b:1b:ad:fb:00:8f:cc:
0d:a4:64:48:40:5d:a0:61:d2:0b:ed:89:2a:7e:dd:
bc:9b:58:26:3c:8b:33:7d:74:f8:ba:82:96:67:62:
c3:4f:15:df:a7:43:11:27:bc:ed:cb:e7:5a:94:26:
a8:af:d6:bf:bf:d2:18:aa:b2:f3:3c:cb:19:7f:c2:
1d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BC:91:3A:1E:55:D5:7E:8D:22:EF:3C:43:D4:9E:54:17:83:71:90
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a353336303a3a2f34342d3438203d3e20323136303338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f44:5360::/44
Signature Algorithm: sha256WithRSAEncryption
85:f1:78:85:fb:ce:c9:a9:7a:7f:68:c1:b5:c5:61:22:41:84:
cf:cc:a1:dc:42:cb:6e:8e:ba:86:67:a3:5f:93:c7:05:f4:09:
e0:0b:50:f6:6d:e6:e9:cd:e7:fe:8c:5c:7d:ad:71:f5:59:f0:
4e:df:92:5b:55:e9:d2:c8:bd:71:28:12:4d:62:58:ec:70:9d:
91:85:d1:c4:40:e3:04:4d:5e:9c:2b:4e:e7:b6:d0:f7:ed:fa:
c8:44:96:80:bb:89:9b:82:a8:12:d8:b0:8c:ec:c6:a9:eb:71:
a9:31:4c:b2:16:01:6b:bc:7d:92:21:a2:5d:5a:3c:1c:f0:e4:
62:57:ed:1d:4a:52:18:b6:71:e3:c5:43:f3:21:b0:c3:7d:73:
59:89:9a:70:17:d0:92:55:28:83:cd:34:28:9a:99:d0:ce:d9:
ef:53:68:2b:aa:e1:14:03:1b:68:f8:48:c3:32:54:89:b4:93:
94:d8:8c:4f:36:ba:56:1c:6c:6c:e6:49:dd:85:74:3c:29:db:
16:ad:6b:60:bf:ae:99:67:dd:56:0c:fd:be:32:d4:54:b9:0b:
73:43:bc:45:1c:02:30:3e:e6:09:37:7e:1d:9f:23:ab:07:d4:
59:63:5e:df:d2:4d:98:2f:06:c9:de:19:6b:ed:f6:3a:d6:dc:
e2:d8:92:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 10:35:52 2026 by rpki-client