Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a646561643a3a2f34382d3438203d3e203534363831.roa
File: 326131343a366634343a646561643a3a2f34382d3438203d3e203534363831.roa (raw, json)
Hash identifier: 8lyV9GJsDctzPuhhY06EcR5JClJ90gXieRZjQ1Q40JM=
Subject key identifier: D1:A7:CA:B7:43:78:98:8B:58:0F:5E:85:63:F6:E8:7D:EC:A7:1A:52
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 1780B211C3E93531B08A696C992FEFBF847F25CB
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a646561643a3a2f34382d3438203d3e203534363831.roa
Signing time: Sun 31 May 2026 11:50:40 +0000
ROA not before: Sun 31 May 2026 11:45:40 +0000
ROA not after: Sun 30 May 2027 11:50:40 +0000
asID: 54681
IP address blocks: 2a14:6f44:dead::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 15:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:80:b2:11:c3:e9:35:31:b0:8a:69:6c:99:2f:ef:bf:84:7f:25:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: May 31 11:45:40 2026 GMT
Not After : May 30 11:50:40 2027 GMT
Subject: CN=D1A7CAB74378988B580F5E8563F6E87DECA71A52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:37:f3:20:69:da:a2:a1:9b:ea:94:7e:5c:da:
06:10:86:d8:e5:1c:dd:87:26:ce:fe:a3:d7:c2:cf:
eb:52:26:0f:0d:df:e2:09:dc:44:4a:40:6e:15:34:
36:3b:69:90:d0:96:28:99:54:74:f5:47:bb:59:16:
f8:6f:2d:32:55:bd:89:2d:9c:d7:b6:09:67:4f:b5:
f1:76:5f:7f:d1:07:72:e1:ea:57:b4:0e:b1:bf:a2:
84:e1:80:5d:1d:f3:86:0a:8d:00:a0:da:93:a3:8b:
b4:3f:89:73:99:cb:f0:52:a7:65:f8:b5:3e:55:24:
6e:83:0d:4e:5d:d5:90:63:3c:b0:ca:4b:00:af:92:
56:e1:ba:b3:63:ac:8b:d4:90:07:da:ed:65:83:02:
37:66:b5:5f:8a:0c:17:5c:04:f7:91:93:df:28:3e:
f5:3d:48:24:f4:0b:16:65:e0:e2:2e:a9:c8:ca:1c:
80:ca:cb:c6:28:e1:49:a0:10:8a:0d:5f:3b:10:e8:
aa:a3:0d:c7:de:e3:a8:80:71:ad:64:37:3f:3e:da:
f0:db:ef:6c:c0:04:8c:b7:9e:b5:1a:37:6d:17:d8:
b3:31:2d:88:9d:93:4a:f7:9c:fb:6a:a7:05:30:ca:
a1:03:fb:0a:e9:07:5e:00:96:3c:1b:01:1b:f4:d0:
0d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A7:CA:B7:43:78:98:8B:58:0F:5E:85:63:F6:E8:7D:EC:A7:1A:52
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a646561643a3a2f34382d3438203d3e203534363831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f44:dead::/48
Signature Algorithm: sha256WithRSAEncryption
14:d1:60:1c:ee:f8:b5:50:b0:11:51:d3:4b:84:53:e6:db:d2:
09:1a:1c:77:96:c9:64:16:c5:2f:87:fc:01:2f:4b:3d:e8:5b:
b3:e2:ba:9f:ba:4a:d2:f9:c8:60:0f:10:4e:0d:3c:63:75:4b:
ae:e8:76:20:85:ca:bf:e5:66:89:0f:de:ff:be:d8:cd:3c:9f:
20:0c:71:ae:02:44:c0:85:92:d1:ac:66:7b:b3:d1:19:bf:b8:
11:8f:4a:ab:13:f0:91:a4:72:04:41:03:48:6d:44:19:ec:63:
19:7d:70:57:f4:59:a8:72:52:07:8f:1b:35:49:65:df:52:17:
bf:df:9b:36:f0:28:96:0e:1e:59:09:b1:23:c2:36:87:04:2f:
5b:9e:06:a2:63:b5:9b:d5:b6:a8:b3:cc:e8:22:a7:fb:6f:fc:
4a:5f:6b:7c:44:6b:93:00:f3:73:55:65:cc:2c:b8:c6:06:14:
9e:73:75:5a:c8:23:d9:84:e0:03:46:01:35:c3:42:99:10:6f:
6c:9d:95:54:24:eb:bb:a9:bb:12:bc:ff:4f:b3:cc:7c:e5:05:
cf:33:17:d6:59:16:1c:9e:4c:f6:38:34:ac:c2:b6:ed:1d:0d:
7c:b9:f9:04:77:5a:7a:c9:32:70:75:9c:0a:b0:83:8a:02:ec:
8a:03:32:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:58:19 2026 by rpki-client