Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a65663a3a2f34382d3438203d3e2032373737.roa
File: 326131343a366634343a65663a3a2f34382d3438203d3e2032373737.roa (raw, json)
Hash identifier: SSFt5QXt1dOghJynT3oNChP4s/K9bUs9G1NQrJahr0o=
Subject key identifier: 39:F9:DE:79:C8:43:96:12:4E:50:7E:B2:DB:FE:C7:13:1B:29:B6:81
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 32DAD6B37C346BC201CABEB1A9036295EC09F128
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a65663a3a2f34382d3438203d3e2032373737.roa
Signing time: Fri 14 Aug 2026 12:18:10 +0000
ROA not before: Fri 14 Aug 2026 12:13:10 +0000
ROA not after: Fri 13 Aug 2027 12:18:10 +0000
asID: 2777
IP address blocks: 2a14:6f44:ef::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 09:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:da:d6:b3:7c:34:6b:c2:01:ca:be:b1:a9:03:62:95:ec:09:f1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Aug 14 12:13:10 2026 GMT
Not After : Aug 13 12:18:10 2027 GMT
Subject: CN=39F9DE79C84396124E507EB2DBFEC7131B29B681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1a:8a:7c:ec:d9:01:da:10:a2:0d:e4:bd:01:
e3:dd:0d:25:bb:85:17:30:b7:50:26:b5:22:6d:f8:
29:0b:7a:5e:b8:17:fa:08:d2:38:f9:47:70:39:1d:
03:9d:c2:96:67:7e:8e:26:90:66:94:2b:cf:5d:55:
84:8f:04:01:62:11:31:49:6b:10:02:db:77:95:8a:
4f:45:e2:fc:47:f0:30:01:eb:04:ef:2e:d3:75:c4:
b9:d9:b2:a2:8a:4d:a8:ec:35:7d:69:ff:77:8f:3e:
08:d9:d6:e5:3d:37:87:b4:2b:fe:49:c3:c5:5a:5d:
2c:45:b6:7e:9f:d1:5e:9e:fd:ed:2e:6a:0f:9d:30:
86:f4:b9:cc:aa:1e:e4:c8:4f:55:5e:5e:0f:fc:52:
8f:c4:22:ce:44:1a:ed:8b:d9:22:7b:a0:0c:66:f9:
9d:3c:40:fc:4e:d8:55:95:f5:91:39:30:b5:23:49:
8d:1b:1f:5a:31:89:cd:6b:c4:b9:a4:5e:28:9c:a0:
d9:3e:94:78:09:5a:8e:a3:9c:58:a8:16:68:fd:9c:
2a:e9:86:7d:91:57:37:2b:d6:2f:86:0e:c6:eb:7a:
75:21:d4:6d:bb:be:25:ac:4a:cb:c1:86:4b:42:5d:
56:f5:7e:68:ba:b6:7a:19:e2:54:8d:40:6d:37:7d:
f7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F9:DE:79:C8:43:96:12:4E:50:7E:B2:DB:FE:C7:13:1B:29:B6:81
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a65663a3a2f34382d3438203d3e2032373737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f44:ef::/48
Signature Algorithm: sha256WithRSAEncryption
21:62:bc:59:06:a3:6e:59:fb:ed:03:5d:74:41:7f:f7:e2:cb:
fc:38:a6:91:20:55:02:55:69:88:0f:5a:2e:73:11:a1:f2:f2:
3a:3d:5f:b9:85:4c:0a:e1:60:a4:b4:2e:09:dd:96:34:09:ba:
f9:87:4b:08:81:1f:44:a1:3d:4c:4c:fe:54:46:d5:f3:f6:73:
fe:39:cb:6c:17:ef:01:dc:74:aa:c1:7b:00:f0:b3:0b:5f:1d:
22:72:4c:c4:05:70:f4:75:ad:92:d1:1f:b0:84:ab:7a:9d:40:
8a:5f:96:04:25:f3:15:ca:7b:99:fb:4d:0d:d2:68:de:d9:82:
76:67:a6:bd:18:da:1f:64:f9:bc:a6:b7:8d:33:10:4e:65:72:
21:dd:be:81:bf:2f:37:33:ae:e9:75:c1:9c:6b:06:43:c4:3d:
a1:f6:cc:b2:d4:26:42:4f:7d:49:15:52:0c:94:bc:b8:43:db:
a2:2e:35:8d:ed:58:62:b4:20:91:34:e2:cd:bd:90:59:be:1f:
2e:10:94:bb:17:f8:02:2d:b5:6b:9b:bd:91:25:71:68:05:14:
8c:38:f6:06:49:8d:d8:fe:c6:16:61:d3:14:2e:02:11:19:dc:
80:0e:0a:b0:cf:b6:bc:cb:a2:c1:67:66:fe:f3:c1:04:4b:8e:
39:69:75:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 13:53:44 2026 by rpki-client