Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a3a2f33362d3336203d3e203539393230.roa
File: 326131343a366634353a3a2f33362d3336203d3e203539393230.roa (raw, json)
Hash identifier: uNdAxaUAv5goxCtsQFvEDYlacZW0wIoB+wiEglmDQwk=
Subject key identifier: E9:B2:24:31:38:C7:E7:CC:B7:65:0C:1A:B7:2A:DF:7C:AD:9A:8F:54
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 38A2176E4D5444D707F1BAE047CE6F9E372F24A0
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a3a2f33362d3336203d3e203539393230.roa
Signing time: Wed 19 Aug 2026 16:29:41 +0000
ROA not before: Wed 19 Aug 2026 16:24:41 +0000
ROA not after: Wed 18 Aug 2027 16:29:41 +0000
asID: 59920
IP address blocks: 2a14:6f45::/36 maxlen: 36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:a2:17:6e:4d:54:44:d7:07:f1:ba:e0:47:ce:6f:9e:37:2f:24:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Aug 19 16:24:41 2026 GMT
Not After : Aug 18 16:29:41 2027 GMT
Subject: CN=E9B2243138C7E7CCB7650C1AB72ADF7CAD9A8F54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:04:c8:bd:f4:69:80:5b:9c:d8:52:e1:2a:93:
71:49:65:dd:fe:50:6b:b9:4b:d4:ab:42:38:aa:58:
f4:8b:d8:e5:d1:f7:b6:a0:84:6b:44:b4:4d:b4:dd:
6a:dc:7c:32:47:40:fc:33:e6:33:2a:22:aa:20:69:
ea:e6:e5:c7:9c:a2:a9:76:6b:00:9d:31:64:2f:43:
21:f5:72:8b:85:dc:bc:32:c7:18:37:47:78:55:a8:
07:25:8d:83:48:0e:cd:f4:35:6e:1a:0e:72:41:7f:
a7:21:5c:c2:f0:77:42:57:4f:70:fe:ae:d4:d4:ab:
02:1e:50:7c:fb:de:c6:85:ba:98:f2:55:12:ce:32:
d6:36:02:84:9f:01:9e:3f:65:a7:4d:ab:8b:1b:41:
91:3c:ba:f0:ad:fc:54:78:65:66:d8:dd:2f:c5:75:
29:3f:47:8c:1a:a4:5d:1e:77:a5:dc:86:8d:3d:e5:
f7:68:f5:36:36:ae:9f:fe:62:ba:c7:ab:00:24:7c:
3d:db:5a:20:00:2c:b7:15:6c:0a:1b:ba:4e:92:d7:
6e:2e:55:65:48:a3:7c:80:48:f7:ca:b6:68:36:76:
ce:d4:20:bc:33:af:ef:a6:71:b0:98:7b:19:64:09:
b0:66:44:f1:c5:61:16:6e:37:64:d8:9d:27:a5:d4:
fd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B2:24:31:38:C7:E7:CC:B7:65:0C:1A:B7:2A:DF:7C:AD:9A:8F:54
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a3a2f33362d3336203d3e203539393230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f45::/36
Signature Algorithm: sha256WithRSAEncryption
3b:06:cc:94:7d:58:95:fa:07:39:66:f6:93:d5:93:aa:78:da:
c6:bb:4c:8e:9b:16:13:64:dc:db:86:73:0a:20:fe:b7:d0:64:
20:0a:7a:c1:86:c5:3a:78:a4:c6:c2:1a:3d:61:91:3d:6f:67:
4d:95:9d:90:1e:ec:76:f6:52:62:72:05:ef:1d:b1:5b:59:58:
14:98:c3:06:fe:96:03:c8:28:a5:e8:97:15:bd:05:48:45:45:
29:da:76:17:d7:07:81:7d:00:1d:f1:38:3a:55:bf:63:92:6a:
18:11:e4:15:87:b0:51:0a:22:14:49:77:c7:30:f4:85:b0:0e:
f7:e2:c6:3e:b1:7d:a9:bc:e4:b2:f7:8e:14:d7:eb:03:f4:c6:
92:a6:de:fd:77:cf:cc:f1:5e:50:7a:cf:1c:dd:3e:2c:70:7c:
2e:a5:de:26:4e:fd:c3:4c:b0:b1:46:db:d5:e8:a3:f9:a1:3b:
b0:cc:42:d5:db:d2:ba:b7:02:57:ec:3e:b6:8e:16:ca:48:ac:
a8:fc:67:50:41:36:dd:5a:68:8c:f2:b5:27:7e:8d:79:f6:cc:
38:cb:f8:0c:78:c4:eb:7d:39:d2:e4:82:57:4c:23:d0:43:ea:
0e:92:9d:c3:ea:d4:78:17:1e:89:e8:e8:76:8c:37:d8:60:3a:
02:49:da:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:21:29 2026 by rpki-client