Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a623030623a3a2f34382d3438203d3e20323134373537.roa
File: 326131343a366634353a623030623a3a2f34382d3438203d3e20323134373537.roa (raw, json)
Hash identifier: J9QsdPj5DQDhu5mtlU23kktl0EvwgihwetcbiHJN5aI=
Subject key identifier: BE:18:02:66:21:6D:01:0F:C2:C6:74:68:F3:3F:24:D2:50:E1:A2:82
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 207573B079D4BACB778EEE79DC31C93A935CAF7B
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a623030623a3a2f34382d3438203d3e20323134373537.roa
Signing time: Sun 10 Aug 2025 20:43:57 +0000
ROA not before: Sun 10 Aug 2025 20:38:57 +0000
ROA not after: Sun 09 Aug 2026 20:43:57 +0000
asID: 214757
IP address blocks: 2a14:6f45:b00b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 04:20:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:75:73:b0:79:d4:ba:cb:77:8e:ee:79:dc:31:c9:3a:93:5c:af:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Aug 10 20:38:57 2025 GMT
Not After : Aug 9 20:43:57 2026 GMT
Subject: CN=BE180266216D010FC2C67468F33F24D250E1A282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:29:46:f7:10:12:2d:42:45:92:be:71:0e:
14:78:13:e4:d1:30:59:70:c8:7c:d0:9b:94:6f:aa:
cd:8e:f1:7a:93:48:03:d8:5a:78:3e:5b:dc:96:57:
6e:7e:70:a7:64:4b:ea:e8:d8:a7:9c:91:6b:06:db:
a6:c9:c1:96:f3:46:02:0a:65:8b:59:1c:f1:29:60:
72:e8:9e:cc:b6:cc:90:7f:f3:f3:e6:95:2f:de:fb:
83:d6:92:64:a1:1f:bd:03:d3:1a:40:92:61:a7:b4:
a3:50:f3:c8:3c:68:94:1e:3b:64:9d:2b:fd:fc:85:
77:fd:06:c3:0b:02:50:fa:3c:ca:44:f0:16:56:7e:
a5:83:ac:12:7e:16:14:5e:70:55:f3:94:2f:f4:ef:
53:60:04:f2:e2:c5:51:dd:3d:1b:20:27:c3:1a:3a:
1c:e4:13:ce:2a:3a:26:4d:19:9c:15:8c:f4:22:0d:
33:df:3b:9f:63:08:15:bc:9b:bb:42:c2:27:e3:fd:
65:d0:de:4b:ce:fe:b5:57:99:58:4f:e6:ae:49:b7:
72:fe:85:55:8c:a9:23:aa:82:aa:e4:d2:e2:d6:c8:
c9:07:50:b2:b4:ba:77:e3:a7:4b:ab:ee:43:12:1c:
ce:c7:79:56:20:b7:57:3c:a4:5a:9a:20:5a:71:45:
ce:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:18:02:66:21:6D:01:0F:C2:C6:74:68:F3:3F:24:D2:50:E1:A2:82
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a623030623a3a2f34382d3438203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f45:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
2a:be:ee:aa:d8:ff:13:cc:f1:03:d5:b3:c2:13:09:86:cc:c1:
79:9f:4b:fd:5c:24:d8:6a:0d:20:c1:0c:5c:74:26:74:96:80:
a9:66:3f:5b:ba:fb:7b:69:c6:9e:50:4f:ad:98:92:b3:e9:6b:
df:0f:b2:18:5a:3e:b5:46:2d:ed:c9:6f:a8:7a:af:ee:12:60:
d9:39:16:1d:56:33:00:bb:ea:75:b4:7f:3b:a5:2e:b0:ee:00:
c8:64:bf:1e:c3:b6:50:7d:23:41:ae:c0:12:9f:ae:dd:8e:16:
fc:06:c1:83:0e:6b:93:83:9b:13:c0:30:c0:7b:c3:d6:c1:f9:
9a:9f:d2:5f:c2:dc:b5:7f:9a:15:9c:0a:6f:a5:3a:36:b3:a6:
b7:75:e6:a1:ba:69:63:01:6f:27:bb:ce:0a:81:c3:61:c7:2d:
6c:62:6d:8a:d4:2f:e2:e2:61:f7:a5:aa:17:25:42:e4:45:1a:
e8:b9:fc:13:21:4f:c4:56:e1:3e:d2:f1:ea:e1:3e:72:14:26:
68:84:c7:0e:69:1f:21:bf:aa:4f:98:0d:e8:60:62:f0:05:4d:
3f:4f:15:37:87:c6:0c:51:ab:e6:cf:78:c8:a8:cf:0f:31:dd:
c7:23:f4:25:cc:a7:ff:1d:46:96:d7:67:cf:d3:84:16:79:f5:
42:7e:0d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 20:12:47 2025 by rpki-client