Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a353630383a3a2f34382d3438203d3e20323030323432.roa
File: 326131343a366634343a353630383a3a2f34382d3438203d3e20323030323432.roa (raw, json)
Hash identifier: tIzxcCSG/V5QyAqn4lWVGbnRYKGordkU7LLlPvgkHMc=
Subject key identifier: 64:12:DD:07:1B:25:88:29:B5:2C:7C:73:E9:41:AF:23:A4:45:E6:52
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 1419BC0418AD4690A1006B5900ABCF57A44DDE8C
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a353630383a3a2f34382d3438203d3e20323030323432.roa
Signing time: Fri 31 Oct 2025 15:36:51 +0000
ROA not before: Fri 31 Oct 2025 15:31:51 +0000
ROA not after: Fri 30 Oct 2026 15:36:51 +0000
asID: 200242
IP address blocks: 2a14:6f44:5608::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:52:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:19:bc:04:18:ad:46:90:a1:00:6b:59:00:ab:cf:57:a4:4d:de:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Oct 31 15:31:51 2025 GMT
Not After : Oct 30 15:36:51 2026 GMT
Subject: CN=6412DD071B258829B52C7C73E941AF23A445E652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e0:e6:2d:56:2d:fc:5e:08:c6:76:a0:70:2b:
46:2f:1f:3a:d7:88:d9:21:f8:6f:1b:ac:59:9a:f0:
58:eb:6a:59:58:b5:08:16:cb:5f:f6:56:6c:55:dc:
66:23:dc:e3:5d:f3:64:4b:08:ee:31:56:62:04:29:
3e:8b:bb:51:b1:5b:98:e9:5a:fd:4b:08:75:21:36:
33:44:94:c2:f2:82:54:7c:72:2f:19:09:15:36:d8:
d6:78:bf:07:e7:26:dc:20:98:37:df:96:78:6d:bc:
11:16:f7:5a:5d:5b:ed:f1:ab:7a:11:a2:00:f7:b6:
05:34:87:6d:6a:6a:7d:cb:31:6b:cd:77:2f:fb:f4:
a9:c4:50:0c:de:d4:f7:98:68:be:17:e9:03:d8:ca:
d6:4e:1d:eb:c4:d6:06:16:f1:a6:69:08:22:7f:19:
81:8b:16:3a:0b:6b:4e:52:95:ba:b7:f6:0d:a9:f4:
a3:b6:d8:5a:0f:82:0c:b9:a2:e6:d4:80:bd:df:c4:
f7:19:5f:32:3e:c4:e1:82:ac:61:06:84:3f:0d:fb:
50:f9:44:8f:e4:99:ef:6a:d8:d8:3e:4f:a0:75:58:
5e:ce:63:b4:8e:18:a8:3d:e3:c0:b2:22:81:7d:74:
89:b5:40:cb:40:64:28:90:9a:a3:92:78:0b:ae:24:
3a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:12:DD:07:1B:25:88:29:B5:2C:7C:73:E9:41:AF:23:A4:45:E6:52
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a353630383a3a2f34382d3438203d3e20323030323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f44:5608::/48
Signature Algorithm: sha256WithRSAEncryption
07:3c:f1:cb:8f:3b:38:85:97:f4:fb:d1:69:35:69:74:06:20:
14:17:d9:dd:db:6f:c7:3e:8b:e8:47:0b:a1:12:36:e3:8c:af:
62:62:6a:b6:eb:4f:22:38:2c:6f:a4:f0:6a:3f:16:f0:47:f1:
33:5f:48:e5:4f:73:c8:af:88:fb:5c:c8:e0:d8:96:87:44:e7:
30:55:48:5d:65:d8:bb:45:06:a8:50:88:f2:05:71:67:a5:50:
be:4b:25:63:98:4a:b1:2c:07:fa:cd:f3:c5:06:81:3d:dd:e9:
6c:6c:5f:a2:8d:cc:29:02:31:7d:d9:6a:0f:7a:df:89:b5:c8:
1b:e5:d2:c2:ea:6b:d1:1d:9a:1b:bf:8a:9b:ff:cf:c1:b7:3f:
4e:b3:dc:96:ea:b5:94:35:65:ea:57:db:a8:0c:90:e2:0c:ff:
73:11:11:47:1f:3f:a8:2b:e8:0c:5c:b6:95:02:cd:63:8e:93:
a2:11:7a:e8:1b:a6:04:cc:dd:03:f5:89:44:aa:ad:73:b8:a6:
fd:4a:25:49:f9:d2:8a:92:c1:6f:51:d4:0a:77:36:74:44:a9:
c0:1e:e7:f9:19:03:cc:bd:73:e2:8f:87:ae:08:e7:9d:31:0b:
83:2f:81:78:ac:4e:c4:dd:92:d5:33:e6:8b:82:ab:41:d9:7a:
07:fc:8a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:05:03 2025 by rpki-client