Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a623030623a3a2f34382d3438203d3e20313939353832.roa
File: 326131343a366634343a623030623a3a2f34382d3438203d3e20313939353832.roa (raw, json)
Hash identifier: qqmIRQ1+zFE246omwd0NWtUUHG4XG/Hp+LsyXBBl0Ec=
Subject key identifier: 5E:9B:1E:E4:D3:8D:5D:EC:1E:72:B9:BA:79:5E:31:69:5C:9F:69:8B
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 282D6C306C619F8EFF5AE45DC09D5731F67071C9
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a623030623a3a2f34382d3438203d3e20313939353832.roa
Signing time: Sun 31 May 2026 11:50:40 +0000
ROA not before: Sun 31 May 2026 11:45:40 +0000
ROA not after: Sun 30 May 2027 11:50:40 +0000
asID: 199582
IP address blocks: 2a14:6f44:b00b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:2d:6c:30:6c:61:9f:8e:ff:5a:e4:5d:c0:9d:57:31:f6:70:71:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: May 31 11:45:40 2026 GMT
Not After : May 30 11:50:40 2027 GMT
Subject: CN=5E9B1EE4D38D5DEC1E72B9BA795E31695C9F698B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:74:47:c8:be:54:d2:ba:4e:63:9d:52:c1:49:
c7:99:df:f8:ce:f6:9e:4c:b8:b8:d1:b7:3d:d6:f1:
8d:d1:e5:34:45:28:ba:df:65:a8:4f:c5:6d:d9:04:
1e:e1:54:df:da:f0:9c:fc:70:a6:bc:dd:f4:fd:4e:
5b:4c:0b:5d:66:de:c6:17:d2:39:6c:55:ec:81:1e:
58:83:03:13:a3:2a:73:85:f4:06:b8:85:f0:0c:41:
14:50:7c:58:f0:24:87:96:91:d5:2f:20:64:05:8b:
a1:b9:19:3c:b0:12:ec:86:eb:f0:d9:da:0b:ed:34:
87:aa:88:c3:e5:26:38:22:03:58:de:67:4a:11:2f:
bd:fa:d5:96:b9:ae:a4:b1:1b:70:ab:3f:12:93:ec:
2f:1d:01:65:fd:79:df:91:b5:94:f2:31:3a:34:88:
29:c0:ae:22:96:80:4d:15:93:74:e0:23:4d:e7:c9:
e0:11:f6:ec:d8:cf:8e:d2:0f:6b:ee:5d:a2:10:f8:
83:d8:d8:9c:81:f2:dd:38:02:dc:48:b6:7d:4f:4e:
c3:0e:0e:0a:ab:24:46:e5:82:b6:a2:60:4e:b7:d9:
14:0b:00:fb:31:01:73:a8:23:a5:39:ef:88:93:97:
2c:ca:cc:84:ba:d1:29:45:ad:f4:b1:e7:ad:d3:40:
29:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9B:1E:E4:D3:8D:5D:EC:1E:72:B9:BA:79:5E:31:69:5C:9F:69:8B
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a623030623a3a2f34382d3438203d3e20313939353832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f44:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
85:d5:69:e2:96:ce:29:10:aa:0e:1c:8c:ce:02:60:c3:cb:7a:
78:c7:7f:c1:f1:eb:19:3b:7c:2b:48:3c:87:02:cd:af:58:99:
2a:91:7e:c0:c0:12:4e:ee:9f:3e:9a:cc:e5:85:10:e9:54:38:
f0:82:db:4c:d7:5c:47:85:db:f8:76:99:1c:58:2e:60:5d:b9:
d2:7c:46:71:06:17:70:9c:6a:7b:87:8a:ae:65:3b:6e:bf:7a:
b0:37:10:61:c1:bd:98:01:36:81:3b:cc:cb:f5:f4:2f:e0:e4:
c9:77:40:8a:1a:79:18:8e:f2:1f:2a:0b:d3:58:e8:89:97:fa:
30:f0:e9:fc:b9:30:9a:13:8e:7e:c7:84:ca:6f:73:11:e7:ef:
f4:71:af:70:48:4b:d3:5f:00:ca:32:64:2c:e9:31:f2:38:4f:
ee:41:56:da:60:d6:87:05:eb:d9:cb:e3:97:70:20:4a:55:a4:
2e:98:b1:66:ba:99:64:75:3a:ac:c1:41:88:25:ec:99:c8:96:
4d:5e:63:76:14:25:08:8e:71:b7:9e:14:34:c5:1e:03:da:02:
8a:fa:17:ac:15:37:4b:8b:08:9c:12:07:e1:f5:43:a9:31:26:
5a:a9:95:10:cb:7c:29:12:0e:6e:08:20:89:56:20:91:07:9d:
2f:f5:36:1e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUKC1sMGxhn47/WuRdwJ1XMfZwcckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2VlZWJiOTQ2YThkMjFkNDA4M2M5M2RjMDljZWU1NTdi
YjJhYzMyZTAeFw0yNjA1MzExMTQ1NDBaFw0yNzA1MzAxMTUwNDBaMDMxMTAvBgNV
BAMTKDVFOUIxRUU0RDM4RDVERUMxRTcyQjlCQTc5NUUzMTY5NUM5RjY5OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCdEfIvlTSuk5jnVLBSceZ3/jO
9p5MuLjRtz3W8Y3R5TRFKLrfZahPxW3ZBB7hVN/a8Jz8cKa83fT9TltMC11m3sYX
0jlsVeyBHliDAxOjKnOF9Aa4hfAMQRRQfFjwJIeWkdUvIGQFi6G5GTywEuyG6/DZ
2gvtNIeqiMPlJjgiA1jeZ0oRL7361Za5rqSxG3CrPxKT7C8dAWX9ed+RtZTyMTo0
iCnAriKWgE0Vk3TgI03nyeAR9uzYz47SD2vuXaIQ+IPY2JyB8t04AtxItn1PTsMO
DgqrJEblgraiYE632RQLAPsxAXOoI6U574iTlyzKzIS60SlFrfSx563TQCn5AgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUXpse5NONXewecrm6eV4xaVyfaYswHwYDVR0j
BBgwFoAUPu67lGqNIdQIPJPcCc7lV7sqwy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5
YjNkLzQvM0VFRUJCOTQ2QThEMjFENDA4M0M5M0RDMDlDRUU1NTdCQjJBQzMyRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1B1NjdsR3FOSWRRSVBKUGNDYzdsVjdz
cXd5NC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmZmN2E5ODkt
ZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5YjNkLzQvMzI2MTMxMzQzYTM2NjYzNDM0
M2E2MjMwMzA2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzkzOTM1MzgzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoUb0SwCzANBgkqhkiG9w0BAQsFAAOCAQEAhdVp4pbOKRCqDhyM
zgJgw8t6eMd/wfHrGTt8K0g8hwLNr1iZKpF+wMASTu6fPprM5YUQ6VQ48ILbTNdc
R4Xb+HaZHFguYF250nxGcQYXcJxqe4eKrmU7br96sDcQYcG9mAE2gTvMy/X0L+Dk
yXdAihp5GI7yHyoL01joiZf6MPDp/LkwmhOOfseEym9zEefv9HGvcEhL018AyjJk
LOkx8jhP7kFW2mDWhwXr2cvjl3AgSlWkLpixZrqZZHU6rMFBiCXsmciWTV5jdhQl
CI5xt54UNMUeA9oCivoXrBU3S4sInBIH4fVDqTEmWqmVEMt8KRIObgggiVYgkQed
L/U2Hg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:54:50 2026 by rpki-client