Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a623030623a3a2f34382d3438203d3e20323130363637.roa
File: 326131343a366634343a623030623a3a2f34382d3438203d3e20323130363637.roa (raw, json)
Hash identifier: AzNZuQSDNxDK1/rRCvh3c7V/RaCmrUuPfTYithuZNhM=
Subject key identifier: 83:00:1C:01:D6:BF:67:CB:EB:AB:20:16:45:95:D8:0A:EC:8B:AE:AA
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 2CAAE01BE3B251A3F21D2E9A44D51FA1CD544D1C
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a623030623a3a2f34382d3438203d3e20323130363637.roa
Signing time: Sun 31 May 2026 11:50:40 +0000
ROA not before: Sun 31 May 2026 11:45:40 +0000
ROA not after: Sun 30 May 2027 11:50:40 +0000
asID: 210667
IP address blocks: 2a14:6f44:b00b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:aa:e0:1b:e3:b2:51:a3:f2:1d:2e:9a:44:d5:1f:a1:cd:54:4d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: May 31 11:45:40 2026 GMT
Not After : May 30 11:50:40 2027 GMT
Subject: CN=83001C01D6BF67CBEBAB20164595D80AEC8BAEAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:13:d8:fe:52:c2:5f:a1:ad:ab:88:49:d3:ad:
86:aa:51:aa:90:d2:3c:53:36:0e:ad:1a:c7:9a:36:
90:8f:7e:66:71:c1:96:99:c8:3e:73:b6:c0:fb:d0:
c2:8c:3b:a7:19:76:f5:5e:d6:78:d7:f9:15:bf:54:
47:6b:65:b4:7d:47:ad:87:6e:b8:13:62:78:02:e3:
b9:f6:a2:91:be:ee:d3:6b:f5:08:99:c3:9a:f9:8f:
c5:93:62:3e:94:e8:f0:3c:74:d7:77:0d:01:f5:6a:
09:5d:f8:9d:d7:65:7a:7e:d7:49:84:fa:b4:a2:f1:
fd:11:32:7c:a3:6f:5a:6d:99:06:97:18:9e:d5:bb:
d9:bd:9e:80:81:cd:fa:0e:1e:3c:31:da:f8:f3:83:
ae:e4:4c:60:6f:c7:47:aa:07:d4:9a:17:21:58:a8:
32:cf:6f:04:53:aa:f9:5e:eb:a8:e3:43:be:cc:30:
9f:e8:28:e7:1e:3a:c9:16:70:ac:3e:c8:49:31:e9:
c8:83:66:6d:a8:7f:7e:73:61:ee:10:6d:42:e8:96:
b9:89:da:7d:55:71:38:77:45:3c:37:0c:89:50:27:
2e:46:78:e5:d3:d5:9f:4e:67:6e:e9:1b:2c:43:cc:
26:d3:e5:35:00:fc:e9:fb:b0:78:6d:53:ec:4a:b5:
1e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:00:1C:01:D6:BF:67:CB:EB:AB:20:16:45:95:D8:0A:EC:8B:AE:AA
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a623030623a3a2f34382d3438203d3e20323130363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f44:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
44:0e:99:74:5b:9a:95:f0:62:40:8a:ca:be:02:dd:85:ea:f4:
7b:02:db:f3:8c:1f:fd:c7:28:9d:ca:f5:d8:76:88:e1:60:f5:
38:1f:ec:78:29:a8:47:1f:52:be:50:18:b4:dc:47:6f:65:e9:
25:c9:56:41:ed:d5:fc:f7:d2:81:92:7b:64:57:21:d0:d9:6d:
b5:eb:cd:1e:b1:be:83:ef:dd:20:4b:7a:43:0b:c8:f8:ec:a2:
2b:2c:89:d9:ab:e1:bd:a0:32:ca:6c:a8:46:bf:ed:21:68:63:
31:0e:c2:2b:db:10:a7:eb:f3:be:d9:cf:37:3b:b9:e1:da:76:
29:dc:ab:07:8b:49:fc:94:42:85:8a:e1:01:a4:d8:30:f5:0b:
22:2b:11:6e:18:a9:0a:f1:00:8f:73:5f:c8:34:a9:2c:84:46:
c8:c5:cf:89:59:97:1f:4d:05:e1:fe:d4:c2:be:6b:8a:1f:6b:
c6:f0:6a:48:d1:aa:61:a4:d8:22:7b:59:84:13:61:90:31:2a:
28:5e:65:3e:d3:c2:44:16:1c:7b:bf:9e:74:ac:ac:3f:a9:ad:
f5:10:86:05:7f:b7:cf:fb:fe:79:fb:2c:44:20:bd:ad:44:db:
75:8d:9f:98:03:63:af:19:21:ea:b8:12:77:8e:7f:2b:18:62:
4c:98:96:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:19:57 2026 by rpki-client