Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a633730313a3a2f34382d3438203d3e20313938333432.roa
File: 326131343a366634343a633730313a3a2f34382d3438203d3e20313938333432.roa (raw, json)
Hash identifier: oJ0YHNx/kx8M5LQf5mfXV2kcbEzJpNN56rIoMP76WMA=
Subject key identifier: F0:36:D7:C0:E2:35:6A:BA:14:CB:7E:53:8E:C6:30:0B:E1:14:2A:E4
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 725CBDD51BA1660CFFE3196E27B12FA7C8B66C32
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a633730313a3a2f34382d3438203d3e20313938333432.roa
Signing time: Fri 23 Oct 2026 17:50:41 +0000
ROA not before: Fri 23 Oct 2026 17:45:41 +0000
ROA not after: Fri 22 Oct 2027 17:50:41 +0000
asID: 198342
IP address blocks: 2a14:6f44:c701::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 09:19:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:5c:bd:d5:1b:a1:66:0c:ff:e3:19:6e:27:b1:2f:a7:c8:b6:6c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Oct 23 17:45:41 2026 GMT
Not After : Oct 22 17:50:41 2027 GMT
Subject: CN=F036D7C0E2356ABA14CB7E538EC6300BE1142AE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:54:51:6f:22:66:0a:13:53:59:d8:57:9f:34:
e3:bf:d7:09:4b:23:1d:ea:e4:67:68:74:ee:64:dc:
38:1a:99:98:c3:9f:c7:3b:75:07:6e:dd:51:8d:61:
c1:1d:00:4b:e9:6f:a8:61:c4:1c:3f:77:60:a4:bd:
f7:df:d9:2b:01:e4:20:f7:39:9e:75:02:9e:20:cd:
1f:ae:81:68:33:da:dd:3b:75:c2:07:27:60:54:13:
7f:8f:b0:08:38:da:b0:a7:4e:26:43:0f:29:e7:9c:
1c:8e:2a:d1:25:87:60:18:5d:2f:8d:bb:d8:0b:18:
cd:7b:85:9a:f1:a0:4d:f4:7f:0d:10:71:b7:b8:a8:
7a:65:38:a2:a8:9d:04:0e:ad:da:e3:70:de:9e:a4:
0b:74:04:22:7c:1f:41:0b:46:18:d4:07:d4:2c:ff:
ae:46:7f:45:cf:b3:78:07:e2:d8:d5:34:47:ae:64:
32:81:cb:6c:8e:ed:13:83:20:42:06:54:8a:7e:dd:
2f:04:60:a7:5a:92:a8:07:e9:f7:a4:1e:15:7d:86:
77:b7:e3:5c:ef:c6:f0:e3:12:52:63:e5:75:4d:41:
f6:3a:39:31:61:de:df:0d:90:82:aa:5e:93:39:18:
e4:44:98:02:52:c6:1d:52:75:73:6b:bd:fe:ea:2f:
ae:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:36:D7:C0:E2:35:6A:BA:14:CB:7E:53:8E:C6:30:0B:E1:14:2A:E4
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a633730313a3a2f34382d3438203d3e20313938333432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f44:c701::/48
Signature Algorithm: sha256WithRSAEncryption
82:0b:fc:f5:ff:95:68:f5:29:a8:98:02:20:a3:9a:18:c6:69:
35:f0:02:62:c1:22:64:01:cc:3b:c0:dd:50:d3:1c:0e:52:c9:
37:a0:cb:f3:a2:f2:0e:22:13:7e:e9:f9:10:c2:43:eb:06:10:
ea:86:81:bd:54:b1:68:ef:70:84:2a:61:69:93:c4:6c:26:b7:
e9:96:09:90:9b:a5:74:09:62:9f:86:15:97:4d:d2:3f:73:00:
1f:f9:f6:d8:62:1b:74:4e:c9:6a:1f:51:6d:42:e0:cf:12:6d:
99:13:3d:7b:56:9c:e7:a0:fe:d5:c8:88:5a:1c:b3:bb:4f:7d:
33:34:f3:4a:66:cf:29:02:cd:c1:2c:1d:5c:58:c4:37:e0:04:
e3:dd:d0:eb:d2:4d:c3:05:bd:65:bb:c1:30:c9:00:b9:3a:8b:
67:ef:98:fd:35:90:2a:88:86:df:96:96:20:72:9e:1f:88:d2:
63:72:9e:5a:dc:73:fb:70:28:b9:f2:f9:0c:6a:48:76:a8:7f:
81:d5:46:0a:7e:0a:b9:32:6e:ac:f2:d8:6d:77:50:7e:12:fd:
4e:06:17:55:dd:f9:1f:24:4c:86:da:0f:fb:e0:1c:86:9a:de:
4e:00:7d:c9:bc:7b:f4:0f:b1:2b:5a:ac:a3:f4:23:7f:38:b5:
a3:5c:0f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 21:31:10 2026 by rpki-client