Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a636166653a3a2f34382d3438203d3e20323035373839.roa
File: 326131343a366634343a636166653a3a2f34382d3438203d3e20323035373839.roa (raw, json)
Hash identifier: nxfnA079w/6dwqMZYs8K0RSnuzNvrK8dfzm7kFfz+1E=
Subject key identifier: A8:A0:EB:4D:D2:06:C7:B9:47:6E:C0:4E:EE:60:91:42:F4:0D:4E:8F
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 63040010B9E5F7D3F71FA7B7B4AF3B4F70A2CDA3
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a636166653a3a2f34382d3438203d3e20323035373839.roa
Signing time: Sun 31 May 2026 11:50:40 +0000
ROA not before: Sun 31 May 2026 11:45:40 +0000
ROA not after: Sun 30 May 2027 11:50:40 +0000
asID: 205789
IP address blocks: 2a14:6f44:cafe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:04:00:10:b9:e5:f7:d3:f7:1f:a7:b7:b4:af:3b:4f:70:a2:cd:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: May 31 11:45:40 2026 GMT
Not After : May 30 11:50:40 2027 GMT
Subject: CN=A8A0EB4DD206C7B9476EC04EEE609142F40D4E8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a9:87:d3:54:f5:e8:ba:f5:9c:c7:53:c8:57:
f8:0e:c0:69:9b:f3:5b:32:bf:10:ae:64:78:1e:92:
cc:4b:e8:e6:fe:ee:2f:f1:e2:93:4e:ef:29:7e:69:
c2:b8:84:af:95:e0:f4:e3:ab:e0:f2:ac:22:12:2e:
0c:8a:aa:b2:fd:ac:66:ad:26:c8:75:5f:e6:0d:4c:
80:2c:00:5e:28:31:e8:34:11:33:df:1b:6a:16:c2:
77:ac:60:62:80:91:95:75:02:bd:a3:65:7f:f3:c8:
fd:61:f8:a1:a9:f5:b7:a2:54:8b:32:1d:c3:95:16:
a5:c7:8c:61:5b:73:c6:a9:8f:fe:73:de:ab:d9:ca:
8d:33:c0:d0:83:73:d0:4e:8c:2b:71:a4:80:db:d3:
51:80:dd:7a:f9:ba:0e:42:39:57:f4:de:d1:0b:84:
2d:b6:10:e1:13:ac:36:cf:ac:9e:94:4b:cc:8b:43:
18:61:3d:b9:22:dd:d0:48:4c:12:4a:21:a9:4c:5c:
14:02:a9:14:e4:17:45:19:2c:6e:a7:00:b1:4c:4e:
50:b5:63:88:43:9f:22:c7:2d:fe:b1:5e:32:a7:00:
b8:96:ad:d1:93:53:35:75:85:28:ee:57:9f:c9:87:
a5:19:36:35:85:c9:a3:da:f0:de:a2:3e:78:02:c4:
85:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A0:EB:4D:D2:06:C7:B9:47:6E:C0:4E:EE:60:91:42:F4:0D:4E:8F
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a636166653a3a2f34382d3438203d3e20323035373839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f44:cafe::/48
Signature Algorithm: sha256WithRSAEncryption
34:a5:f1:7f:bf:a2:50:dd:ec:ac:9b:65:98:43:d5:ec:fa:d0:
0e:50:e6:60:78:b3:71:ef:31:cc:cb:b1:86:80:ee:dd:45:f9:
d0:d2:b3:06:f7:22:f5:05:bd:92:5b:96:46:62:90:03:58:2e:
c8:eb:39:14:56:fb:25:f2:c7:47:5b:d8:d6:d8:ca:21:68:94:
99:42:2b:fc:c1:88:37:8d:20:a3:e7:f9:ee:6e:fe:28:48:5c:
66:ee:ac:76:ef:5f:f9:30:0c:21:8a:46:b1:8c:65:8b:f1:60:
e1:4c:f2:77:e6:31:82:92:eb:2f:8c:78:9c:24:c7:f3:95:25:
2f:24:81:f3:8b:3e:20:0c:02:34:d7:46:e4:3b:18:5e:9d:10:
5f:41:54:6d:5e:a1:c7:11:f3:74:ed:93:3f:fe:0c:a1:d2:c8:
93:66:80:b7:cb:ab:0a:f8:60:96:c3:ed:c8:37:cd:40:eb:c3:
4a:00:31:b2:3d:de:c6:9d:50:7f:0a:96:3e:da:24:43:e4:ab:
e4:8c:47:fb:8c:bc:17:97:2c:61:06:32:1e:16:2c:5b:3b:67:
6c:f8:84:8e:f4:03:83:d8:72:2b:84:a6:91:2b:1d:40:88:3d:
97:5b:13:51:00:99:ab:8d:09:2c:47:24:fe:1b:22:42:b4:8e:
6b:35:d5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:40:37 2026 by rpki-client