Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a656465383a3a2f34382d3438203d3e20323035373839.roa
File: 326131343a366634343a656465383a3a2f34382d3438203d3e20323035373839.roa (raw, json)
Hash identifier: xxlE9eW7wxkVqKgVEi145qoldmcWDNNO0Ef6X+G68Ag=
Subject key identifier: 41:47:5C:7F:BB:BC:70:59:84:5E:EF:DC:4D:55:A8:CB:A1:5D:F6:B0
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 42CE6FCE90FF614ABF2C2124F2E00021D21D66B6
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a656465383a3a2f34382d3438203d3e20323035373839.roa
Signing time: Mon 31 Aug 2026 13:50:41 +0000
ROA not before: Mon 31 Aug 2026 13:45:41 +0000
ROA not after: Mon 30 Aug 2027 13:50:41 +0000
asID: 205789
IP address blocks: 2a14:6f44:ede8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:ce:6f:ce:90:ff:61:4a:bf:2c:21:24:f2:e0:00:21:d2:1d:66:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Aug 31 13:45:41 2026 GMT
Not After : Aug 30 13:50:41 2027 GMT
Subject: CN=41475C7FBBBC7059845EEFDC4D55A8CBA15DF6B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:db:09:de:7f:32:2a:0b:78:14:46:ac:86:c8:
49:d3:ac:c1:82:8b:13:7d:bf:03:a3:71:26:39:2d:
31:7c:52:6f:2d:63:1f:d3:3e:3c:c6:c2:c0:58:ae:
13:41:87:ce:54:f2:af:fb:b8:75:8d:2e:49:d8:39:
bd:99:0e:9c:49:f6:16:9a:ac:c1:0e:54:e1:87:5d:
f6:b9:1a:f7:94:b8:35:76:86:c0:3a:bf:14:b1:81:
41:d3:09:7f:56:da:31:3c:4f:a1:f0:55:e0:b5:a2:
74:5b:50:aa:7d:50:40:2a:c5:ab:07:a4:7f:2d:2d:
7c:e4:85:5c:f6:8f:56:7a:d9:37:35:81:2a:d7:7d:
d3:62:c3:3f:19:60:29:26:74:e7:ef:a2:46:09:47:
26:b3:02:bf:69:af:d5:56:aa:ce:ca:1b:a2:ee:c4:
a6:cf:b6:a5:ce:92:8a:54:ae:4c:7a:94:ae:d7:b9:
2b:0b:31:bb:5e:53:f6:3e:1f:a7:68:10:d5:0a:20:
86:06:26:a3:34:51:ab:af:1f:cc:f4:50:05:f8:59:
14:e2:57:12:52:fb:13:b3:a7:9c:30:96:b3:9b:10:
9f:d7:64:16:52:64:fd:92:35:4b:e7:f1:d6:1b:3a:
1a:f5:73:86:a6:da:a6:49:6d:5c:80:5a:74:7d:93:
18:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:47:5C:7F:BB:BC:70:59:84:5E:EF:DC:4D:55:A8:CB:A1:5D:F6:B0
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a656465383a3a2f34382d3438203d3e20323035373839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f44:ede8::/48
Signature Algorithm: sha256WithRSAEncryption
05:bf:33:5a:1d:14:bc:dd:16:87:51:cb:5b:f9:1e:9b:dc:92:
a9:92:62:f8:34:be:40:bf:48:a4:0d:3c:bd:7f:22:8b:78:93:
3f:ab:1a:59:62:43:d5:c0:84:9e:f6:fa:1c:0a:e0:04:e8:62:
f1:19:72:0f:41:3d:5e:15:47:18:7d:59:46:1a:d5:cf:85:d1:
05:8a:4a:a7:e2:98:0d:11:76:f0:79:06:29:bd:53:44:6e:71:
1b:7c:37:70:f3:19:ac:78:d7:b5:83:1b:21:2e:21:70:d2:28:
09:6b:7a:ce:6b:c6:6b:27:65:cc:a5:2f:98:21:95:b1:23:2b:
3a:30:dd:12:0e:97:c5:23:5a:17:0e:ea:7f:e6:1f:00:54:03:
20:9c:b0:86:07:ef:f4:c0:63:8f:65:15:f3:97:a2:fa:44:09:
c6:d6:5f:c8:43:35:b2:21:09:3a:69:f9:31:34:6e:5b:82:96:
66:62:0b:0a:1c:69:4e:b1:88:af:15:02:31:21:d1:a2:da:39:
d5:aa:33:5e:aa:6e:a7:03:91:28:3e:cc:75:28:de:cd:c2:1e:
f6:91:65:38:9e:aa:06:99:65:30:08:e9:2e:0a:9c:bf:35:eb:
c2:6a:c0:bb:10:eb:45:db:26:12:b0:e2:43:3e:38:5e:cc:20:
b5:3b:2a:e0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUQs5vzpD/YUq/LCEk8uAAIdIdZrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2VlZWJiOTQ2YThkMjFkNDA4M2M5M2RjMDljZWU1NTdi
YjJhYzMyZTAeFw0yNjA4MzExMzQ1NDFaFw0yNzA4MzAxMzUwNDFaMDMxMTAvBgNV
BAMTKDQxNDc1QzdGQkJCQzcwNTk4NDVFRUZEQzRENTVBOENCQTE1REY2QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCG2wnefzIqC3gURqyGyEnTrMGC
ixN9vwOjcSY5LTF8Um8tYx/TPjzGwsBYrhNBh85U8q/7uHWNLknYOb2ZDpxJ9haa
rMEOVOGHXfa5GveUuDV2hsA6vxSxgUHTCX9W2jE8T6HwVeC1onRbUKp9UEAqxasH
pH8tLXzkhVz2j1Z62Tc1gSrXfdNiwz8ZYCkmdOfvokYJRyazAr9pr9VWqs7KG6Lu
xKbPtqXOkopUrkx6lK7XuSsLMbteU/Y+H6doENUKIIYGJqM0UauvH8z0UAX4WRTi
VxJS+xOzp5wwlrObEJ/XZBZSZP2SNUvn8dYbOhr1c4am2qZJbVyAWnR9kxjlAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUQUdcf7u8cFmEXu/cTVWoy6Fd9rAwHwYDVR0j
BBgwFoAUPu67lGqNIdQIPJPcCc7lV7sqwy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5
YjNkLzQvM0VFRUJCOTQ2QThEMjFENDA4M0M5M0RDMDlDRUU1NTdCQjJBQzMyRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1B1NjdsR3FOSWRRSVBKUGNDYzdsVjdz
cXd5NC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmZmN2E5ODkt
ZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5YjNkLzQvMzI2MTMxMzQzYTM2NjYzNDM0
M2E2NTY0NjUzODNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzNTM3MzgzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoUb0Tt6DANBgkqhkiG9w0BAQsFAAOCAQEABb8zWh0UvN0Wh1HL
W/kem9ySqZJi+DS+QL9IpA08vX8ii3iTP6saWWJD1cCEnvb6HArgBOhi8RlyD0E9
XhVHGH1ZRhrVz4XRBYpKp+KYDRF28HkGKb1TRG5xG3w3cPMZrHjXtYMbIS4hcNIo
CWt6zmvGaydlzKUvmCGVsSMrOjDdEg6XxSNaFw7qf+YfAFQDIJywhgfv9MBjj2UV
85ei+kQJxtZfyEM1siEJOmn5MTRuW4KWZmILChxpTrGIrxUCMSHRoto51aozXqpu
pwORKD7MdSjezcIe9pFlOJ6qBpllMAjpLgqcvzXrwmrAuxDrRdsmErDiQz44Xswg
tTsq4A==
-----END CERTIFICATE-----
Generated at Sun Sep 20 10:25:14 2026 by rpki-client