Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a313030303a3a2f33392d3438203d3e20323134373537.roa
File: 326131343a366634343a313030303a3a2f33392d3438203d3e20323134373537.roa (raw, json)
Hash identifier: jMf04y0FdiA1Ozv3uu5fV+KGwKj/Ak5B/wy+0BF0LRg=
Subject key identifier: 8C:FD:AE:1B:2A:AC:B4:3C:8A:01:D0:CC:D7:52:2B:30:7D:61:91:F1
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 139E1F44E30535F1723AD1712DC9E2AA7E16F4E0
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a313030303a3a2f33392d3438203d3e20323134373537.roa
Signing time: Tue 30 Jun 2026 16:04:40 +0000
ROA not before: Tue 30 Jun 2026 15:59:40 +0000
ROA not after: Tue 29 Jun 2027 16:04:40 +0000
asID: 214757
IP address blocks: 2a14:6f44:1000::/39 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:9e:1f:44:e3:05:35:f1:72:3a:d1:71:2d:c9:e2:aa:7e:16:f4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Jun 30 15:59:40 2026 GMT
Not After : Jun 29 16:04:40 2027 GMT
Subject: CN=8CFDAE1B2AACB43C8A01D0CCD7522B307D6191F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d7:59:62:23:28:2a:c1:cc:71:e2:db:4d:df:
0e:f3:10:96:38:d8:01:35:7b:14:64:ba:4e:c1:43:
7c:dd:95:3e:6b:bb:4b:0d:7c:42:3f:9b:6c:11:cb:
ed:cc:99:2e:1f:51:a5:d6:5a:f5:36:40:54:80:d8:
c7:10:16:64:02:7a:4f:26:f8:45:9f:ab:9c:84:bf:
97:9a:15:c1:e6:c4:44:41:3c:f9:90:14:73:66:5b:
41:3b:24:ab:ed:9c:08:07:58:72:c5:2e:56:08:0e:
4d:15:13:11:d9:cd:13:dd:21:17:be:e6:6f:c4:ed:
0c:5d:16:3c:f8:c7:82:b0:35:91:7a:b5:7d:ad:4b:
f9:04:86:fa:91:94:ac:6e:9c:a1:7a:7f:0c:05:ff:
03:db:20:c5:84:c7:fe:c0:30:7d:36:25:f2:e9:9c:
b7:1c:f5:dd:b5:6d:92:57:60:05:ad:e7:fd:f1:df:
46:9f:0a:16:30:65:50:7e:df:a9:71:09:03:85:0d:
2f:9b:17:7e:de:e2:3c:42:9d:d2:d6:c9:b3:1a:80:
24:1e:fc:7f:d6:fa:98:7f:77:e4:b9:ba:05:26:8e:
94:69:9b:7e:0f:31:c3:d4:1b:73:0b:d8:e2:e3:dd:
1b:96:af:80:ef:b1:93:54:44:3e:55:61:21:f3:7e:
bf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FD:AE:1B:2A:AC:B4:3C:8A:01:D0:CC:D7:52:2B:30:7D:61:91:F1
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a313030303a3a2f33392d3438203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f44:1000::/39
Signature Algorithm: sha256WithRSAEncryption
9e:0e:0a:61:a4:f1:32:14:50:52:b1:76:54:66:50:8a:32:ad:
49:d5:24:06:6c:b7:15:e9:30:85:53:2e:46:3b:93:89:22:7e:
0a:0e:71:2b:3c:53:bc:a9:7a:67:53:9d:76:b3:72:fe:53:4e:
fc:95:17:1a:d1:04:b9:16:f7:17:9c:20:5f:11:4d:e2:ff:62:
70:2e:9b:a6:f7:16:0f:c4:80:fe:6e:e2:9b:60:15:a5:40:fe:
54:59:5f:9a:e8:ff:a7:ac:4e:1b:23:9d:db:14:1c:8a:77:d4:
59:3b:7c:12:1a:87:45:d1:4c:44:bf:85:14:71:e0:03:88:23:
4f:9b:d3:db:d1:9e:05:8e:b2:6a:12:87:06:04:78:b8:f0:50:
ac:c1:a7:4d:b1:86:b6:3c:61:fa:3d:31:78:34:1b:c2:b9:f3:
39:44:56:b3:5e:bd:5e:2e:d9:4b:94:68:4e:e9:c6:cc:34:c8:
97:36:2b:ee:29:5d:55:2f:6f:d1:69:a8:71:a9:b9:fa:12:9f:
dc:bb:c8:cf:62:18:66:40:c5:1c:a5:58:bd:31:f6:84:77:5a:
2b:33:d9:98:92:38:9d:d5:1b:3b:2b:06:cd:d8:9e:07:ec:d6:
a8:48:b2:d1:7a:85:b0:46:48:b9:3c:37:5c:56:d9:e0:49:79:
25:d3:1e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:56 2026 by rpki-client