Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a323339303a3a2f34342d3438203d3e20323136313135.roa
File: 326131343a366634343a323339303a3a2f34342d3438203d3e20323136313135.roa (raw, json)
Hash identifier: mVRk7OX5nwehY6QXOhw6587D02FFEQfLM0VwJdYXtak=
Subject key identifier: 7D:51:34:93:68:AF:F1:DA:6E:92:5D:A1:E4:C7:5C:1D:B7:4D:2E:FC
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 54B2323358AA587C0595B3A8C09A43951BB85527
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a323339303a3a2f34342d3438203d3e20323136313135.roa
Signing time: Mon 13 Oct 2025 17:54:38 +0000
ROA not before: Mon 13 Oct 2025 17:49:38 +0000
ROA not after: Mon 12 Oct 2026 17:54:38 +0000
asID: 216115
IP address blocks: 2a14:6f44:2390::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:b2:32:33:58:aa:58:7c:05:95:b3:a8:c0:9a:43:95:1b:b8:55:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Oct 13 17:49:38 2025 GMT
Not After : Oct 12 17:54:38 2026 GMT
Subject: CN=7D51349368AFF1DA6E925DA1E4C75C1DB74D2EFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:b8:99:be:6c:d8:b4:b4:1a:1a:39:70:c8:
d4:5e:65:fe:99:f5:92:fa:cb:bb:d2:e2:e8:ec:13:
7b:a9:ed:c7:ae:6e:2b:88:b3:8d:1f:f7:dd:c8:05:
6b:6c:ab:79:59:74:75:cd:00:42:3d:dd:ee:60:07:
12:ee:c0:f4:3b:17:a4:f2:15:d3:f7:1e:bd:45:d9:
05:17:58:14:11:78:59:2e:ea:35:f4:32:86:96:e0:
10:1c:41:b9:ae:6c:27:ca:72:fd:9c:87:14:33:75:
67:03:cd:74:ec:a0:78:a9:c0:d0:fa:57:a2:64:e4:
5e:56:0b:78:da:63:e4:ca:61:18:ad:c8:aa:e0:9e:
17:a8:9c:31:5c:05:7d:96:14:7b:65:f4:fe:4e:aa:
51:4a:17:45:7d:7b:41:13:a8:a2:91:2a:e8:5a:01:
8d:c9:b2:e1:79:8e:f7:d8:5d:c0:52:48:38:90:d1:
19:f9:56:90:1c:f2:ee:c2:5c:07:b1:a2:fb:65:b4:
14:b2:5a:6c:41:81:13:89:8c:76:91:3a:0e:8c:fe:
cf:80:7d:49:5d:c5:04:d3:38:ca:60:4e:1d:41:e5:
30:a7:b4:fc:7c:62:2d:1f:24:7d:74:22:3c:90:0d:
37:a6:0b:99:58:29:80:54:b2:f1:28:93:f5:17:7f:
9b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:51:34:93:68:AF:F1:DA:6E:92:5D:A1:E4:C7:5C:1D:B7:4D:2E:FC
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a323339303a3a2f34342d3438203d3e20323136313135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f44:2390::/44
Signature Algorithm: sha256WithRSAEncryption
9e:62:8b:fc:69:1b:63:f4:21:bd:29:ee:d1:76:b6:f3:03:de:
61:bf:ed:ca:3c:81:0a:4c:01:55:46:9a:09:96:8b:ac:c6:56:
bc:58:50:7f:90:2b:e6:2c:fc:7e:e3:68:d6:88:29:41:a6:21:
4b:1d:3f:46:74:4e:b2:f0:74:d9:d0:cd:b7:93:6f:91:56:a3:
df:ee:26:bc:90:97:16:90:9c:f2:79:27:db:9e:6e:e8:b1:01:
11:d4:75:05:fa:ff:da:b0:7c:22:5c:72:f6:76:95:85:84:64:
c0:6f:ee:63:48:51:f1:fc:4d:17:86:9f:00:dd:5f:a5:14:b8:
33:12:6d:04:69:3a:74:3b:8f:95:07:de:30:a4:de:2f:08:6f:
29:a0:9f:18:fd:8e:69:90:6b:a1:e9:f1:f7:ab:69:69:c6:16:
8b:f7:db:f6:f9:a6:e1:03:04:0d:ec:ad:d2:2e:d1:e0:1a:d1:
c6:fd:fd:b7:64:f1:65:bb:9c:f9:dc:9f:0e:1f:87:53:f3:cc:
bf:6c:ff:1a:f5:48:16:8e:e4:8f:dd:9f:b6:5b:85:70:33:06:
ea:02:ea:55:93:8b:80:e7:53:e5:f7:1a:41:a8:b7:f8:c7:f6:
ef:4b:8e:96:6b:98:62:fc:8b:d4:37:b5:46:84:3a:62:53:b3:
43:d4:95:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:10:23 2025 by rpki-client