Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a623030623a3a2f34382d3438203d3e20323130363637.roa
File: 326131343a366634343a623030623a3a2f34382d3438203d3e20323130363637.roa (raw, json)
Hash identifier: m8+D+okBVVmTzlPUuDfmEBZbvua+N+sKP5fs6j2S33Y=
Subject key identifier: 5B:85:B3:1D:F7:AA:61:EB:C3:B0:61:05:FB:DF:88:EC:00:19:40:0D
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 2066FF440319463F4539C4470EFABD292ECAA67E
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a623030623a3a2f34382d3438203d3e20323130363637.roa
Signing time: Sun 29 Jun 2025 11:43:46 +0000
ROA not before: Sun 29 Jun 2025 11:38:46 +0000
ROA not after: Sun 28 Jun 2026 11:43:46 +0000
asID: 210667
IP address blocks: 2a14:6f44:b00b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:66:ff:44:03:19:46:3f:45:39:c4:47:0e:fa:bd:29:2e:ca:a6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Jun 29 11:38:46 2025 GMT
Not After : Jun 28 11:43:46 2026 GMT
Subject: CN=5B85B31DF7AA61EBC3B06105FBDF88EC0019400D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:16:dd:3e:1b:24:49:ad:9b:3e:b0:46:f0:17:
e8:21:5e:34:d6:6c:27:32:f4:6a:4c:b4:9a:ed:aa:
8e:ca:20:6d:e1:aa:8e:d8:59:b7:8e:75:87:73:70:
4c:a4:b2:43:0b:b6:5a:8b:fa:72:36:a0:4a:1b:f0:
d4:64:9e:2a:90:40:19:05:36:cf:cd:24:e7:ef:a5:
b8:11:a2:89:96:5b:aa:6f:14:8c:d1:c5:f6:c0:8d:
d1:86:c5:ce:cf:02:7e:db:d5:b5:54:5d:e7:38:9c:
93:3f:cb:a9:43:e5:74:02:df:ad:9e:ba:c1:41:d7:
ed:cc:54:58:58:76:56:c5:0f:db:40:50:ce:6a:0e:
0b:d1:50:09:b0:70:29:5b:9d:f4:f9:61:b2:7b:a2:
6b:75:88:fd:0b:ae:dc:97:4c:02:08:99:5c:96:70:
d7:38:ad:d8:3b:b2:a9:4f:c3:a2:e6:94:45:93:97:
71:95:96:cb:a8:90:c9:f8:17:8f:bf:81:66:04:04:
f6:eb:6e:63:eb:74:f6:d7:36:aa:01:02:1d:a8:ee:
c4:1c:c6:86:7f:ce:e3:c0:29:38:e6:3a:41:36:de:
ee:b5:62:fa:9e:48:00:6b:87:c2:ac:74:3c:e7:db:
eb:c7:d5:03:59:85:d4:be:1c:77:c6:87:cb:16:4c:
ff:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:85:B3:1D:F7:AA:61:EB:C3:B0:61:05:FB:DF:88:EC:00:19:40:0D
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a623030623a3a2f34382d3438203d3e20323130363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f44:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
68:34:f4:69:cd:0c:eb:8c:35:82:4b:3c:2c:8a:9b:06:d9:5b:
5b:c3:e9:e3:22:71:8d:2d:dc:a1:bf:28:df:47:1e:ee:2f:c2:
9d:90:58:b7:76:64:a6:40:5a:41:cd:69:89:4b:e5:55:79:06:
76:03:2a:2c:58:b5:b5:63:c6:a1:88:dd:bc:4b:38:54:2e:56:
c4:75:26:b6:98:df:47:49:49:cc:10:61:fb:bb:fc:7b:3f:45:
49:4c:3a:d2:d5:c2:23:c2:df:2a:2f:41:10:55:2e:be:4e:39:
2b:ca:2b:a0:aa:2f:02:72:b2:0a:16:2f:d7:2c:58:90:b1:be:
f6:62:a6:f9:5e:4d:46:c9:ec:ba:d0:80:80:50:3a:ba:c1:51:
7c:8a:f9:d1:91:c1:d0:fe:3f:1b:8e:03:a5:db:1c:e1:ed:0a:
d4:dd:c7:74:98:2e:40:9a:d5:5c:18:ef:d3:f7:39:1e:2f:a7:
e8:db:1d:c0:85:57:f7:b5:58:1d:f4:7a:e9:7a:29:2f:79:7c:
71:87:e1:03:2b:6e:32:f7:e2:a2:bb:5a:0e:fe:48:b9:70:2d:
0b:93:b1:fc:ce:a8:83:cc:05:8a:0c:7f:e9:bc:db:78:10:13:
30:12:d4:0d:83:23:32:bd:85:d4:6c:74:a8:cf:d3:fe:bd:db:
19:d9:49:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:51:00 2025 by rpki-client