
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a656465383a3a2f34382d3438203d3e20323035373839.roa
File: 326131343a366634343a656465383a3a2f34382d3438203d3e20323035373839.roa (raw, json)
Hash identifier: 37pW5zkUWwecCqjFHAdYxHEZTGOlFK8BvptTevydiHI=
Subject key identifier: 56:DA:BF:23:DE:F1:5E:9D:77:72:66:03:42:F3:F3:D9:D7:D0:D9:72
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 3E748AA0EA5E463D90910171EEF6E53A44B7F34E
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a656465383a3a2f34382d3438203d3e20323035373839.roa
Signing time: Mon 29 Sep 2025 13:45:13 +0000
ROA not before: Mon 29 Sep 2025 13:40:13 +0000
ROA not after: Mon 28 Sep 2026 13:45:13 +0000
asID: 205789
IP address blocks: 2a14:6f44:ede8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:74:8a:a0:ea:5e:46:3d:90:91:01:71:ee:f6:e5:3a:44:b7:f3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Sep 29 13:40:13 2025 GMT
Not After : Sep 28 13:45:13 2026 GMT
Subject: CN=56DABF23DEF15E9D7772660342F3F3D9D7D0D972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e8:63:77:aa:88:f3:af:1c:60:7e:0f:b1:fc:
78:b3:bb:38:24:12:2c:54:c0:9c:1d:fd:a1:a6:f3:
38:30:00:19:6e:3f:2f:e4:61:a3:02:fc:8c:a9:60:
20:0c:34:19:cf:29:47:0f:0a:69:d5:77:7e:b6:0e:
44:45:fe:70:9e:a0:d6:27:3b:25:b1:df:e6:06:4a:
3b:e2:e6:ec:8f:31:16:1b:0c:81:f4:3c:9b:cb:cb:
e9:bc:db:40:89:2f:3d:9e:4f:8d:21:b6:f3:34:d6:
fc:f8:06:92:3c:6f:1e:7d:33:16:c1:f2:51:3a:f0:
f2:09:5f:dc:5b:e9:ac:a4:c9:ea:58:bb:30:c0:d6:
3f:ef:3b:2a:f9:1c:6e:f4:09:99:f5:d1:80:8f:72:
69:48:23:0b:73:a7:93:d5:fd:65:50:42:e2:ab:78:
6f:4d:39:55:c7:82:78:0c:2f:09:27:7c:9d:aa:3b:
33:fd:f7:ba:a9:14:76:a5:03:e2:65:06:a9:18:14:
78:98:ef:9e:93:29:c6:5c:14:50:10:ad:b2:c5:d4:
61:cd:68:45:bb:e6:2e:30:4a:3c:3f:a7:b7:e5:f9:
62:d0:9e:c8:cb:b9:5d:5a:28:f2:a9:05:4d:4c:94:
de:5a:c3:3a:38:a6:52:96:9e:0e:85:b3:ed:d5:7c:
e2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DA:BF:23:DE:F1:5E:9D:77:72:66:03:42:F3:F3:D9:D7:D0:D9:72
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a656465383a3a2f34382d3438203d3e20323035373839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f44:ede8::/48
Signature Algorithm: sha256WithRSAEncryption
7f:1b:ed:0c:bf:c0:f1:97:ac:0d:23:ff:7e:d9:19:89:52:ab:
27:30:54:02:3a:18:c4:9c:a8:fb:c8:52:09:34:4d:59:f9:3e:
eb:fa:df:a0:b4:b1:65:af:21:12:65:32:fe:e5:a7:5b:d8:20:
a1:29:78:d6:8c:56:9d:b9:6c:9f:7f:3f:e6:97:ee:87:75:ef:
f2:24:05:12:e1:d6:ad:2f:9a:f9:03:d0:cd:04:16:02:f1:a8:
0e:63:70:f1:64:46:be:fd:1b:7a:1e:69:76:ae:e6:2b:ed:08:
f6:03:a6:47:fa:0c:45:07:16:aa:14:06:97:b8:53:38:16:af:
ff:9b:81:61:17:7f:9c:e3:e8:ed:87:31:92:78:f9:c7:2b:ac:
0e:bf:aa:9d:5a:dd:14:55:26:2c:19:35:e5:be:4d:05:e9:85:
59:e4:16:b3:0e:f5:98:c6:5a:22:f1:cd:98:0d:97:c8:d5:c5:
61:ed:ae:42:4e:46:a7:b4:15:2d:63:4a:36:64:15:bd:8a:47:
51:4c:47:8a:21:73:ef:32:0f:96:95:6c:1c:02:2e:0d:da:fb:
3a:96:92:8b:2f:66:28:b9:f7:44:a2:a9:be:60:a0:42:24:c8:
1e:27:31:6f:20:50:45:e2:5f:51:85:c7:fa:e9:62:7d:9e:ce:
33:22:3e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:43:32 2025 by rpki-client