Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a3a2f33362d3438203d3e203539393230.roa
File: 326131343a366634353a3a2f33362d3438203d3e203539393230.roa (raw, json)
Hash identifier: sve6hRQzpzZM2x5gHZ5EyNzNOcIsHHlbUiIX1/6JD4A=
Subject key identifier: 07:EE:CB:D1:0D:12:11:88:BA:D7:BE:9A:8B:1D:BF:ED:14:F7:0D:76
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 23FC3E483C932E536BAF53343ABDE56AEAED6F58
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a3a2f33362d3438203d3e203539393230.roa
Signing time: Mon 29 Jun 2026 09:22:55 +0000
ROA not before: Mon 29 Jun 2026 09:17:55 +0000
ROA not after: Mon 28 Jun 2027 09:22:55 +0000
asID: 59920
IP address blocks: 2a14:6f45::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:fc:3e:48:3c:93:2e:53:6b:af:53:34:3a:bd:e5:6a:ea:ed:6f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Jun 29 09:17:55 2026 GMT
Not After : Jun 28 09:22:55 2027 GMT
Subject: CN=07EECBD10D121188BAD7BE9A8B1DBFED14F70D76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:f8:14:4d:98:f1:d1:44:59:9f:54:15:81:
41:a9:09:42:4b:e8:20:a1:c4:75:3b:06:40:8b:d0:
32:b1:8a:be:f3:0b:8a:57:aa:5d:be:de:e7:ff:64:
28:48:f4:f2:bf:b5:61:e5:87:0e:d7:a3:9a:42:8e:
9e:d9:75:0f:18:d8:ec:57:4d:4f:2e:ff:60:7d:7b:
d1:fe:40:cf:07:7f:f0:32:e1:0e:c3:f1:df:b4:3d:
9c:6a:c7:ea:c2:30:d1:32:5a:22:ec:f0:65:31:f9:
a1:62:f9:00:9c:3a:56:12:da:ff:94:85:44:cb:30:
d2:00:b8:b7:5f:d3:45:a5:03:be:96:fc:c6:3e:c4:
a1:74:2a:59:7c:1b:39:90:85:9d:35:ec:79:cc:b9:
03:3e:62:09:b6:a6:fc:32:4f:3d:fa:7f:0d:d3:bd:
ee:14:32:e8:71:b3:b3:bb:ac:db:65:d7:66:44:9f:
04:6f:91:2d:0b:2e:6a:f6:0e:a6:b0:44:4b:f7:0b:
3c:ac:19:06:d5:0d:80:c0:7b:84:fc:c1:d7:3e:3c:
60:0f:44:f6:bd:e0:0b:60:49:88:b7:09:b0:94:23:
e2:b6:31:0a:53:66:b3:4e:87:ad:20:0d:43:4a:d9:
48:26:3d:6d:f6:b1:7b:44:70:21:bf:40:f8:13:df:
fe:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EE:CB:D1:0D:12:11:88:BA:D7:BE:9A:8B:1D:BF:ED:14:F7:0D:76
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a3a2f33362d3438203d3e203539393230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f45::/36
Signature Algorithm: sha256WithRSAEncryption
23:03:f1:bb:7a:19:1b:c4:01:7b:49:c8:53:0f:31:7c:1c:46:
40:64:4a:f2:b6:7f:24:69:ab:45:f9:2e:af:33:8b:ea:13:9d:
48:ae:9a:01:b9:69:d1:a9:5a:93:c5:dc:4e:09:e3:d3:23:7e:
87:d2:de:06:83:05:79:2d:bc:7c:98:85:e9:18:74:1a:0c:52:
bd:d5:9f:6d:b2:80:b3:ab:65:6c:ee:92:f4:d3:7b:65:30:ae:
01:2c:e2:1f:61:c9:b5:b8:e4:8f:d3:33:6c:e1:f8:4d:6f:92:
c2:79:87:c5:aa:af:41:43:93:5d:53:79:00:55:5c:4f:2b:b0:
00:b2:53:ee:c0:16:d6:4b:15:de:9e:2e:da:70:95:78:36:6c:
74:e4:35:dc:dc:ba:08:33:3a:61:88:6d:83:74:99:df:0c:f5:
8f:a3:a7:f3:7c:6d:9c:bb:d9:fa:31:8c:96:60:ae:61:82:a0:
f4:6c:d3:fb:75:f0:35:c4:f3:98:c1:72:67:ca:5e:ce:9a:f9:
46:7f:2e:db:c8:ea:e1:bc:29:4c:1d:b0:f5:c3:51:21:18:0c:
b3:21:1c:27:2b:30:de:b4:f4:0f:23:28:80:be:dc:9a:6a:15:
85:06:e2:62:25:30:8a:bd:f9:23:20:a8:f0:f6:8e:85:94:51:
20:09:34:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:17:57 2026 by rpki-client