Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a623030623a3a2f34382d3438203d3e20323134373537.roa
File: 326131343a366634353a623030623a3a2f34382d3438203d3e20323134373537.roa (raw, json)
Hash identifier: vpJnV8PBMgXyqMmJHd9OUKi6H1sNy2Z7wOh0POj/1Wg=
Subject key identifier: E5:4C:BA:5B:0F:00:4B:4D:E7:B2:16:57:E3:39:D8:4C:A3:83:2D:D6
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 3BFF866F70226259E0A44BF6D716120A9C333347
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a623030623a3a2f34382d3438203d3e20323134373537.roa
Signing time: Sun 12 Jul 2026 20:50:40 +0000
ROA not before: Sun 12 Jul 2026 20:45:40 +0000
ROA not after: Sun 11 Jul 2027 20:50:40 +0000
asID: 214757
IP address blocks: 2a14:6f45:b00b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:ff:86:6f:70:22:62:59:e0:a4:4b:f6:d7:16:12:0a:9c:33:33:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Jul 12 20:45:40 2026 GMT
Not After : Jul 11 20:50:40 2027 GMT
Subject: CN=E54CBA5B0F004B4DE7B21657E339D84CA3832DD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bc:37:f5:ae:d0:1a:91:74:cf:a9:fa:76:02:
9a:24:b3:4c:19:9d:e9:57:88:68:ce:20:3d:93:64:
0d:68:af:65:bf:10:27:ed:43:1d:dd:d6:3d:9a:75:
da:69:ad:bf:df:ac:5d:5c:41:7e:0c:d1:13:d2:e8:
39:f4:38:cb:f2:46:e0:f3:f6:40:d6:27:3d:11:c6:
b8:58:51:f0:f2:83:09:d4:6f:a5:a6:07:dc:83:a4:
88:2a:9d:0f:0d:86:c2:7b:cb:75:e2:5c:57:dc:a3:
c3:92:e6:d3:63:0c:13:e1:e6:05:85:d5:4b:a7:a1:
29:cc:35:d4:d9:85:35:1d:a9:12:13:2c:93:f8:b5:
c1:d6:ab:7f:87:cc:c9:6c:e3:20:4a:08:14:e8:98:
bc:3e:14:30:89:61:57:8d:78:80:88:66:9d:06:4f:
d7:eb:51:ed:60:36:60:33:5e:39:6b:98:ae:b9:8c:
0d:87:88:8d:5e:3a:2b:45:a1:b9:b2:94:f6:bb:fd:
1e:d1:98:5d:7c:1a:98:72:c0:25:c5:78:38:01:aa:
a7:d4:61:55:c0:40:03:2c:b7:02:29:7f:2a:a6:21:
36:b4:02:2d:69:90:60:15:c5:1d:4f:7c:e8:aa:24:
5c:43:43:79:d4:b6:33:2d:88:49:50:1a:31:cc:f5:
0a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4C:BA:5B:0F:00:4B:4D:E7:B2:16:57:E3:39:D8:4C:A3:83:2D:D6
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a623030623a3a2f34382d3438203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f45:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
41:e0:b9:cd:77:73:26:eb:d7:54:c9:81:34:52:9a:6c:70:24:
b6:e3:de:6a:6e:1f:4c:50:91:4d:32:e8:1c:f3:a8:20:54:4e:
fd:9d:22:df:57:28:e5:85:5d:18:a4:1b:14:55:3d:47:cd:ba:
5d:6a:83:fa:14:71:16:ca:38:b3:d9:08:13:c0:2b:75:28:91:
dc:26:46:3e:01:1c:84:68:a6:d2:3b:8f:01:24:c9:e1:21:5c:
dd:89:83:17:c9:21:a0:66:04:75:3c:8c:c1:a0:d5:2f:9d:55:
99:3e:8a:a6:be:fa:19:26:55:14:a3:1b:89:80:48:e0:c8:ef:
11:47:2f:27:0e:3d:ab:57:61:b0:f6:b0:ba:c9:b7:14:35:1d:
38:58:be:ed:65:a0:dc:94:17:ef:82:e8:fe:a1:2b:ae:75:2b:
87:02:e8:3e:4c:2e:fc:16:d7:10:30:3f:88:17:6c:a6:4c:e2:
22:ad:38:67:fd:7e:6c:cd:53:79:2e:5a:f4:82:a7:14:9d:e1:
23:41:bc:48:95:ee:a6:5c:c9:12:f3:63:7c:19:74:c6:29:b6:
3f:ee:ce:1c:45:c4:22:88:73:55:22:e5:3d:20:f8:56:fc:b9:
ca:78:f4:fb:b1:ac:cf:7e:68:df:a6:c1:e1:34:09:ea:fd:89:
5b:39:8b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:13:59 2026 by rpki-client