Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/AS48961.roa
File: AS48961.roa (raw, json)
Hash identifier: mjIwrDYeEebpa2e3KQ45oikrMsfasnq89j/xn5xuGzs=
Subject key identifier: 21:B4:07:EE:08:E1:C7:96:59:3E:B0:6A:D7:A0:D4:ED:FB:5A:CD:CF
Certificate issuer: /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial: 6116BD74E31D137F3C22D203AC2C8E456A523FF9
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/AS48961.roa
Signing time: Thu 30 Apr 2026 16:21:38 +0000
ROA not before: Thu 30 Apr 2026 16:16:38 +0000
ROA not after: Thu 29 Apr 2027 16:21:38 +0000
asID: 48961
IP address blocks: 2a00:13d0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:16:bd:74:e3:1d:13:7f:3c:22:d2:03:ac:2c:8e:45:6a:52:3f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Validity
Not Before: Apr 30 16:16:38 2026 GMT
Not After : Apr 29 16:21:38 2027 GMT
Subject: CN=21B407EE08E1C796593EB06AD7A0D4EDFB5ACDCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:5c:00:70:09:e4:a2:61:7b:85:d6:ee:e5:
9b:9e:15:f4:90:46:6a:34:f4:86:bc:50:05:27:7c:
de:94:0d:66:ac:09:45:1a:81:28:6d:b9:d8:d4:60:
57:8c:0f:fa:5c:46:ba:34:b8:70:ae:c7:2a:28:c6:
a5:e3:de:49:4b:f5:ff:12:12:c2:c5:4d:ce:30:86:
e2:ee:4c:69:fc:38:ad:c0:a3:d6:64:f5:49:7e:21:
3e:50:e5:91:0c:8d:3b:f4:74:e4:0c:8d:f7:60:53:
eb:bb:db:ef:27:16:15:c5:3f:05:35:23:ae:4f:55:
e4:d6:59:f4:52:79:89:eb:80:21:70:db:2d:ea:c5:
b9:1c:85:81:55:2b:a4:e5:e1:ef:29:39:8d:94:03:
a0:4e:1f:1a:82:ac:c8:c3:66:9b:5b:5a:23:1f:c6:
28:2c:28:4f:6f:cc:1e:68:91:9c:77:8c:05:aa:41:
86:c2:dc:af:1b:67:06:b8:c0:eb:a2:51:ef:dd:87:
b4:bc:3a:18:1f:25:03:38:19:a9:37:05:60:2c:f0:
5b:7f:0d:d2:df:3f:a3:69:a7:c6:42:20:33:eb:fd:
b2:9f:fb:62:77:64:c9:a5:53:32:af:c0:0d:48:05:
2c:0a:d3:4d:7b:3c:c8:ec:77:fd:8f:70:41:ea:65:
85:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B4:07:EE:08:E1:C7:96:59:3E:B0:6A:D7:A0:D4:ED:FB:5A:CD:CF
X509v3 Authority Key Identifier:
keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/AS48961.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:13d0::/32
Signature Algorithm: sha256WithRSAEncryption
94:49:8f:5e:2a:ca:b6:c5:19:5a:2a:2f:cf:41:16:98:aa:e1:
3c:1a:8b:11:5f:89:6f:8b:ba:b8:eb:88:4f:09:d3:c2:4c:77:
a8:1e:0c:f7:27:85:48:d5:b4:f2:4f:5d:f1:29:fe:ed:11:3b:
b6:fa:08:95:6b:c6:d9:20:64:26:77:9a:17:60:0c:29:77:d7:
8e:79:82:10:2e:a9:ed:ca:53:ea:34:08:42:f6:a1:cf:3d:29:
68:32:be:93:96:0f:b1:d1:60:bb:5b:f9:9e:b4:28:60:cc:fd:
09:1c:b2:4e:c3:0b:8c:14:8d:d4:96:4d:82:cc:50:bf:52:4f:
9f:78:c6:ee:6d:7a:a3:dd:ba:b4:3a:17:9c:43:65:12:72:27:
09:25:e5:90:ac:10:b5:80:28:e0:e0:a7:5d:51:09:be:8c:bb:
61:51:f9:e4:f1:90:d3:d2:21:e7:3b:1f:27:7c:aa:b4:d5:a2:
df:e9:b5:b3:c8:bd:ce:38:62:50:e8:aa:17:0a:2a:6d:33:ef:
57:6b:f8:ce:8e:14:da:42:c1:5a:f6:44:90:15:3f:02:65:cc:
11:df:8b:44:f7:4b:a5:09:5b:3d:cf:9d:91:a5:f7:40:61:a2:
5a:93:ba:89:82:49:4d:a5:a9:5d:46:32:23:9d:7f:be:07:15:
0c:f8:81:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:42:40 2026 by rpki-client