Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS996.roa
File: AS996.roa (raw, json)
Hash identifier: 9BuPp4MMy1wIz/jdeizF5dS33TFyl6wDFh9uN15cWow=
Subject key identifier: 8F:CF:1A:B5:E0:8B:D3:0F:C5:9F:68:9E:F8:8A:69:72:2F:FC:03:B2
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 12565B113FB732E522268CE6898567DC1D9DB164
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS996.roa
Signing time: Sat 11 Jul 2026 06:49:09 +0000
ROA not before: Sat 11 Jul 2026 06:44:09 +0000
ROA not after: Sat 10 Jul 2027 06:49:09 +0000
asID: 996
IP address blocks: 2a0a:ba00::/29 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:56:5b:11:3f:b7:32:e5:22:26:8c:e6:89:85:67:dc:1d:9d:b1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 11 06:44:09 2026 GMT
Not After : Jul 10 06:49:09 2027 GMT
Subject: CN=8FCF1AB5E08BD30FC59F689EF88A69722FFC03B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:f0:ad:31:43:07:54:8b:6a:64:b3:dc:c6:
0d:69:61:4d:88:3a:e4:9a:55:67:8f:07:c7:03:0f:
41:71:9a:c9:ed:0d:78:7c:e4:c6:31:60:22:2e:51:
4a:d6:68:93:cf:0c:71:de:3e:3f:4a:d3:88:f6:e6:
13:f4:41:90:00:82:5d:60:97:6e:6f:28:fc:09:ca:
e7:e4:d9:1a:39:80:1f:ae:2a:ef:8e:b7:69:16:82:
4b:fc:e6:ec:51:8c:56:a2:cb:e0:43:f1:ec:ee:a4:
19:dd:a6:a5:fa:93:ec:31:da:45:32:f2:d6:8e:63:
5c:19:46:f5:69:15:09:94:38:19:a9:76:d8:3d:70:
e6:d2:84:ae:64:16:de:bd:9f:4d:2c:e3:11:c0:73:
e6:e8:ff:e5:d1:89:9d:b4:e3:14:b7:d0:eb:f8:1f:
df:80:0a:ce:5b:8f:fb:96:a5:44:73:d2:4d:8c:09:
cb:58:13:e6:fe:34:77:a4:29:3e:87:fa:e9:fd:29:
1a:f6:b5:3e:88:25:a0:0f:21:35:af:43:20:98:5a:
b7:0f:db:31:e8:d7:22:58:f2:53:12:20:86:95:1b:
54:11:cc:b7:8f:2f:f6:4f:27:40:70:04:e8:0f:62:
2b:7f:00:0b:04:9b:dc:66:d6:90:15:17:15:a4:96:
b0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CF:1A:B5:E0:8B:D3:0F:C5:9F:68:9E:F8:8A:69:72:2F:FC:03:B2
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS996.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:ba00::/29
Signature Algorithm: sha256WithRSAEncryption
50:fa:79:1b:bb:38:9b:f6:2a:02:68:f2:c5:da:d1:b7:55:63:
8a:63:81:3c:a2:6e:b2:1d:86:8f:a3:c1:2b:18:15:c8:9c:75:
44:aa:15:24:2b:3a:15:a6:dd:2b:00:a6:18:1c:8d:53:e1:5d:
f9:b1:cd:90:82:09:50:98:20:7c:aa:65:00:83:7b:3d:96:35:
44:a6:a7:e1:02:de:25:9d:d9:67:e5:a2:8c:20:7f:16:e6:ed:
ca:31:a6:8c:82:ee:7d:78:e8:c6:0a:fa:81:80:d4:4d:e1:f3:
17:e1:83:bb:6a:e4:eb:d0:6f:99:fa:e5:0d:c9:94:b9:ef:00:
f2:76:f8:a4:5b:29:79:d8:a4:90:47:e6:e5:41:0d:34:22:12:
f9:c9:8b:7b:f8:45:62:73:01:08:12:ce:11:91:13:2d:b7:30:
1b:ed:e4:fe:c6:74:08:6c:b4:9c:93:7e:9d:0a:47:f4:d5:a1:
02:86:ce:34:6c:5f:9d:33:e1:ff:28:52:4a:bf:3b:b0:60:f5:
4e:19:16:ad:75:71:b5:8c:42:8f:46:0e:08:3a:93:df:3f:42:
2c:4d:24:11:21:e2:ad:54:c2:b7:4f:0a:8c:84:eb:5f:43:ab:
3e:89:48:4d:08:b2:ff:41:a6:a2:e7:82:d3:96:34:2e:2f:17:
83:3e:b4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:54:06 2026 by rpki-client