Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32383a3a2f34382d3438203d3e20323136313934.roa
File: 326131313a323963303a32383a3a2f34382d3438203d3e20323136313934.roa (raw, json)
Hash identifier: 92jEyPYC0j+KbanxDUmge+HI7M7C5xN9N+tNTMNv9vU=
Subject key identifier: 06:09:1C:93:C2:83:B5:06:CC:DC:90:2C:B0:C2:4C:66:81:F1:ED:A5
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 10D17FE7F597D74C48AF64FADBBE0E731D0F82C5
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32383a3a2f34382d3438203d3e20323136313934.roa
Signing time: Wed 15 Jul 2026 22:22:56 +0000
ROA not before: Wed 15 Jul 2026 22:17:56 +0000
ROA not after: Wed 14 Jul 2027 22:22:56 +0000
asID: 216194
IP address blocks: 2a11:29c0:28::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:d1:7f:e7:f5:97:d7:4c:48:af:64:fa:db:be:0e:73:1d:0f:82:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Jul 15 22:17:56 2026 GMT
Not After : Jul 14 22:22:56 2027 GMT
Subject: CN=06091C93C283B506CCDC902CB0C24C6681F1EDA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ab:f4:6e:4b:18:17:6f:b3:60:4c:91:b3:9d:
a1:a3:dd:c5:3f:32:8e:c1:31:66:b7:f8:19:fc:73:
9d:3d:de:5b:1f:f4:eb:d5:f7:c8:e0:30:40:85:a3:
7f:f2:31:f6:cd:ec:c3:6e:53:95:0d:c7:f6:f0:48:
fa:fb:65:6b:a2:d4:d4:60:94:2d:2e:dc:92:cc:aa:
1b:90:61:15:6e:45:7b:33:8b:66:c0:30:30:a8:7f:
f3:c6:60:9d:f9:f0:34:94:81:01:63:83:ea:9f:56:
9d:a3:ee:00:45:48:32:93:1b:ba:05:26:d4:70:16:
a7:16:a3:69:4a:43:41:df:b4:6a:7e:0f:5d:c5:19:
d3:3c:8e:e7:6a:f1:51:e1:97:29:0f:08:5a:61:12:
a3:e2:9c:16:91:c3:7d:1c:3f:c9:8c:a1:7f:cc:ad:
b2:c0:ac:14:e8:75:24:ee:1a:8b:70:ee:22:2d:ce:
aa:4e:3c:66:7c:7b:ff:84:84:67:8a:52:42:2a:69:
9d:62:67:6d:0f:f6:35:27:96:59:5b:ab:a7:21:66:
c1:eb:b8:19:62:19:9c:cf:45:9b:31:4f:71:10:ea:
e3:d2:55:0c:ac:23:fb:50:a1:39:83:7f:27:72:4c:
8d:e8:d7:d5:d7:61:e3:29:81:69:bf:c9:b2:3a:b6:
fa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:09:1C:93:C2:83:B5:06:CC:DC:90:2C:B0:C2:4C:66:81:F1:ED:A5
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32383a3a2f34382d3438203d3e20323136313934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:28::/48
Signature Algorithm: sha256WithRSAEncryption
66:f9:d7:53:4d:71:8a:1e:4b:41:ee:49:18:68:51:64:fe:65:
70:4b:23:36:96:ed:c1:20:3f:0c:5e:a4:4b:ff:b0:65:2f:aa:
77:f3:a7:0a:e4:93:16:e4:69:40:05:3d:71:58:53:d5:07:de:
1b:8a:a6:97:00:fb:f8:94:af:34:c9:b6:31:ec:52:af:37:48:
50:e6:45:66:09:56:38:8c:e5:02:c4:65:ab:f1:e1:b2:ef:c1:
31:30:ab:3d:83:90:2f:6f:b4:da:68:b4:21:68:2a:01:aa:e1:
a8:a8:1d:2b:e9:e2:f5:1b:2c:41:ab:3b:46:13:f5:97:70:18:
9f:d2:2b:f5:4b:31:89:cf:f6:0a:0b:f0:06:de:b9:92:17:76:
69:6e:ad:98:6d:85:e7:8e:1c:25:8a:dd:88:32:0a:55:0d:98:
9a:16:f5:a6:9b:9d:4b:40:17:45:5a:32:26:70:e8:b8:92:24:
2a:42:c1:6c:f7:e2:fa:ac:da:04:0e:c8:d4:b0:9a:47:37:d1:
d1:19:8a:0e:57:ff:ca:65:e2:5e:2b:3f:bb:66:ab:28:11:a0:
4d:e6:97:f4:f4:c3:6b:8a:af:1a:e9:94:bf:de:06:27:8f:6d:
af:4b:5a:95:74:d0:59:91:71:41:f8:e7:4b:fe:b1:7b:38:a3:
1e:72:b0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:00:05 2026 by rpki-client