Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32613a3a2f34382d3438203d3e20323136313231.roa
File: 326131313a323963303a32613a3a2f34382d3438203d3e20323136313231.roa (raw, json)
Hash identifier: LXn5fx/wAVDbq8lMEGwzt2GAQeIhYFvlyVXjDn0DEcg=
Subject key identifier: D8:C8:9E:DC:9F:67:BA:4E:74:79:5A:A6:61:E6:98:C3:3E:A3:22:63
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 605207AB6132A67A781D13CA4838F773658453A2
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32613a3a2f34382d3438203d3e20323136313231.roa
Signing time: Tue 17 Jun 2025 21:10:54 +0000
ROA not before: Tue 17 Jun 2025 21:05:54 +0000
ROA not after: Tue 16 Jun 2026 21:10:54 +0000
asID: 216121
IP address blocks: 2a11:29c0:2a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:25:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:52:07:ab:61:32:a6:7a:78:1d:13:ca:48:38:f7:73:65:84:53:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Jun 17 21:05:54 2025 GMT
Not After : Jun 16 21:10:54 2026 GMT
Subject: CN=D8C89EDC9F67BA4E74795AA661E698C33EA32263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:22:1d:4a:e5:f3:c8:bf:c2:5c:76:1e:91:4a:
7d:58:13:dd:40:7c:b3:5f:72:19:81:3a:d4:0b:69:
5c:7e:3f:be:45:af:00:28:c1:1e:56:20:53:47:ee:
6a:24:27:51:3d:88:db:4c:cb:5b:de:e1:67:ba:dc:
f4:e5:f2:86:0b:ec:63:66:80:52:9c:e1:ec:55:3c:
25:70:29:e0:c5:5b:c7:f8:ac:5c:03:32:73:7a:95:
13:ed:02:cf:f7:19:94:00:bf:d4:c7:c6:ed:28:f8:
3c:0f:91:9b:4a:b4:29:97:66:20:b8:4e:9b:93:50:
26:65:b5:c0:dd:ab:77:d9:62:dd:62:d6:62:67:f9:
c3:6f:fc:cd:d7:6b:a0:4b:1e:40:9b:bc:72:14:95:
45:6b:7b:c7:38:41:29:5d:2a:67:11:91:ed:bc:ae:
dc:51:50:1d:6a:6d:44:7d:8d:6f:67:f0:54:f4:d3:
b9:64:b8:50:91:af:5a:91:23:b6:23:d7:47:f9:ea:
4b:a2:b1:f7:6e:52:be:28:a2:32:0a:8e:d0:95:35:
92:9f:fd:51:17:9a:79:bc:64:d8:53:17:a0:f7:24:
9d:4b:c3:c4:e8:40:e9:ca:e4:ca:92:ca:9e:f5:66:
ae:02:ec:f9:32:01:4c:c1:4b:1e:72:4a:03:0f:7c:
9a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C8:9E:DC:9F:67:BA:4E:74:79:5A:A6:61:E6:98:C3:3E:A3:22:63
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32613a3a2f34382d3438203d3e20323136313231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:2a::/48
Signature Algorithm: sha256WithRSAEncryption
80:10:53:9a:1c:c9:03:55:39:da:8f:72:57:d1:c6:a9:5b:0b:
a2:8d:9c:3d:d7:26:95:5c:a1:d7:bd:d1:fe:87:84:93:09:e5:
47:1e:a0:0c:90:96:5f:80:27:b0:9b:4a:1a:03:a0:ce:87:c0:
03:b3:ea:d6:bd:74:4e:f1:05:20:7d:ee:80:29:9a:e8:81:1d:
40:47:e6:10:34:2c:80:a1:e7:3f:5d:3f:60:c9:1e:38:bb:20:
f3:5f:19:d7:a6:0b:0d:82:2d:ec:66:3a:4c:bf:98:31:7f:ad:
28:72:78:0a:4d:6a:02:2a:c1:09:99:6b:f3:ac:b3:16:4f:10:
80:9a:d7:e1:ca:bd:fd:5f:3e:11:9d:62:b7:d0:9d:da:8d:58:
8f:34:b4:6a:1a:d5:dc:36:c8:be:69:f1:3c:11:31:d4:a3:c7:
c1:bb:2c:20:0c:6c:94:51:7a:6c:fb:5c:6e:77:32:e2:d2:12:
dc:dd:5d:bc:b8:f1:ca:84:7d:06:86:c6:04:cf:ca:6c:b6:80:
54:26:46:62:17:a6:0c:53:31:58:a6:4c:59:ea:31:c1:67:43:
78:a1:c7:3f:c8:0b:fd:73:64:6c:4f:1d:8e:64:b0:14:50:06:
bf:a4:b7:ed:0a:cf:e4:1b:ca:29:f1:21:36:92:88:07:c7:d6:
ce:6d:ba:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:29:21 2025 by rpki-client