Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32623a3a2f34382d3438203d3e20323135393533.roa
File: 326131313a323963303a32623a3a2f34382d3438203d3e20323135393533.roa (raw, json)
Hash identifier: VUXDSVAqO7YG07xyIqL8Lw/hl3VchZDKOPW+xKZHE8o=
Subject key identifier: 24:5E:65:2C:C4:9B:3A:14:3A:71:2D:30:15:B5:A5:21:E8:6F:5D:EE
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 423BE70252E1A71E1A91E61FF52AE3A102AFC158
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32623a3a2f34382d3438203d3e20323135393533.roa
Signing time: Sat 04 Oct 2025 09:43:18 +0000
ROA not before: Sat 04 Oct 2025 09:38:18 +0000
ROA not after: Sat 03 Oct 2026 09:43:18 +0000
asID: 215953
IP address blocks: 2a11:29c0:2b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:3b:e7:02:52:e1:a7:1e:1a:91:e6:1f:f5:2a:e3:a1:02:af:c1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Oct 4 09:38:18 2025 GMT
Not After : Oct 3 09:43:18 2026 GMT
Subject: CN=245E652CC49B3A143A712D3015B5A521E86F5DEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:17:db:ec:5c:c7:af:15:0f:f0:72:bd:e5:93:
83:87:49:b9:f2:75:91:d4:74:3d:38:c4:ac:c9:f8:
2e:b8:a7:30:71:69:45:78:be:c9:72:bb:57:4f:77:
d5:fc:45:aa:58:5a:85:a7:0f:d3:f7:90:02:d7:89:
cd:0e:c2:36:25:68:95:77:63:6c:82:c9:16:31:d2:
ba:d0:f2:8f:d5:fb:2b:9b:fb:5a:d9:79:bd:81:39:
46:64:82:68:10:6f:33:fd:08:23:cb:7e:0f:3a:16:
46:8f:9e:da:70:ca:b0:78:1c:d8:40:82:35:3c:ac:
57:5b:71:bb:1c:e2:71:9d:4c:c2:64:45:08:71:81:
6c:6c:2a:34:bc:26:2d:7d:ad:fa:99:53:17:b1:fa:
ff:d2:a4:3f:28:bf:16:2f:32:44:15:b8:81:4a:3b:
59:7d:0a:53:3a:ea:1a:68:5f:7e:69:f2:5f:93:2a:
60:80:e2:ae:c1:e6:bd:6b:9b:0c:91:cd:f3:aa:3a:
76:67:59:ee:5c:87:3a:e2:85:6d:f1:fb:a6:c6:ee:
36:0b:1e:ae:ed:a5:83:5e:97:ab:d3:c8:41:4c:08:
b7:5a:ba:6b:c8:eb:a3:ee:61:f9:ad:6a:2b:5d:2c:
61:e5:26:ec:0e:db:be:0c:3c:07:99:d6:55:e8:d2:
62:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5E:65:2C:C4:9B:3A:14:3A:71:2D:30:15:B5:A5:21:E8:6F:5D:EE
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32623a3a2f34382d3438203d3e20323135393533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:2b::/48
Signature Algorithm: sha256WithRSAEncryption
8e:b8:5e:cf:3a:d6:60:49:0a:e5:04:76:a9:dc:a9:a0:e1:43:
8a:e6:50:c9:89:f1:d1:bc:28:86:cb:7d:17:68:8f:e2:83:9b:
11:b5:35:29:11:da:fc:1e:8e:a9:2b:99:1e:60:4e:4b:d0:8f:
84:26:34:c0:48:cf:5e:f5:83:26:71:ab:1b:7c:83:e3:dd:2a:
78:6a:2b:6d:ea:0f:b3:57:f8:86:12:9e:74:e8:03:d3:87:63:
3a:56:35:1a:c3:05:91:6b:80:13:6b:4c:6d:15:a2:86:aa:2b:
2f:6d:69:e4:d4:4e:db:68:2a:01:f6:29:ad:8a:6a:5a:ed:f6:
ce:3f:44:a7:28:9f:34:f6:99:45:61:92:56:15:70:18:da:af:
ef:dd:5b:13:9f:33:10:8e:e1:1a:59:d6:a3:18:89:fe:00:7a:
6c:b9:9f:43:68:fe:41:57:15:ec:2c:19:e9:b1:40:08:55:c6:
6a:74:89:4a:04:92:4d:44:ab:11:d1:3c:dc:b1:7f:29:85:36:
bd:08:7f:90:57:2c:5f:db:76:8a:a3:20:ac:cb:82:4c:8c:d6:
d1:24:c5:bb:13:a1:9c:43:49:35:68:9e:a5:87:e7:07:8d:39:
fe:0e:6f:24:e1:39:ab:b2:b3:82:70:7a:78:25:04:b2:96:76:
d2:df:51:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:09:24 2025 by rpki-client