Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32633a3a2f34382d3438203d3e20323135393533.roa
File: 326131313a323963303a32633a3a2f34382d3438203d3e20323135393533.roa (raw, json)
Hash identifier: V4mA1diVvCG5gmxd25BN6VLeOQtuRBlICjkEtHfg+TI=
Subject key identifier: 06:10:D9:D3:66:D9:09:5A:98:AA:9C:6F:FA:6C:83:0E:7B:F7:97:57
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 10C532849F732569AEA1A0F4FA92713A0C5A067D
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32633a3a2f34382d3438203d3e20323135393533.roa
Signing time: Sat 04 Oct 2025 09:43:32 +0000
ROA not before: Sat 04 Oct 2025 09:38:32 +0000
ROA not after: Sat 03 Oct 2026 09:43:32 +0000
asID: 215953
IP address blocks: 2a11:29c0:2c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:c5:32:84:9f:73:25:69:ae:a1:a0:f4:fa:92:71:3a:0c:5a:06:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Oct 4 09:38:32 2025 GMT
Not After : Oct 3 09:43:32 2026 GMT
Subject: CN=0610D9D366D9095A98AA9C6FFA6C830E7BF79757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8b:0a:68:1d:0d:1a:df:a6:2a:10:46:bf:2d:
07:86:45:48:d7:0f:bc:b8:ef:32:19:5e:11:f0:7b:
ab:69:6c:30:66:62:a0:71:bb:71:d2:f6:1e:2a:fb:
e5:f5:89:23:e3:f1:15:15:b1:44:64:77:98:d9:c3:
fb:8b:74:60:16:d5:24:0b:60:45:e0:dc:1d:26:98:
24:a4:e1:b0:bd:fa:ed:20:cc:88:71:0e:65:e6:79:
2a:85:07:4e:72:a8:a7:38:0b:8f:e4:ee:0a:c7:13:
46:4e:96:50:59:6b:52:4f:23:a2:78:9e:e2:c6:98:
50:23:fc:6e:e9:08:17:29:db:5d:e7:f2:d4:13:17:
ab:5e:f4:90:55:85:7e:e0:11:a2:2e:01:66:a6:85:
8c:95:7d:16:e2:f6:35:08:dc:4b:f6:34:fa:7e:ea:
9c:40:64:5f:a2:c4:6c:91:e1:89:92:24:06:8d:e4:
6e:70:98:1e:ae:8c:64:08:e3:af:98:18:69:91:c0:
dd:43:2f:a5:df:18:c8:ba:95:0a:ad:fb:80:56:ff:
4c:83:ff:24:f9:c6:d2:64:a1:54:67:32:1e:5b:7c:
13:87:91:e8:a2:b8:24:dc:3c:2b:8f:a2:82:b6:d4:
89:7e:31:14:42:58:ca:c8:ad:70:de:cd:8b:9b:18:
14:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:10:D9:D3:66:D9:09:5A:98:AA:9C:6F:FA:6C:83:0E:7B:F7:97:57
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32633a3a2f34382d3438203d3e20323135393533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:2c::/48
Signature Algorithm: sha256WithRSAEncryption
1d:35:11:ce:ba:b9:a7:d2:44:b6:42:65:32:19:5e:cf:f2:e9:
e6:0f:00:3d:e2:5a:18:5b:d0:ce:da:84:38:80:73:d8:88:6b:
ac:6d:3f:82:49:ee:6c:32:ac:2b:9d:a9:fb:00:b2:4c:f6:3f:
83:b9:88:a2:58:63:bc:6c:6f:63:be:58:8e:1f:06:80:62:50:
5a:35:5b:01:21:f1:f1:33:10:90:a3:b5:21:b7:bc:f8:87:9e:
fb:73:ab:b6:91:0e:7c:32:24:c0:c6:11:9d:cc:ef:48:5a:9a:
74:7e:45:60:6d:4b:31:46:18:0b:09:40:66:a8:a9:ac:d8:53:
f3:29:f7:2e:39:8b:83:8a:65:39:e0:90:81:c4:ae:aa:25:d9:
89:53:a0:ef:4d:47:0d:5d:b8:0e:4b:fd:61:d7:a2:7c:00:41:
1b:a5:80:df:33:94:3a:1d:24:68:25:31:a6:a0:89:8c:c9:e3:
05:fb:3d:49:b7:5a:ec:65:2c:f2:ee:20:53:6b:68:5c:e5:da:
1a:cc:a0:ee:c6:02:b9:33:9f:b6:f6:97:93:18:fe:46:28:62:
c7:d6:14:4f:bb:e3:de:40:5c:ba:27:eb:71:d6:af:1b:cb:76:
a0:91:d9:b9:4a:a1:65:03:58:5e:0c:dd:d6:8d:4b:5f:cc:23:
64:a8:1b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:09:26 2025 by rpki-client