Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33333a3a2f34382d3438203d3e20323130333338.roa
File: 326131313a323963303a33333a3a2f34382d3438203d3e20323130333338.roa (raw, json)
Hash identifier: YqkVGBE1pKAeuEe6GLJok14qLOyiy6qCzX/CDigeTJA=
Subject key identifier: 4F:AC:B2:05:9B:24:00:FD:15:1D:7D:C7:05:BC:86:F1:85:95:35:7F
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 69979D5F6C924DF2B2C8EBACEFB6752306504EF3
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33333a3a2f34382d3438203d3e20323130333338.roa
Signing time: Wed 17 Sep 2025 19:41:21 +0000
ROA not before: Wed 17 Sep 2025 19:36:21 +0000
ROA not after: Wed 16 Sep 2026 19:41:21 +0000
asID: 210338
IP address blocks: 2a11:29c0:33::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:97:9d:5f:6c:92:4d:f2:b2:c8:eb:ac:ef:b6:75:23:06:50:4e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Sep 17 19:36:21 2025 GMT
Not After : Sep 16 19:41:21 2026 GMT
Subject: CN=4FACB2059B2400FD151D7DC705BC86F18595357F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:60:d7:b4:8b:67:6c:7a:ae:b4:2a:5b:02:fa:
51:15:c5:2e:ee:59:09:fe:9f:31:69:66:ad:25:2e:
21:3c:b7:61:c2:18:a7:cf:11:da:d0:99:40:27:fe:
60:86:6c:a7:a1:64:45:02:f7:9b:6a:be:35:e1:a3:
58:d6:c1:a1:b9:71:00:40:7a:6e:41:cd:36:d0:b9:
d6:65:3a:a9:f7:f6:5e:00:a4:f5:b7:d3:73:68:e5:
22:a0:82:50:8c:18:85:af:b8:9e:52:0e:c8:50:6c:
ce:1f:b0:7e:75:51:85:23:6a:c0:35:6d:c8:9c:3d:
e8:9e:73:57:d2:53:4c:40:17:ab:1d:59:4e:a3:88:
0d:83:5c:93:72:14:41:98:be:66:83:f2:43:c9:be:
b2:7f:3e:8f:7c:b6:d1:23:b8:8b:c5:7a:c1:8c:3f:
51:38:72:3c:0e:61:0b:fd:1b:1e:58:a4:e7:d1:79:
2b:0c:3d:4b:87:e3:b8:92:27:60:29:c7:d6:24:29:
b0:48:cc:20:f9:b1:62:d0:6b:0a:25:b5:e5:64:89:
00:97:78:48:ce:00:02:2f:58:ac:5f:6e:94:79:c0:
29:f2:57:3a:8e:3b:c8:8e:a1:63:02:2b:bb:e5:56:
95:d3:9d:f3:a8:5e:15:ab:fc:87:ff:81:8e:49:0a:
a5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AC:B2:05:9B:24:00:FD:15:1D:7D:C7:05:BC:86:F1:85:95:35:7F
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33333a3a2f34382d3438203d3e20323130333338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:33::/48
Signature Algorithm: sha256WithRSAEncryption
6b:23:0b:77:03:ec:d8:a1:d9:19:7d:99:de:e0:67:d8:6a:d0:
1c:85:96:97:8b:da:3d:b9:3d:b0:41:c5:bc:e9:91:19:fb:d1:
23:d7:f9:97:16:59:94:33:e2:0b:c3:8e:3a:7b:4e:9f:1f:82:
f9:33:af:dc:41:ea:8c:f6:8c:de:34:11:ae:ad:52:48:85:bf:
f5:18:ba:ea:ce:e6:12:0a:36:71:49:d0:2e:ac:51:9b:60:3d:
9c:15:c1:28:9e:26:e7:44:0e:f1:ab:54:bf:ff:45:65:a7:e5:
89:8f:e3:c0:91:cc:a9:f1:a0:ed:94:21:65:60:0c:79:7a:09:
ca:a7:3e:47:66:44:99:89:19:d4:8a:1f:9b:a9:19:ae:64:93:
d9:0d:af:39:74:a8:a0:33:05:b9:0f:83:bc:04:fd:b8:d9:5c:
5e:56:bb:59:e7:93:92:34:d2:81:cb:d0:f5:fb:8c:74:57:03:
b9:3f:fa:db:cd:24:f5:e3:7e:e2:9c:31:25:9e:cc:3e:db:5d:
8d:a9:e6:d3:92:69:1a:58:e6:11:6d:51:aa:a8:67:25:20:37:
f5:17:c0:76:ba:df:8f:54:58:c7:92:fc:24:fa:f9:0d:2c:54:
fe:f2:3a:74:9e:51:c6:16:e6:60:a7:99:35:2a:b9:fe:1f:7a:
89:9a:80:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:09:29 2025 by rpki-client