Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33373a3a2f34382d3438203d3e20323138343437.roa
File: 326131313a323963303a33373a3a2f34382d3438203d3e20323138343437.roa (raw, json)
Hash identifier: rVPdiqKFtTW8bYhLbTkrxIINvCpSAEO8oJDzXxgX934=
Subject key identifier: 37:F8:7C:6F:85:6F:42:CE:07:D0:B3:13:F7:78:90:6A:6E:45:8B:4E
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 58646EBB7E209EC4A38EAC7E7F136D63193E1AD8
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33373a3a2f34382d3438203d3e20323138343437.roa
Signing time: Fri 09 Oct 2026 09:31:46 +0000
ROA not before: Fri 09 Oct 2026 09:26:46 +0000
ROA not after: Fri 08 Oct 2027 09:31:46 +0000
asID: 218447
IP address blocks: 2a11:29c0:37::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:64:6e:bb:7e:20:9e:c4:a3:8e:ac:7e:7f:13:6d:63:19:3e:1a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Oct 9 09:26:46 2026 GMT
Not After : Oct 8 09:31:46 2027 GMT
Subject: CN=37F87C6F856F42CE07D0B313F778906A6E458B4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bb:fc:d0:92:34:d2:37:57:8a:39:53:62:78:
f0:37:9f:bc:9f:ef:98:e5:8e:4e:1d:45:2b:de:ae:
7d:aa:29:fb:e5:79:13:6d:cd:4a:fb:53:51:b4:64:
83:51:0e:76:2f:74:77:68:01:ff:bb:28:6a:87:5a:
61:cb:d0:6f:8a:13:39:f6:d0:b6:f6:c0:25:63:40:
61:4c:19:bd:0e:d7:2d:cf:51:06:c2:d2:42:f2:94:
e5:2e:d5:35:db:52:b8:b0:23:38:0c:27:99:b6:c0:
03:f6:ac:69:af:bd:75:71:e2:a9:fa:0c:6c:71:43:
f7:ea:74:78:64:7b:3d:2e:ed:73:bb:e6:8d:6f:f0:
05:c9:00:99:c0:be:b3:54:a3:c0:db:7d:b1:7a:45:
60:c2:83:f3:c9:6c:3f:b8:5a:34:64:c9:3f:ee:e7:
3b:e5:29:51:8b:c8:4f:4f:b9:ba:0f:b5:dd:9e:bb:
46:78:3a:87:dc:43:85:56:92:ca:33:ea:75:44:bc:
e1:1a:fb:fc:08:de:a2:a1:9a:cc:42:98:43:37:5b:
52:80:43:5c:9b:58:fe:18:63:dd:f6:04:f4:a2:fc:
e6:79:0a:f6:57:61:a7:fa:f1:3e:46:84:70:cc:af:
48:98:a9:bf:86:5e:2c:1b:2d:0d:65:97:01:35:c0:
1c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F8:7C:6F:85:6F:42:CE:07:D0:B3:13:F7:78:90:6A:6E:45:8B:4E
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33373a3a2f34382d3438203d3e20323138343437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:37::/48
Signature Algorithm: sha256WithRSAEncryption
a3:67:01:c6:55:ea:70:1a:9d:34:91:a8:61:bb:a8:d8:84:e5:
31:70:2d:61:65:4f:18:65:9f:da:45:37:6a:45:ca:5a:8b:33:
83:ac:4c:74:dd:13:66:67:94:b9:c0:8a:a8:ab:11:1d:65:1a:
b3:9e:45:71:92:f4:b9:be:62:c6:2a:2d:8d:db:b4:33:64:95:
4a:91:a0:71:3e:70:ad:49:e0:58:15:8e:b5:fc:a5:57:29:2f:
a7:8d:1b:98:d4:f8:c1:f9:f8:36:c9:9f:71:d9:2a:1e:e7:20:
57:05:24:be:98:e9:62:3c:76:5b:29:37:42:82:1b:1f:e1:16:
bb:f3:90:4f:68:bc:e7:d3:77:1f:c9:90:76:b3:3f:e9:c0:4c:
a9:82:76:2c:00:2f:7d:82:0e:11:84:be:8c:43:53:13:1c:42:
60:82:32:e8:14:c9:3d:ad:24:d6:5b:8c:8f:c8:77:e2:22:81:
9f:05:7b:38:37:ad:c3:57:98:7c:15:c7:17:8c:81:e0:74:dd:
d8:90:6a:36:49:04:76:24:68:cc:b6:f9:22:3e:b5:a2:c7:d2:
0c:c6:99:cf:f6:c1:db:35:21:9f:fa:87:aa:44:62:13:40:eb:
aa:16:74:e8:c8:58:bd:d3:e4:d5:c2:c3:63:8a:84:89:85:1c:
22:f1:af:d0
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUWGRuu34gnsSjjqx+fxNtYxk+GtgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTk2ZDg1OTk2ZTkzNTRkMTAwNWU0NGM3ODFkMzhhZGNm
MTA4Mjg3MzAeFw0yNjEwMDkwOTI2NDZaFw0yNzEwMDgwOTMxNDZaMDMxMTAvBgNV
BAMTKDM3Rjg3QzZGODU2RjQyQ0UwN0QwQjMxM0Y3Nzg5MDZBNkU0NThCNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOu/zQkjTSN1eKOVNiePA3n7yf
75jljk4dRSvern2qKfvleRNtzUr7U1G0ZINRDnYvdHdoAf+7KGqHWmHL0G+KEzn2
0Lb2wCVjQGFMGb0O1y3PUQbC0kLylOUu1TXbUriwIzgMJ5m2wAP2rGmvvXVx4qn6
DGxxQ/fqdHhkez0u7XO75o1v8AXJAJnAvrNUo8DbfbF6RWDCg/PJbD+4WjRkyT/u
5zvlKVGLyE9PuboPtd2eu0Z4OofcQ4VWksoz6nVEvOEa+/wI3qKhmsxCmEM3W1KA
Q1ybWP4YY932BPSi/OZ5CvZXYaf68T5GhHDMr0iYqb+GXiwbLQ1llwE1wBwRAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUN/h8b4VvQs4H0LMT93iQam5Fi04wHwYDVR0j
BBgwFoAU6W2FmW6TVNEAXkTHgdOK3PEIKHMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm
YmY1LzAvRTk2RDg1OTk2RTkzNTREMTAwNUU0NEM3ODFEMzhBRENGMTA4Mjg3My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZXMkZtVzZUVk5FQVhrVEhnZE9LM1BF
SUtITS5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExMTViYzYt
MTBmNi00YWYzLWJhMDktOGI2ODdhNTZmYmY1LzAvMzI2MTMxMzEzYTMyMzk2MzMw
M2EzMzM3M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMTM4MzQzNDM3LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKhEpwAA3MA0GCSqGSIb3DQEBCwUAA4IBAQCjZwHGVepwGp00kahhu6jY
hOUxcC1hZU8YZZ/aRTdqRcpaizODrEx03RNmZ5S5wIqoqxEdZRqznkVxkvS5vmLG
Ki2N27QzZJVKkaBxPnCtSeBYFY61/KVXKS+njRuY1PjB+fg2yZ9x2Soe5yBXBSS+
mOliPHZbKTdCghsf4Ra785BPaLzn03cfyZB2sz/pwEypgnYsAC99gg4RhL6MQ1MT
HEJggjLoFMk9rSTWW4yPyHfiIoGfBXs4N63DV5h8FccXjIHgdN3YkGo2SQR2JGjM
tvkiPrWix9IMxpnP9sHbNSGf+oeqRGITQOuqFnToyFi90+TVwsNjioSJhRwi8a/Q
-----END CERTIFICATE-----
Generated at Tue Oct 13 14:58:30 2026 by rpki-client