Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336438303a3a2f34342d3434203d3e20323134383036.roa
File: 326131313a323963303a336438303a3a2f34342d3434203d3e20323134383036.roa (raw, json)
Hash identifier: t1g1WEjAJ5Mgrtu+k6oiT/G7TvZHNaHTftGYWh60rj8=
Subject key identifier: D9:35:AF:D8:68:C7:5B:20:EA:B0:28:EF:E2:EB:7C:B9:8E:0F:4B:BA
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 70C6C5B3AE72974ED53B021BCBDAB2C4D1BE6265
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336438303a3a2f34342d3434203d3e20323134383036.roa
Signing time: Thu 23 Jul 2026 11:22:57 +0000
ROA not before: Thu 23 Jul 2026 11:17:57 +0000
ROA not after: Thu 22 Jul 2027 11:22:57 +0000
asID: 214806
IP address blocks: 2a11:29c0:3d80::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:c6:c5:b3:ae:72:97:4e:d5:3b:02:1b:cb:da:b2:c4:d1:be:62:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Jul 23 11:17:57 2026 GMT
Not After : Jul 22 11:22:57 2027 GMT
Subject: CN=D935AFD868C75B20EAB028EFE2EB7CB98E0F4BBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ca:4e:f3:df:12:d3:1a:35:1f:8a:d7:4e:e8:
13:8c:db:e3:21:55:71:f1:91:d1:d9:c4:f7:47:1a:
86:03:ff:64:e0:18:59:63:17:44:38:96:7c:3e:83:
d6:d8:03:b6:07:6d:83:e7:d3:c1:62:5a:65:a7:9d:
1f:cd:39:0a:45:e9:6e:b1:6a:a4:61:e9:11:23:2e:
e1:7f:07:83:2e:ac:d6:a7:8b:f9:19:05:ed:bd:18:
0f:59:79:41:90:7f:99:cc:2d:6f:cc:93:a7:2e:3b:
40:d7:94:3c:d9:d5:55:54:12:37:9f:51:a5:fd:48:
4f:93:77:c0:4b:dc:4d:8b:6f:b3:ec:eb:84:a9:7e:
df:9d:aa:4d:e8:a7:56:27:be:52:65:2a:2f:44:16:
0d:58:05:c0:db:27:c8:f9:1f:b4:f7:5c:f6:fb:3d:
59:45:47:67:1c:e0:31:92:96:64:48:d4:c3:75:d3:
8a:b4:2f:bb:a6:e9:08:b5:7c:5b:b0:f3:ca:9a:ce:
e6:45:95:db:6e:c8:c7:23:23:0c:bc:01:16:32:64:
19:5e:8a:4e:fe:8e:b6:25:14:e0:59:97:bf:db:a7:
a1:b2:e5:38:1f:8a:0e:b7:b1:5a:ed:0d:a9:9e:21:
63:cd:f8:f4:71:3b:84:92:6d:a2:f4:99:42:a5:ba:
c3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:35:AF:D8:68:C7:5B:20:EA:B0:28:EF:E2:EB:7C:B9:8E:0F:4B:BA
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336438303a3a2f34342d3434203d3e20323134383036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3d80::/44
Signature Algorithm: sha256WithRSAEncryption
60:3b:c4:13:af:d9:3b:8f:ee:56:d4:b9:32:9c:70:2d:80:b9:
09:de:27:50:c8:e0:cb:ab:8f:ab:e4:1b:4f:48:2e:b8:43:73:
38:9c:96:bf:44:79:d0:e9:82:86:89:df:6d:d1:35:22:b8:fa:
82:f7:94:b8:98:32:03:ab:6a:09:6f:a8:79:c5:54:b7:49:8b:
af:a5:ba:65:e9:8d:8c:32:1f:9d:1c:ae:f9:9d:dc:f1:55:a5:
fd:d7:01:30:9c:bb:cd:00:95:99:84:9f:a8:89:29:7c:6c:05:
02:25:aa:3f:1c:3e:40:61:68:f7:82:0e:4e:0b:a8:73:4f:81:
e3:f7:b7:43:75:67:2d:6e:b1:94:c3:40:f8:fd:eb:0d:a0:9c:
5b:c0:f9:9c:d1:20:df:76:53:5a:1c:f5:42:49:5b:0a:b2:1a:
e3:79:0a:d7:83:e6:5e:75:55:a7:6e:d5:b0:6f:b3:f3:ef:a6:
8f:ae:c9:30:af:9b:16:47:8f:2b:f2:d9:06:2c:e8:91:36:be:
ca:22:e0:c4:ca:2b:c8:48:fc:fb:aa:7f:1d:c1:b8:10:e4:25:
42:66:2e:ad:a4:d5:96:94:81:39:5b:07:83:b2:03:6e:22:fc:
35:04:8d:d2:78:79:e4:69:cc:a4:ef:e5:2a:2e:74:02:fd:40:
23:6d:e2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:13:14 2026 by rpki-client