Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336464303a3a2f34342d3434203d3e203230343733.roa
File: 326131313a323963303a336464303a3a2f34342d3434203d3e203230343733.roa (raw, json)
Hash identifier: lMpBppQcLk8fDoF2bHN3xgQY+wetwUO8yyvF4Axo/LQ=
Subject key identifier: 80:DD:1F:3E:65:F1:89:C7:D1:3C:52:87:AB:2E:EC:15:1F:DB:F4:BE
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 722DA69DAC038A2433141F5162469C7F5D133100
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336464303a3a2f34342d3434203d3e203230343733.roa
Signing time: Tue 30 Jun 2026 16:22:55 +0000
ROA not before: Tue 30 Jun 2026 16:17:55 +0000
ROA not after: Tue 29 Jun 2027 16:22:55 +0000
asID: 20473
IP address blocks: 2a11:29c0:3dd0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:2d:a6:9d:ac:03:8a:24:33:14:1f:51:62:46:9c:7f:5d:13:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Jun 30 16:17:55 2026 GMT
Not After : Jun 29 16:22:55 2027 GMT
Subject: CN=80DD1F3E65F189C7D13C5287AB2EEC151FDBF4BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8f:7c:de:10:aa:9a:07:29:62:d2:b6:ad:f9:
cd:c4:da:e3:67:df:9d:33:e6:80:dc:4c:98:f3:2c:
b3:2f:08:89:10:ba:97:ee:78:9a:8e:b2:aa:96:75:
95:80:bd:7a:83:00:3e:ec:de:af:7e:57:f4:5a:70:
10:78:c2:58:78:c3:6b:66:8d:84:1d:e5:bf:ef:5f:
bb:4e:6c:31:a6:38:3c:96:89:8d:06:7c:bf:a4:df:
a4:a1:2a:2c:85:7d:37:dc:70:62:28:4a:03:84:d8:
d9:36:17:da:0f:1a:99:74:8e:84:da:22:60:52:67:
bc:2a:20:6f:c2:bb:22:7b:81:4a:ac:54:79:a5:2e:
d2:2e:2f:f2:4a:03:d4:53:59:00:5d:34:25:0a:54:
23:5f:9c:59:6d:e5:4b:d4:46:73:b9:97:de:77:0b:
2b:21:8e:0b:2b:07:b2:27:f2:53:4a:8d:b3:46:82:
93:7c:08:e9:e2:d1:93:d5:5a:c1:b1:18:8c:a6:31:
d1:1f:9f:ec:cf:a8:ed:f7:6f:3d:05:43:82:08:62:
9a:ef:bc:cb:35:49:c5:cf:1e:0b:55:53:f2:05:20:
5f:f7:22:63:f9:ad:34:4e:86:d0:32:a5:a9:05:93:
52:db:6d:1f:42:2d:87:55:b6:7a:af:ea:e4:53:03:
32:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DD:1F:3E:65:F1:89:C7:D1:3C:52:87:AB:2E:EC:15:1F:DB:F4:BE
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336464303a3a2f34342d3434203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3dd0::/44
Signature Algorithm: sha256WithRSAEncryption
ad:0f:f0:8f:1c:ab:ca:85:ba:3e:57:9c:e0:06:65:a9:d1:bc:
ec:20:8d:80:86:5e:0c:f5:b8:9d:57:57:b2:c6:af:b5:4c:44:
c2:95:4d:54:82:1d:49:77:3b:82:bf:f4:ba:81:98:2b:f4:c3:
2e:15:3a:8f:bc:79:fd:f0:f7:e7:2e:cc:4f:ee:9d:cb:b9:73:
dd:8e:e6:b5:14:a8:63:4d:37:c2:2c:0c:7b:7e:90:aa:17:f9:
f4:ba:bd:ca:fa:62:51:4e:97:5c:34:a4:84:16:d0:07:9c:5d:
85:26:40:75:00:fd:40:6a:db:b9:95:a8:0d:96:71:95:16:48:
57:d1:55:b8:94:c0:4c:e7:03:a5:e7:e3:a0:0c:99:c1:a7:1f:
6d:9d:3f:eb:ac:55:ba:4b:6c:9b:ef:ef:fd:22:ca:d5:f4:26:
97:00:03:c4:a5:4e:ff:ca:de:d5:b6:a6:21:8a:a2:61:db:17:
d9:1d:8d:16:68:3c:49:9c:06:a0:60:07:c4:2f:eb:8b:83:ec:
20:d8:02:45:74:59:95:5f:72:3b:36:99:62:d9:c3:7d:fa:ab:
5f:65:15:8c:29:d9:dd:1b:61:0e:be:37:f8:ae:bc:d3:62:2f:
df:d4:0a:c6:c4:17:90:7a:e9:31:95:67:a4:ca:d2:bb:5e:00:
65:04:10:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:19:49 2026 by rpki-client