Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336466303a3a2f34382d3438203d3e20323133383736.roa
File: 326131313a323963303a336466303a3a2f34382d3438203d3e20323133383736.roa (raw, json)
Hash identifier: 8hmpIlV8NjRKsMYZJC97wT0xL/6S1vzYGHy3fB57pts=
Subject key identifier: 10:B1:D7:37:BC:33:CA:D9:FA:03:65:17:65:C1:C6:2C:0F:E5:41:C7
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 7B4FED680A4C46479C066B5A57ED464E13A9F9E9
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336466303a3a2f34382d3438203d3e20323133383736.roa
Signing time: Mon 16 Mar 2026 21:22:46 +0000
ROA not before: Mon 16 Mar 2026 21:17:46 +0000
ROA not after: Mon 15 Mar 2027 21:22:46 +0000
asID: 213876
IP address blocks: 2a11:29c0:3df0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:4f:ed:68:0a:4c:46:47:9c:06:6b:5a:57:ed:46:4e:13:a9:f9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Mar 16 21:17:46 2026 GMT
Not After : Mar 15 21:22:46 2027 GMT
Subject: CN=10B1D737BC33CAD9FA03651765C1C62C0FE541C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:f9:2e:ac:65:d5:66:18:11:ad:5b:cc:44:
6b:9b:b1:a5:71:03:da:a8:e2:aa:ac:b8:e7:e1:e0:
d9:ec:5b:01:de:49:a1:22:d1:a8:42:7f:ef:55:1e:
b0:0b:e0:be:ff:79:ad:18:b8:22:99:83:4a:cd:15:
4f:16:37:20:3a:87:df:61:2b:dc:fc:57:41:9b:09:
41:8c:cc:73:95:a0:ba:ec:ad:41:c1:0d:ee:0d:2d:
ca:71:46:90:8c:94:7e:4e:b7:ad:98:80:67:f1:95:
b9:9c:b2:d0:f1:fd:16:95:e2:c3:77:45:f4:de:50:
69:37:5f:84:7e:7c:e2:47:58:60:53:21:f8:cf:f0:
6d:49:06:13:33:2b:c2:84:4a:ac:0c:fb:f3:14:bd:
54:1c:f9:84:26:a9:0d:99:19:52:30:c4:66:49:75:
e4:76:a9:83:a6:15:d8:1d:d6:d4:66:79:4a:de:86:
63:b4:a2:e9:1c:63:70:95:42:41:a5:56:cf:fc:c9:
ba:0a:12:36:85:28:2e:30:e1:0a:20:8c:dd:41:19:
ab:c0:0d:12:95:af:2c:30:9c:48:0e:30:9e:08:95:
dd:d3:c5:a0:5a:23:0f:3b:45:6d:b5:1a:92:78:9e:
41:d0:e3:86:81:8f:9a:fa:00:28:51:92:5f:c1:e1:
79:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B1:D7:37:BC:33:CA:D9:FA:03:65:17:65:C1:C6:2C:0F:E5:41:C7
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336466303a3a2f34382d3438203d3e20323133383736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3df0::/48
Signature Algorithm: sha256WithRSAEncryption
9f:47:0b:12:5a:57:32:71:6e:2a:ae:28:4b:52:11:38:e7:ce:
0a:06:6e:93:c8:9a:f2:33:41:b7:c9:ac:e0:65:02:be:fd:04:
b7:cd:11:18:f4:ec:1e:e5:2d:14:a2:2a:83:b1:41:20:d1:21:
a4:40:e9:87:10:ec:d9:8d:d5:f7:16:f4:4f:c1:00:4a:6f:ed:
fe:be:cf:3f:01:58:c8:ea:6c:dc:d1:de:5c:a1:53:1e:ae:0b:
eb:9f:73:1b:7e:fd:d2:2e:a3:06:b7:d6:16:6f:8a:43:ad:28:
1b:3c:38:2c:63:9b:2b:82:85:1f:e3:25:1f:cb:39:f1:04:8f:
6c:6e:d3:c3:5a:8a:ff:1d:2a:b4:32:dd:66:06:99:b9:6c:86:
01:0a:f9:43:2f:3b:3b:09:12:a1:05:50:ae:dd:00:28:a6:03:
34:39:f2:91:9d:f9:84:98:30:75:1a:51:27:3b:af:c9:e0:6b:
b3:d5:2c:98:55:89:66:17:2c:d6:7a:46:7e:04:b4:8d:00:6b:
11:95:a5:34:f7:fb:a6:5a:8d:df:12:94:4c:5b:27:4f:f6:1e:
37:8c:83:c2:df:76:32:27:37:dd:dd:10:e0:04:dc:f7:4b:db:
c0:56:44:11:3c:3f:0f:d5:5e:a0:a9:f1:26:73:85:9b:80:61:
84:4f:de:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:23:23 2026 by rpki-client