Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336534303a3a2f34342d3438203d3e203230343733.roa
File: 326131313a323963303a336534303a3a2f34342d3438203d3e203230343733.roa (raw, json)
Hash identifier: 5aQesgvO2ImDaMMLSiH63hgRB1qkvdgXGvwqDGW0vY4=
Subject key identifier: 47:6C:5C:68:AD:D0:D1:6D:37:E0:4F:61:DE:B3:62:C9:24:A5:23:48
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 3529E162392CAA2A4B31A46A85B76F5F199A8AEB
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336534303a3a2f34342d3438203d3e203230343733.roa
Signing time: Sun 27 Sep 2026 10:23:03 +0000
ROA not before: Sun 27 Sep 2026 10:18:03 +0000
ROA not after: Sun 26 Sep 2027 10:23:03 +0000
asID: 20473
IP address blocks: 2a11:29c0:3e40::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 20:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:29:e1:62:39:2c:aa:2a:4b:31:a4:6a:85:b7:6f:5f:19:9a:8a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Sep 27 10:18:03 2026 GMT
Not After : Sep 26 10:23:03 2027 GMT
Subject: CN=476C5C68ADD0D16D37E04F61DEB362C924A52348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e6:15:29:38:6c:ae:55:13:f5:83:67:85:c1:
a7:89:8d:c4:b3:f6:4e:43:8a:27:47:28:7b:62:f3:
95:93:2d:c4:85:38:0a:90:a4:d9:fe:03:af:40:9a:
bc:a7:83:99:cc:57:71:93:b0:93:78:4d:66:b4:84:
4c:e0:66:c9:ef:f5:5e:ce:0d:b6:3e:85:b5:fb:84:
29:81:67:5b:e7:9e:d0:7c:45:ee:a8:6b:ef:35:df:
58:58:34:16:56:17:04:08:e9:3a:08:a5:08:1b:97:
cb:b8:58:d0:ec:3c:28:f6:1e:b8:0a:38:62:39:05:
a6:58:65:25:fd:b8:c1:10:aa:51:e9:0d:b7:75:2c:
2a:55:ed:2b:0d:1c:64:44:85:5c:b1:41:a8:fe:09:
16:ce:5c:cd:9b:8f:26:01:3c:6d:0b:c9:2a:51:18:
2f:fc:b5:2a:01:39:df:a7:f3:85:f6:18:4e:b2:10:
30:71:ff:a8:9c:f3:b5:e6:27:11:30:82:9f:e6:e3:
66:a3:f6:20:77:9c:d0:27:22:ae:04:d5:58:6a:0d:
66:6a:4d:57:e3:dc:44:24:ab:c2:05:95:85:61:bf:
b7:c3:ee:ab:4c:bc:95:00:c6:50:5d:61:87:e1:ac:
03:9f:04:34:3e:45:d0:ea:a4:d0:db:71:a5:18:4c:
bc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6C:5C:68:AD:D0:D1:6D:37:E0:4F:61:DE:B3:62:C9:24:A5:23:48
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336534303a3a2f34342d3438203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3e40::/44
Signature Algorithm: sha256WithRSAEncryption
14:da:44:26:84:2d:78:55:16:fd:19:01:56:a3:81:e5:e7:a4:
ed:ac:fe:af:58:57:86:51:63:1f:14:dd:da:c2:5f:dd:5f:35:
21:3a:dd:0a:12:b5:48:84:88:c8:94:6e:c3:27:64:46:b8:68:
03:82:09:be:f1:28:8c:2d:3f:fc:78:9b:47:2f:aa:7c:49:20:
05:43:09:bf:ef:01:7a:c1:da:59:92:c3:a5:b8:95:42:48:1a:
ab:cf:e3:a1:e1:53:4a:16:aa:f3:7b:99:18:79:21:48:74:e8:
f8:61:7d:af:aa:cd:c0:53:88:55:a6:f9:10:9c:7e:cf:d8:ef:
2a:72:75:4b:c0:dd:ab:2e:b6:4c:69:c7:b8:59:cf:37:c6:08:
7a:04:63:af:08:1b:7d:d5:59:2b:2f:ec:e4:cb:76:e3:b3:7d:
f3:5a:74:b7:74:02:39:9d:59:68:27:2d:39:1b:ba:d3:ee:a1:
e9:15:b1:71:50:04:56:71:41:6c:09:35:47:53:4f:3f:8f:cf:
51:bd:56:6d:cb:8e:8e:04:90:86:9b:94:99:01:a2:54:92:55:
ef:ee:b4:d1:c2:2b:88:7f:91:17:7b:75:75:bd:a7:b2:ac:88:
c4:12:3f:fe:a2:46:ae:86:ed:f6:9c:5d:d7:c2:0c:d8:a6:16:
9d:00:87:fe
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUNSnhYjksqipLMaRqhbdvXxmaiuswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTk2ZDg1OTk2ZTkzNTRkMTAwNWU0NGM3ODFkMzhhZGNm
MTA4Mjg3MzAeFw0yNjA5MjcxMDE4MDNaFw0yNzA5MjYxMDIzMDNaMDMxMTAvBgNV
BAMTKDQ3NkM1QzY4QUREMEQxNkQzN0UwNEY2MURFQjM2MkM5MjRBNTIzNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS5hUpOGyuVRP1g2eFwaeJjcSz
9k5DiidHKHti85WTLcSFOAqQpNn+A69Amryng5nMV3GTsJN4TWa0hEzgZsnv9V7O
DbY+hbX7hCmBZ1vnntB8Re6oa+8131hYNBZWFwQI6ToIpQgbl8u4WNDsPCj2HrgK
OGI5BaZYZSX9uMEQqlHpDbd1LCpV7SsNHGREhVyxQaj+CRbOXM2bjyYBPG0LySpR
GC/8tSoBOd+n84X2GE6yEDBx/6ic87XmJxEwgp/m42aj9iB3nNAnIq4E1VhqDWZq
TVfj3EQkq8IFlYVhv7fD7qtMvJUAxlBdYYfhrAOfBDQ+RdDqpNDbcaUYTLyBAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUR2xcaK3Q0W034E9h3rNiySSlI0gwHwYDVR0j
BBgwFoAU6W2FmW6TVNEAXkTHgdOK3PEIKHMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm
YmY1LzAvRTk2RDg1OTk2RTkzNTREMTAwNUU0NEM3ODFEMzhBRENGMTA4Mjg3My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZXMkZtVzZUVk5FQVhrVEhnZE9LM1BF
SUtITS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExMTViYzYt
MTBmNi00YWYzLWJhMDktOGI2ODdhNTZmYmY1LzAvMzI2MTMxMzEzYTMyMzk2MzMw
M2EzMzY1MzQzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMyMzAzNDM3MzMucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwQqESnAPkAwDQYJKoZIhvcNAQELBQADggEBABTaRCaELXhVFv0ZAVaj
geXnpO2s/q9YV4ZRYx8U3drCX91fNSE63QoStUiEiMiUbsMnZEa4aAOCCb7xKIwt
P/x4m0cvqnxJIAVDCb/vAXrB2lmSw6W4lUJIGqvP46HhU0oWqvN7mRh5IUh06Phh
fa+qzcBTiFWm+RCcfs/Y7ypydUvA3asutkxpx7hZzzfGCHoEY68IG33VWSsv7OTL
duOzffNadLd0AjmdWWgnLTkbutPuoekVsXFQBFZxQWwJNUdTTz+Pz1G9Vm3Ljo4E
kIablJkBolSSVe/utNHCK4h/kRd7dXW9p7KsiMQSP/6iRq6G7facXdfCDNimFp0A
h/4=
-----END CERTIFICATE-----
Generated at Sat Oct 3 12:53:16 2026 by rpki-client