Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34393a3a2f34382d3438203d3e203134363138.roa
File: 326131313a323963303a34393a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier: jUWZJb6cyo+x1ns9zsgFr8taChQPQczaq8sPw7oKH3Y=
Subject key identifier: E7:B1:ED:C3:C6:A6:AC:EE:FA:A8:15:71:C4:60:D2:02:E0:18:CA:D7
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 2A0009BB3630BAD3F39DBBDC5630EE363929DB66
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34393a3a2f34382d3438203d3e203134363138.roa
Signing time: Tue 07 Jul 2026 22:22:55 +0000
ROA not before: Tue 07 Jul 2026 22:17:55 +0000
ROA not after: Tue 06 Jul 2027 22:22:55 +0000
asID: 14618
IP address blocks: 2a11:29c0:49::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:00:09:bb:36:30:ba:d3:f3:9d:bb:dc:56:30:ee:36:39:29:db:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Jul 7 22:17:55 2026 GMT
Not After : Jul 6 22:22:55 2027 GMT
Subject: CN=E7B1EDC3C6A6ACEEFAA81571C460D202E018CAD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:2f:85:cf:d3:b2:f1:4d:60:6e:f0:2a:e2:
cc:17:23:7e:d5:d5:bd:00:c6:f3:3e:cb:3a:ee:36:
d3:fd:cd:0d:f7:75:4f:54:69:38:c5:4d:9b:ca:34:
91:32:7e:87:aa:d2:74:5d:c5:0b:09:d7:99:98:f2:
d5:c5:e4:0e:f6:7a:f0:3f:5c:02:f1:e1:36:53:71:
06:84:86:96:b7:92:7e:7f:b5:d9:6c:dc:8b:3f:9d:
57:76:f3:17:08:64:47:c7:76:f3:64:9c:2f:c4:a1:
32:bf:2a:1a:cb:44:23:f5:82:da:d8:63:b9:e9:d6:
6a:5d:07:2e:7c:bd:72:a5:76:fb:3f:bf:ad:c0:3a:
ac:64:22:73:07:bb:38:34:2b:9c:d4:c3:5a:81:b3:
77:e9:a1:70:a3:16:26:39:95:b7:16:88:05:a0:97:
ab:b8:60:2c:49:68:f0:b2:a7:77:76:d6:50:ed:8f:
c7:fb:aa:66:5b:d8:24:e1:95:21:c6:38:4c:b3:15:
cf:06:4e:31:32:ef:ac:bf:a3:20:84:db:25:34:42:
8d:d9:e5:8e:5c:1e:b6:de:76:8a:0e:81:e3:6a:39:
70:ce:48:99:af:dd:8b:6b:ee:2b:5c:36:51:d5:52:
70:cd:54:08:db:c7:bd:60:8d:86:3e:02:85:a2:8b:
7b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B1:ED:C3:C6:A6:AC:EE:FA:A8:15:71:C4:60:D2:02:E0:18:CA:D7
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34393a3a2f34382d3438203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:49::/48
Signature Algorithm: sha256WithRSAEncryption
0e:36:c7:53:64:43:c4:f1:83:cf:0c:85:6d:45:3a:2f:b9:2c:
e3:f5:6a:04:84:28:bd:32:b5:34:b2:c2:32:81:18:cb:7e:4a:
ce:b2:37:ad:2f:09:1f:7d:e0:f0:2b:69:3f:3a:d9:83:70:d1:
3b:7f:e5:64:9b:3a:5b:80:bd:61:77:51:11:6f:2d:6b:47:fc:
b4:a1:72:25:8d:fb:98:d4:87:6f:96:05:40:28:89:94:2f:47:
7b:c6:0b:52:e6:3a:d3:32:7e:2a:99:af:49:8f:b2:35:27:a8:
c4:6c:2f:22:b2:be:b5:a2:76:ee:9e:03:45:07:6a:f5:5f:3f:
a1:f6:7c:c0:9c:a6:1e:24:d2:49:c7:b0:22:c4:d6:b1:3d:3a:
96:27:b0:30:75:50:55:90:63:de:09:60:02:d8:b7:51:eb:cd:
11:3e:df:1d:dc:f7:b9:59:ba:a0:97:ab:bb:39:04:1f:21:0b:
27:74:0b:11:4c:d3:60:02:e7:41:b8:ae:b8:52:76:8d:52:c3:
2a:1b:27:17:ce:8c:56:f7:b0:63:59:93:ce:a8:15:20:ef:ce:
55:7f:55:a2:eb:9c:f8:d0:48:d6:db:54:cf:99:49:05:4a:ea:
d9:72:dd:9b:51:3a:5d:96:fe:b0:41:f4:83:e4:7e:90:f0:c7:
50:3f:a6:55
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:59:57 2026 by rpki-client