Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34393a3a2f34382d3438203d3e203136353039.roa
File: 326131313a323963303a34393a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier: Yi8q8+sCHuCy8wr0BZZzX6/D5L4DAHl3jB/vcmML/gw=
Subject key identifier: 04:34:58:C8:7F:0C:71:64:E5:36:D4:9D:BC:8F:52:0B:1E:4C:A2:23
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 2CDD410E4E1EE8B9D962BF62E7B849547F66F143
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34393a3a2f34382d3438203d3e203136353039.roa
Signing time: Tue 07 Jul 2026 22:22:55 +0000
ROA not before: Tue 07 Jul 2026 22:17:55 +0000
ROA not after: Tue 06 Jul 2027 22:22:55 +0000
asID: 16509
IP address blocks: 2a11:29c0:49::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:dd:41:0e:4e:1e:e8:b9:d9:62:bf:62:e7:b8:49:54:7f:66:f1:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Jul 7 22:17:55 2026 GMT
Not After : Jul 6 22:22:55 2027 GMT
Subject: CN=043458C87F0C7164E536D49DBC8F520B1E4CA223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:ee:4b:31:bd:fa:00:b0:05:0f:a2:8c:6c:
49:5d:df:1d:7f:67:99:10:a9:4c:1f:53:fe:0b:26:
e3:91:1f:c6:44:bd:1d:37:3a:fc:47:be:cd:fa:ec:
3f:73:e0:25:b6:c9:49:c3:65:d2:e8:04:a2:d6:e7:
36:4e:ce:0d:c3:d2:dc:87:b1:3e:a4:da:3a:40:e6:
4b:2e:8e:97:af:f0:04:39:26:ca:36:4b:15:90:31:
bd:cf:10:66:ef:a4:7a:b4:34:c3:e2:ad:8c:d5:97:
20:f7:88:a2:fa:ba:ba:34:30:68:47:5c:96:f4:0b:
1f:d0:7d:34:bc:63:2b:3d:5e:d8:67:4a:56:86:03:
30:60:6f:75:ba:d6:e4:37:bf:82:5b:14:a0:46:43:
4b:4f:a3:85:ce:2d:f0:da:e6:16:3f:5e:9c:cd:1e:
f8:97:8e:1e:60:4e:82:cc:aa:1d:fe:f6:e9:9c:1b:
f2:4d:db:11:76:05:5c:e5:12:80:ff:d6:2b:8a:74:
6f:d3:23:12:2c:50:a3:68:41:d4:75:6d:a6:f5:0d:
72:f1:f7:03:af:5c:08:8e:d3:ee:0d:71:d2:82:b4:
03:b0:b1:42:4f:51:e3:4f:75:dc:f0:b6:e5:b1:2d:
41:9d:53:77:25:cc:be:c3:f6:11:cf:0d:97:c7:17:
19:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:34:58:C8:7F:0C:71:64:E5:36:D4:9D:BC:8F:52:0B:1E:4C:A2:23
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34393a3a2f34382d3438203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:49::/48
Signature Algorithm: sha256WithRSAEncryption
88:b5:41:c7:69:2f:77:5b:fe:ba:8a:3e:33:e9:46:87:8b:02:
9f:b9:43:2b:dd:a9:9b:d9:87:5e:73:a5:80:8d:fd:da:74:21:
cf:a4:3d:dc:4e:42:64:77:c0:29:5f:b4:9a:d2:54:62:38:4c:
b9:e6:d8:ef:7a:12:66:bb:ff:74:75:5e:4b:a5:00:b6:a0:09:
33:0f:64:09:0f:02:bf:63:31:97:d3:ec:07:98:f0:82:26:25:
09:dd:01:65:6b:97:d0:92:38:e9:46:12:2a:dc:33:d1:59:b2:
63:55:10:bd:19:2f:cc:04:da:53:0e:11:a7:6d:64:ee:10:bd:
d5:a1:d9:22:96:26:13:19:be:b9:9f:6f:e1:2b:f0:10:56:d7:
18:62:d3:f3:17:cc:9d:46:7e:6a:78:e4:a6:58:dd:e3:e2:71:
e8:6c:b3:6d:a2:a3:13:c7:0f:47:c8:31:ca:b5:b1:6c:ca:49:
cf:74:0d:9b:ae:53:6d:d4:73:72:0e:4f:38:dc:e9:51:e6:5b:
83:6c:93:e0:5d:41:ec:a8:1d:38:43:01:26:73:a2:a4:c8:08:
02:cb:6a:3b:db:16:ed:f9:38:f8:6e:7b:34:75:a6:85:cc:46:
32:2d:2a:5e:44:3c:64:73:52:42:8c:4b:ba:1c:44:fa:88:a2:
66:c9:3f:0a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:54:19 2026 by rpki-client