Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34613a3a2f34382d3438203d3e20323135393837.roa
File: 326131313a323963303a34613a3a2f34382d3438203d3e20323135393837.roa (raw, json)
Hash identifier: Qy0fyn5Afgkj7vXOdFc3+tq4/NCeWiLCeyy73O/wW24=
Subject key identifier: C9:18:37:0A:F3:FB:51:CC:3F:72:79:8E:55:35:B8:4B:80:DF:CD:4C
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 46DA2CF1C822F79C90787552A4696334DF48795F
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34613a3a2f34382d3438203d3e20323135393837.roa
Signing time: Mon 20 Jul 2026 18:22:56 +0000
ROA not before: Mon 20 Jul 2026 18:17:56 +0000
ROA not after: Mon 19 Jul 2027 18:22:56 +0000
asID: 215987
IP address blocks: 2a11:29c0:4a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:da:2c:f1:c8:22:f7:9c:90:78:75:52:a4:69:63:34:df:48:79:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Jul 20 18:17:56 2026 GMT
Not After : Jul 19 18:22:56 2027 GMT
Subject: CN=C918370AF3FB51CC3F72798E5535B84B80DFCD4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d3:1b:af:8c:7d:a8:9c:2d:5c:d0:47:49:5e:
e0:d1:34:b2:fb:6e:09:0c:f9:73:37:6b:e0:e3:7e:
4c:eb:d7:92:5f:d8:db:92:42:85:99:d3:02:5c:a2:
c4:ea:75:ab:af:3c:c6:a6:27:6e:32:ed:df:58:bf:
d2:41:b9:c6:78:f9:c8:22:f5:49:0c:a5:2d:a2:a5:
0b:3c:c1:4e:3c:7a:f6:2b:d6:4c:19:17:8a:e1:aa:
59:85:c5:58:a2:33:2a:dd:16:7b:a2:9c:c0:68:cc:
1e:08:95:86:b3:cb:9d:6c:b4:bf:22:34:57:9f:e3:
c9:31:15:d2:e1:04:0d:cb:d0:8a:9b:10:11:4a:ac:
c0:d8:4a:f7:b5:c9:f1:81:59:a9:24:50:58:a7:18:
82:fc:fc:2b:77:78:f1:bc:e7:1a:c1:8e:23:97:f1:
84:39:08:bb:c4:1f:9d:ab:ec:a8:a5:00:a6:97:86:
ec:c4:3f:cf:72:c8:3e:06:8d:50:a9:ca:84:1e:57:
4e:27:df:45:1a:db:47:5f:90:00:e4:ad:3a:fe:16:
19:d8:fe:ab:43:bd:b9:46:4b:04:c4:b0:f3:77:03:
43:24:15:39:36:25:0d:57:6a:d8:e6:6c:6e:4d:b7:
d7:2b:16:46:29:4a:39:92:90:0d:7b:5e:b8:de:38:
40:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:18:37:0A:F3:FB:51:CC:3F:72:79:8E:55:35:B8:4B:80:DF:CD:4C
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34613a3a2f34382d3438203d3e20323135393837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:4a::/48
Signature Algorithm: sha256WithRSAEncryption
48:12:86:6f:95:d0:55:f6:64:6e:1e:60:1b:a6:12:36:d4:9d:
9d:c6:83:0e:66:32:3b:5b:09:3a:13:b6:fc:44:d0:d7:3d:f8:
ca:f3:a7:bd:e8:a9:a8:d1:c6:f0:45:90:1d:e1:13:00:ab:3a:
75:5a:34:7f:3c:5d:ba:af:cf:c7:47:61:1f:6a:c7:48:fb:df:
a8:c6:ca:2c:d4:4a:6c:6e:d3:33:49:9f:e2:8a:1e:28:bc:1a:
98:f6:85:3d:39:50:76:82:ea:f0:b6:8d:d7:17:c9:da:d3:3d:
40:4f:01:5f:c4:14:db:a5:0e:e5:08:71:ec:3f:ac:f7:3b:f5:
82:ed:4a:03:e0:56:c0:c6:a4:09:1a:74:ce:00:9c:2e:c6:fd:
c4:15:f1:34:c6:a1:82:f4:09:01:a4:44:5c:92:d0:fa:df:76:
27:d4:29:2a:6d:32:c3:bb:36:03:dc:1f:e4:6f:d8:a3:a1:0d:
23:1b:02:a9:3c:48:a6:c4:98:05:3b:c2:40:5c:42:a1:ec:14:
c1:fc:42:42:7d:6a:88:39:6b:b1:2e:59:4c:46:43:cd:09:fd:
7d:a1:74:f7:dc:d2:54:14:d4:9e:68:57:46:b9:6b:8e:3b:a1:
0c:cc:20:44:84:f3:a4:31:ff:3e:c9:10:f3:88:73:a2:f8:ad:
a5:79:07:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:12:12 2026 by rpki-client