Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a346430303a3a2f34302d3438203d3e20323135363338.roa
File: 326131313a323963303a346430303a3a2f34302d3438203d3e20323135363338.roa (raw, json)
Hash identifier: Abw8OXS6Au2JJ7QPGo0ZEajL0YFPziFA23d2r2LwRaM=
Subject key identifier: 5E:1E:BF:51:0C:4C:F5:5D:64:66:4D:CB:9A:87:3A:7A:5D:59:9D:CB
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 02F1F3D40AE93D64DA5E00D1CC226E8C2E543248
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a346430303a3a2f34302d3438203d3e20323135363338.roa
Signing time: Tue 21 Jul 2026 21:22:56 +0000
ROA not before: Tue 21 Jul 2026 21:17:56 +0000
ROA not after: Tue 20 Jul 2027 21:22:56 +0000
asID: 215638
IP address blocks: 2a11:29c0:4d00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:f1:f3:d4:0a:e9:3d:64:da:5e:00:d1:cc:22:6e:8c:2e:54:32:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Jul 21 21:17:56 2026 GMT
Not After : Jul 20 21:22:56 2027 GMT
Subject: CN=5E1EBF510C4CF55D64664DCB9A873A7A5D599DCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e2:fd:4b:3f:61:61:6e:87:be:82:32:14:46:
e6:4d:e6:66:1e:55:a6:7d:1a:ab:f7:92:da:00:f6:
af:1e:f2:70:7e:eb:5f:3d:fc:17:d6:5c:60:47:c1:
07:3d:63:b0:ec:65:ad:50:01:49:9e:d3:54:0a:f4:
ae:af:40:88:ea:77:05:6c:b5:77:15:1f:91:12:ef:
4f:ee:28:b6:1a:ac:77:d7:f7:7a:52:c9:58:07:57:
81:93:31:63:fd:bb:e3:ca:28:e7:cd:ae:e2:fa:29:
92:fd:9b:49:d6:a9:4d:15:e1:7b:4d:52:30:43:3d:
87:a6:b6:46:5d:64:e8:da:85:56:be:75:56:9f:11:
8d:61:33:10:72:e2:f4:64:ae:f6:5b:d3:50:b7:6f:
f1:be:e2:06:74:b8:f8:a6:96:c2:e4:ba:8e:9a:07:
ba:0d:55:a6:67:e3:6b:61:11:d4:e7:97:de:98:3b:
dc:d5:91:ae:b6:9a:d7:39:52:5a:96:91:96:84:1b:
5e:f9:34:f3:e8:56:79:00:6c:ec:dc:3b:57:df:37:
e5:02:ab:17:84:fe:d8:c4:c4:c8:df:1f:4f:05:00:
1a:63:fb:f8:eb:0a:66:ef:8f:66:d0:4e:6b:d6:18:
73:71:7a:f6:84:4b:7d:67:aa:ca:5c:bf:e9:88:5c:
59:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1E:BF:51:0C:4C:F5:5D:64:66:4D:CB:9A:87:3A:7A:5D:59:9D:CB
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a346430303a3a2f34302d3438203d3e20323135363338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:4d00::/40
Signature Algorithm: sha256WithRSAEncryption
09:b5:eb:bb:ae:70:e9:e8:b7:97:6b:ec:9e:96:65:7f:b2:2c:
00:14:0b:27:97:64:d1:33:0e:9a:23:ea:59:f8:c8:80:fa:ac:
f6:f2:98:ae:1a:a1:74:57:7a:8e:6b:e5:84:38:dc:b8:3d:46:
b0:9d:c1:74:81:81:d1:17:63:72:59:90:a7:e1:15:d3:87:7b:
93:fe:7b:f3:d0:13:9e:32:da:f3:f1:51:71:86:65:82:c0:39:
6c:f1:58:9d:96:77:b5:43:c8:9a:66:46:e3:f8:37:88:d4:a7:
4e:72:1d:d8:84:b5:69:0d:42:4f:4e:65:5c:e8:9c:d5:58:7a:
64:81:7b:85:b5:d7:c6:82:8b:77:71:0a:16:8f:3c:b9:fb:7c:
97:0e:40:30:04:c0:3d:06:30:c5:e4:68:38:14:ee:3a:31:67:
4a:c8:cb:60:5e:aa:dc:51:b5:3e:9e:a5:cb:fe:2d:db:fb:9c:
a2:39:0c:fd:51:3b:84:b7:7e:c8:8b:da:3e:c3:46:95:d4:82:
89:3c:4e:d7:32:2d:45:d7:30:a5:6c:08:d4:91:c0:ee:9d:61:
ba:af:9c:3d:9c:9f:80:dd:0a:d3:b0:43:f5:d1:01:37:12:c4:
c7:9e:ad:50:21:8b:40:d1:78:bb:86:40:0d:ba:86:9c:dd:d7:
69:38:77:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:01:56 2026 by rpki-client