Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a35303a3a2f34382d3438203d3e203136353039.roa
File: 326131313a323963303a35303a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier: EehPEL/1SX8wmZV5geC/2ZWqmF+6mweqOq/vJvXH3KM=
Subject key identifier: 1A:83:0E:C5:9C:5C:F0:28:42:81:8B:30:ED:FF:17:A8:EB:9D:B2:F6
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 2E312BF2158B7A864949E53D2660EB15F62C247B
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a35303a3a2f34382d3438203d3e203136353039.roa
Signing time: Thu 11 Sep 2025 01:59:14 +0000
ROA not before: Thu 11 Sep 2025 01:54:14 +0000
ROA not after: Thu 10 Sep 2026 01:59:14 +0000
asID: 16509
IP address blocks: 2a11:29c0:50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:31:2b:f2:15:8b:7a:86:49:49:e5:3d:26:60:eb:15:f6:2c:24:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Sep 11 01:54:14 2025 GMT
Not After : Sep 10 01:59:14 2026 GMT
Subject: CN=1A830EC59C5CF02842818B30EDFF17A8EB9DB2F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:da:63:8b:df:02:f8:3d:2c:42:59:51:3f:99:
f3:d5:e7:31:c5:ad:cc:24:e6:51:17:75:75:48:5e:
3d:63:83:5a:84:ba:a0:41:38:e6:2b:45:f6:41:bb:
97:6e:b4:c3:41:fa:ee:12:ab:b3:29:d9:a5:d3:72:
83:47:e5:ac:0a:84:d3:68:5b:92:90:5a:2a:c2:ce:
8c:f8:ef:d5:0e:1c:a6:be:47:d4:b1:fd:2c:a8:84:
52:5b:9d:05:8b:df:7f:5f:ee:27:59:4b:db:33:6f:
33:42:95:fd:53:88:4e:46:73:38:02:00:15:73:43:
f4:a5:80:ca:9c:a7:6e:cd:b8:74:23:09:9b:45:7d:
23:48:f4:24:7c:15:47:17:f3:e8:da:44:71:a2:e8:
e1:36:88:6b:7a:03:97:1b:6b:59:78:b2:10:ec:b2:
f6:26:5b:cd:84:ec:29:2f:cc:c2:62:0d:a9:57:c5:
74:51:ed:5b:1b:9b:20:5d:ae:a8:f3:40:33:77:8f:
af:f3:8d:18:4c:07:8b:d8:75:e0:b3:40:31:55:c8:
f8:fe:67:f9:3a:73:c1:29:8a:a1:27:63:6d:f5:c4:
67:82:af:00:41:09:da:b9:65:74:79:cc:67:53:c7:
24:84:3d:cd:36:19:cd:27:cb:37:7a:ed:91:39:9d:
4f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:83:0E:C5:9C:5C:F0:28:42:81:8B:30:ED:FF:17:A8:EB:9D:B2:F6
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a35303a3a2f34382d3438203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:50::/48
Signature Algorithm: sha256WithRSAEncryption
a3:c6:3d:23:04:71:ac:67:85:c9:27:7f:98:79:6e:c4:04:05:
59:3b:0a:09:ff:bb:25:aa:02:d8:50:04:6c:16:b7:bc:41:a6:
8f:14:59:cd:d6:e1:61:a1:c2:d6:10:dd:06:b6:b2:1c:6e:2a:
24:9d:e2:6d:1d:bf:dd:55:e6:cc:45:7d:c8:6b:a6:69:4e:56:
fe:25:f7:66:ba:e9:30:34:46:0e:d8:f1:82:ea:fd:d9:9f:bf:
eb:79:d5:3b:cb:28:dd:00:ec:76:bf:0a:24:62:43:a7:c7:8c:
aa:43:75:6b:d0:4c:2a:b1:63:7a:79:6d:99:56:76:c7:4f:7b:
4c:1e:34:b2:e0:fa:23:84:2c:01:88:9e:39:50:ae:5a:c0:28:
30:12:b0:69:99:1c:16:f1:4e:05:28:4d:3a:1d:9f:a6:35:d7:
6d:ad:36:8c:2b:a8:c0:9b:58:e1:04:ad:0f:d6:ee:ba:f0:b5:
b8:48:c4:4f:66:ea:0c:74:c9:7d:53:6c:2d:dc:17:ee:45:31:
26:4f:6b:77:c3:da:7f:57:1a:4b:63:79:d9:28:2b:12:b9:73:
ca:5e:ee:09:c6:40:37:49:5d:20:8d:42:77:85:8b:60:cf:48:
e0:0c:c2:03:11:af:66:ee:63:aa:43:78:49:01:f1:af:58:91:
12:6c:07:be
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIULjEr8hWLeoZJSeU9JmDrFfYsJHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTk2ZDg1OTk2ZTkzNTRkMTAwNWU0NGM3ODFkMzhhZGNm
MTA4Mjg3MzAeFw0yNTA5MTEwMTU0MTRaFw0yNjA5MTAwMTU5MTRaMDMxMTAvBgNV
BAMTKDFBODMwRUM1OUM1Q0YwMjg0MjgxOEIzMEVERkYxN0E4RUI5REIyRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU2mOL3wL4PSxCWVE/mfPV5zHF
rcwk5lEXdXVIXj1jg1qEuqBBOOYrRfZBu5dutMNB+u4Sq7Mp2aXTcoNH5awKhNNo
W5KQWirCzoz479UOHKa+R9Sx/SyohFJbnQWL339f7idZS9szbzNClf1TiE5GczgC
ABVzQ/SlgMqcp27NuHQjCZtFfSNI9CR8FUcX8+jaRHGi6OE2iGt6A5cba1l4shDs
svYmW82E7CkvzMJiDalXxXRR7VsbmyBdrqjzQDN3j6/zjRhMB4vYdeCzQDFVyPj+
Z/k6c8EpiqEnY231xGeCrwBBCdq5ZXR5zGdTxySEPc02Gc0nyzd67ZE5nU8lAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUGoMOxZxc8ChCgYsw7f8XqOudsvYwHwYDVR0j
BBgwFoAU6W2FmW6TVNEAXkTHgdOK3PEIKHMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm
YmY1LzAvRTk2RDg1OTk2RTkzNTREMTAwNUU0NEM3ODFEMzhBRENGMTA4Mjg3My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZXMkZtVzZUVk5FQVhrVEhnZE9LM1BF
SUtITS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExMTViYzYt
MTBmNi00YWYzLWJhMDktOGI2ODdhNTZmYmY1LzAvMzI2MTMxMzEzYTMyMzk2MzMw
M2EzNTMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNjM1MzAzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACoRKcAAUDANBgkqhkiG9w0BAQsFAAOCAQEAo8Y9IwRxrGeFySd/mHluxAQF
WTsKCf+7JaoC2FAEbBa3vEGmjxRZzdbhYaHC1hDdBrayHG4qJJ3ibR2/3VXmzEV9
yGumaU5W/iX3ZrrpMDRGDtjxgur92Z+/63nVO8so3QDsdr8KJGJDp8eMqkN1a9BM
KrFjenltmVZ2x097TB40suD6I4QsAYieOVCuWsAoMBKwaZkcFvFOBShNOh2fpjXX
ba02jCuowJtY4QStD9buuvC1uEjET2bqDHTJfVNsLdwX7kUxJk9rd8Paf1caS2N5
2SgrErlzyl7uCcZAN0ldII1Cd4WLYM9I4AzCAxGvZu5jqkN4SQHxr1iREmwHvg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:55:44 2025 by rpki-client