Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a35303a3a2f34382d3438203d3e20323134313636.roa
File: 326131313a323963303a35303a3a2f34382d3438203d3e20323134313636.roa (raw, json)
Hash identifier: hX0SxfPO7ArpNd/cGzHLHJDckmGpuuyG+Ft/v30mHbw=
Subject key identifier: F4:FB:B6:49:B7:C1:C8:8E:A1:79:3D:59:D6:F8:10:92:89:A0:FB:17
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 76165592CA2A92F3A0EEBF0298DC8E999CC0BF3C
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a35303a3a2f34382d3438203d3e20323134313636.roa
Signing time: Wed 22 Jul 2026 20:22:56 +0000
ROA not before: Wed 22 Jul 2026 20:17:56 +0000
ROA not after: Wed 21 Jul 2027 20:22:56 +0000
asID: 214166
IP address blocks: 2a11:29c0:50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:14:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:16:55:92:ca:2a:92:f3:a0:ee:bf:02:98:dc:8e:99:9c:c0:bf:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Jul 22 20:17:56 2026 GMT
Not After : Jul 21 20:22:56 2027 GMT
Subject: CN=F4FBB649B7C1C88EA1793D59D6F8109289A0FB17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f0:b1:54:8d:a4:3b:b6:81:2c:4a:6b:cd:ec:
c3:bd:3b:9f:4e:b6:e6:66:06:59:6c:05:bd:fb:86:
c6:d0:2a:9d:ac:af:0f:c8:52:68:39:cb:7a:4f:72:
ed:89:78:19:cf:29:f8:ea:8f:63:ff:f2:9f:aa:03:
03:7e:e4:33:54:58:c9:b5:8d:75:7b:7d:21:e4:ab:
5f:0b:74:4b:4c:6d:17:40:f5:1f:3b:7d:5c:1a:6f:
1b:2b:28:6e:28:bb:25:97:04:4c:c4:e7:46:46:ea:
b6:1f:bc:58:94:19:09:73:de:d7:fe:64:43:0b:52:
7c:95:78:3b:d1:d3:e7:e6:92:1e:8e:fb:8f:fd:8d:
ae:e6:5b:86:a0:1c:2a:a9:b3:b2:92:42:52:82:5e:
8b:db:ef:6e:cf:8e:0a:1b:16:27:e1:0d:81:3f:cb:
14:c0:8e:3b:3a:a5:e6:e0:f2:4e:e8:f8:55:e0:48:
e2:ba:73:15:55:c3:59:4e:60:eb:40:3b:47:10:e6:
b0:69:0d:a3:46:74:e1:ea:e6:91:45:70:7e:b0:b1:
02:cc:23:7d:ea:0e:95:af:67:98:d2:a1:3c:84:f7:
c9:32:5d:56:61:2e:dc:98:31:76:e1:cc:91:07:8a:
f9:43:fd:0a:f6:83:1e:a7:cb:0a:7c:3e:51:26:fc:
2a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FB:B6:49:B7:C1:C8:8E:A1:79:3D:59:D6:F8:10:92:89:A0:FB:17
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a35303a3a2f34382d3438203d3e20323134313636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:50::/48
Signature Algorithm: sha256WithRSAEncryption
b0:95:5e:f0:9e:ab:47:c2:68:9b:cf:d6:29:cb:f4:ee:ce:07:
ff:bf:ae:db:f7:a6:7d:4b:b0:ef:a6:b1:28:c0:86:38:68:67:
37:22:a4:7e:5d:2e:da:c3:fb:15:48:ac:cb:63:b9:7b:18:79:
fb:8d:e1:6c:d3:8f:b5:4f:22:7b:ff:d4:a3:41:ee:ad:44:54:
8f:b8:c0:53:76:13:c2:f5:8e:8f:20:68:25:af:7a:4e:5b:94:
b0:35:ae:be:39:c4:f7:16:c5:ff:8f:31:e0:c2:ce:8e:c6:ce:
fa:fd:d0:cc:7d:61:1f:63:a0:85:68:15:64:3e:f7:8b:d1:c6:
c6:14:e7:ef:2e:fc:1d:f7:a9:81:0a:85:90:37:16:43:35:e0:
be:77:60:44:56:06:dc:a0:ca:58:13:a3:ba:87:db:5e:29:3d:
eb:ec:5b:99:01:0b:5c:66:4d:0e:ef:07:7e:7b:f9:ad:9b:6f:
2a:b3:7d:a0:c6:cb:e5:2b:ba:df:fc:05:f6:f4:a9:40:3a:49:
b6:c8:bd:5d:d8:a7:6d:b1:d8:de:f3:89:7d:9f:56:65:cd:61:
5d:a3:cd:f6:68:52:64:2a:cb:52:db:67:fd:3e:7c:58:ae:dc:
9f:c4:4a:6d:4a:63:d7:9c:34:94:fa:46:ea:76:86:5e:b7:6e:
6b:12:9d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:48 2026 by rpki-client