Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963373a3a2f33322d3438203d3e203530333931.roa
File: 326131313a323963373a3a2f33322d3438203d3e203530333931.roa (raw, json)
Hash identifier: t+JKSHXIkpa4a4uNqJgHI79IbRufCOVMJ9YZCcxAxhU=
Subject key identifier: 5F:8D:38:B2:D6:0E:84:B4:B4:8D:38:34:AE:91:9B:0A:96:34:45:C4
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 25646B937EA79189F2C3895732482961E5092CB5
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963373a3a2f33322d3438203d3e203530333931.roa
Signing time: Mon 16 Mar 2026 21:22:47 +0000
ROA not before: Mon 16 Mar 2026 21:17:47 +0000
ROA not after: Mon 15 Mar 2027 21:22:47 +0000
asID: 50391
IP address blocks: 2a11:29c7::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 04:57:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:64:6b:93:7e:a7:91:89:f2:c3:89:57:32:48:29:61:e5:09:2c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Mar 16 21:17:47 2026 GMT
Not After : Mar 15 21:22:47 2027 GMT
Subject: CN=5F8D38B2D60E84B4B48D3834AE919B0A963445C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4f:a3:7f:cb:b3:a7:e6:4f:87:25:81:43:87:
87:09:e0:aa:af:c7:52:b8:81:33:43:e6:7f:ef:47:
23:b0:ac:a8:46:40:64:e2:5e:2d:0a:72:51:96:4a:
68:c2:58:05:1c:35:41:22:f0:a2:04:a7:24:90:42:
55:c8:77:15:a1:86:b4:04:03:f4:0c:88:dd:1f:59:
a8:93:49:06:d9:13:94:6b:3e:fc:64:cb:46:c7:11:
13:6f:dd:b9:78:8d:fc:be:fc:fd:37:2d:a1:38:05:
28:1e:54:e1:d6:63:d2:a5:d7:72:b3:8d:0f:01:ac:
cd:bb:21:11:0b:b7:3c:34:0a:62:ad:46:64:c0:49:
83:a8:b6:ec:37:b9:fc:a4:3b:59:b8:70:ec:29:6a:
40:64:33:a7:a6:2a:d9:99:29:27:ff:ca:02:7d:92:
23:26:82:76:c4:53:51:08:9f:7d:67:21:9b:2a:7c:
ec:65:4b:c4:4b:5e:43:7f:17:36:e3:50:bf:3e:e7:
71:84:4b:ad:79:17:ad:3f:41:ee:e9:de:fc:bb:2e:
9f:f4:49:1e:8e:ab:8e:c5:2a:b1:44:22:61:d7:33:
c0:05:52:5e:c2:28:51:b0:d8:f1:44:90:66:84:e0:
00:f2:f6:f7:c5:be:16:46:e2:18:8e:44:b0:42:e6:
9b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8D:38:B2:D6:0E:84:B4:B4:8D:38:34:AE:91:9B:0A:96:34:45:C4
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963373a3a2f33322d3438203d3e203530333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
2c:aa:a7:8f:e6:54:c7:8b:8a:00:54:2a:3e:9c:dc:31:60:9d:
5f:8f:1f:9b:d9:93:44:c4:8f:1f:18:b1:19:54:aa:3a:31:d3:
85:27:dd:77:1d:32:1f:5c:19:55:be:ae:a6:f0:05:37:da:0e:
ef:02:70:99:f9:95:1d:ac:61:81:9d:8f:b3:49:22:87:a1:8d:
d6:69:6a:af:d0:18:59:65:1a:d4:71:10:6a:ca:d8:a2:25:16:
e1:61:75:1c:79:9d:a1:1c:e3:fd:ba:85:7c:0d:1d:d9:01:69:
ef:ca:44:a8:99:b7:1b:99:fd:07:1c:bc:bf:a9:f5:34:94:74:
b9:dc:af:ef:c3:23:f6:55:55:c1:d5:61:41:74:c8:78:07:f0:
ca:6b:89:22:b3:59:31:b7:e9:15:28:fe:cb:d7:5b:19:6e:e7:
8b:68:67:f6:c9:c1:a8:79:92:98:3c:19:74:da:ed:e0:3a:bb:
82:82:2f:63:37:3e:44:68:82:31:f3:eb:d2:35:e2:d3:c0:49:
7a:5f:b8:72:2a:4d:5c:f0:7c:b6:9f:ea:99:e7:b7:54:77:02:
13:2a:d8:04:e9:75:b1:f8:ee:30:2d:0e:57:8c:2d:c4:13:30:
d8:c7:30:d4:de:24:ff:a1:c1:7b:ab:f2:88:3c:fe:d3:e7:b3:
55:43:b2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:26:16 2026 by rpki-client