Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a31303a3a2f34382d3438203d3e203530333931.roa
File: 326131313a323963303a31303a3a2f34382d3438203d3e203530333931.roa (raw, json)
Hash identifier: qxanNlEexTv2haCHZoI9Bfq/+QrDnWaH/S9roByvWdE=
Subject key identifier: 8C:D8:B1:32:29:7D:76:D9:F0:58:46:17:1C:7E:A2:56:1E:41:66:F0
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 328C3023532ACCBC0EA6E5C37F9BAB436ADD03D0
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a31303a3a2f34382d3438203d3e203530333931.roa
Signing time: Wed 21 May 2025 14:05:55 +0000
ROA not before: Wed 21 May 2025 14:00:55 +0000
ROA not after: Wed 20 May 2026 14:05:55 +0000
asID: 50391
IP address blocks: 2a11:29c0:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 10:22:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:8c:30:23:53:2a:cc:bc:0e:a6:e5:c3:7f:9b:ab:43:6a:dd:03:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: May 21 14:00:55 2025 GMT
Not After : May 20 14:05:55 2026 GMT
Subject: CN=8CD8B132297D76D9F05846171C7EA2561E4166F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b7:01:87:a9:bc:6c:1c:87:6c:92:ef:2f:0b:
25:ab:ec:72:a9:d3:b0:df:dc:43:76:3c:07:5d:0a:
41:56:92:e6:90:0c:eb:fe:bc:d3:bb:5c:7c:7c:b8:
30:d0:e7:36:4c:d4:07:71:b7:6e:31:19:ff:15:f3:
2f:ee:36:3b:5f:26:7c:45:5f:7e:43:96:3e:b3:f3:
c4:73:3c:8b:e4:9a:1e:6f:11:5d:6a:69:9c:8a:39:
4f:8e:09:1c:d2:e6:e9:ed:31:a5:48:b9:60:17:1c:
8f:a7:e7:e7:6c:0a:a0:eb:bf:20:78:dc:89:c4:cf:
44:04:5c:19:36:77:2c:7a:fe:2a:ce:91:87:a5:26:
53:8c:6e:89:40:d7:c9:8d:52:28:fe:23:ec:2e:58:
2e:6b:d9:dd:63:fa:ee:f3:e5:a5:28:fa:5b:00:46:
b2:e9:33:44:be:fe:20:fe:3a:a8:ec:e6:bc:71:b6:
59:68:80:6e:bd:11:4c:f0:91:33:19:e5:97:88:9a:
28:97:88:65:52:13:9f:31:fb:1f:88:d5:91:d9:17:
1f:5e:0b:3b:e3:d1:54:19:1b:ee:2c:e3:43:20:94:
23:d6:43:98:9f:24:c3:fb:24:3c:50:df:a4:63:00:
5a:69:72:94:0e:b4:42:0b:fd:c8:b1:c4:34:0e:6c:
0d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D8:B1:32:29:7D:76:D9:F0:58:46:17:1C:7E:A2:56:1E:41:66:F0
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a31303a3a2f34382d3438203d3e203530333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:10::/48
Signature Algorithm: sha256WithRSAEncryption
ab:31:77:c4:dc:43:18:14:bc:01:9c:a7:67:19:e1:5d:4d:29:
0b:ec:6b:73:f1:bb:ef:6d:d8:e0:25:2f:0a:0f:25:0d:73:77:
2f:07:9c:d6:a6:b8:aa:e0:a9:7d:0f:4c:89:3f:99:f3:ed:60:
33:c6:68:b0:11:17:a4:fb:60:60:da:8e:22:01:f0:9d:9c:57:
a7:9b:4b:f6:cb:1d:79:75:c9:f4:ae:48:83:5b:57:b0:e9:50:
dd:a5:36:e8:48:44:9f:bf:8d:ea:66:a6:dc:6a:f2:0e:a3:dd:
a6:a8:17:6a:ce:0a:bb:14:d9:e1:97:72:dd:ee:0f:df:b1:21:
2c:b5:d6:a2:1f:b3:38:10:a9:3f:1d:b1:ba:84:80:a9:47:e0:
58:ae:d9:5f:db:c2:b8:3a:82:39:46:1e:af:55:97:ea:54:d7:
9c:0b:b3:85:9a:bb:35:dd:02:bf:58:dd:09:9c:da:05:a7:37:
74:dc:06:bf:2c:0a:f3:ac:1f:5b:9c:d4:43:3f:6e:de:32:ff:
4f:07:ec:6b:69:86:64:58:71:1e:46:de:c9:07:9b:0b:9b:6a:
2c:05:88:83:4d:33:08:92:77:ab:20:87:12:5a:5b:55:2b:0e:
a9:17:ad:c2:f2:6c:d2:85:ab:7f:b8:26:b6:2a:e6:62:6c:eb:
f3:c2:ad:03
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 6 22:41:33 2025 by rpki-client