Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a31303a3a2f34382d3438203d3e203530333931.roa
File: 326131313a323963303a31303a3a2f34382d3438203d3e203530333931.roa (raw, json)
Hash identifier: i/8UxwFIcOxfdRLAxVWZfth4z6WVl3CfgFMEUmMYnrk=
Subject key identifier: FF:A8:FE:06:9B:01:3D:88:64:7D:3C:B2:A9:32:71:06:DC:46:23:7C
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 2BB827BF1EBD91EADEA86375617A7B8FB364E228
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a31303a3a2f34382d3438203d3e203530333931.roa
Signing time: Wed 22 Apr 2026 14:22:50 +0000
ROA not before: Wed 22 Apr 2026 14:17:50 +0000
ROA not after: Wed 21 Apr 2027 14:22:50 +0000
asID: 50391
IP address blocks: 2a11:29c0:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 20:56:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:b8:27:bf:1e:bd:91:ea:de:a8:63:75:61:7a:7b:8f:b3:64:e2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Apr 22 14:17:50 2026 GMT
Not After : Apr 21 14:22:50 2027 GMT
Subject: CN=FFA8FE069B013D88647D3CB2A9327106DC46237C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:a5:20:8c:18:7d:26:f4:07:89:cf:bb:10:
37:f8:74:6c:93:89:60:13:fe:9b:52:fc:d0:5c:56:
6d:64:2d:4c:8c:a0:06:83:67:62:6d:e5:eb:89:55:
a9:7a:40:d6:85:b7:88:8d:42:67:5d:7f:d5:79:a6:
0e:3e:e3:96:20:3a:64:3b:fa:d5:3c:78:e1:0b:b3:
2d:29:84:8d:82:a9:86:29:9a:e4:4b:af:ad:72:f3:
f0:50:b6:5b:5c:8a:42:7c:c6:d6:17:ac:f7:36:ab:
2f:30:63:fb:15:0e:63:dd:68:d8:9c:88:0d:b5:85:
04:64:53:26:f7:97:91:dc:88:ed:82:ec:6b:47:1f:
e2:68:63:d6:1b:4f:92:dc:3b:33:3f:2a:b5:4a:3c:
7e:ca:a7:e2:fd:62:32:d1:78:e5:8d:11:a9:36:56:
68:16:2e:a1:60:9e:3d:8c:26:af:ce:08:f9:b2:d8:
55:d0:c2:d5:33:97:57:9e:01:72:09:01:68:ed:b8:
4e:53:8c:56:29:3f:c9:fc:4d:c9:19:42:64:79:ad:
dd:cf:bf:40:da:39:af:a9:ad:00:d2:08:ab:d9:32:
28:77:9e:de:ff:f0:24:65:e8:30:f2:c6:8b:d5:1f:
19:89:1f:cb:ff:cf:3a:26:3f:fc:79:39:0c:fd:80:
4b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A8:FE:06:9B:01:3D:88:64:7D:3C:B2:A9:32:71:06:DC:46:23:7C
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a31303a3a2f34382d3438203d3e203530333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:10::/48
Signature Algorithm: sha256WithRSAEncryption
60:d8:94:27:e9:de:94:63:18:da:6e:64:65:8f:e8:ba:d8:95:
5a:5e:77:f3:d8:10:ab:9d:35:eb:6c:91:6f:80:45:81:ef:48:
94:4c:c7:4e:da:53:f7:ca:3f:85:b7:a2:94:2f:b7:08:c4:d3:
b1:cd:e6:35:17:b5:ec:2f:f8:20:8d:22:87:49:83:0b:24:51:
f8:6e:a7:bf:10:19:b5:61:f9:2f:ec:46:15:2d:e0:5c:1f:b0:
f6:60:c4:65:78:c7:47:53:0c:3d:c4:20:70:c0:b1:2a:23:c7:
1c:78:c9:7f:73:37:3a:5b:fe:f2:01:89:f3:81:8d:ea:17:44:
fd:dd:99:c3:4d:0d:b7:60:93:b1:f1:70:26:0e:59:2a:a4:74:
c1:86:6d:6a:f4:17:3a:e9:9c:a1:a7:1a:db:27:a4:01:28:56:
19:59:d6:09:85:11:a4:ea:58:98:02:5f:f3:dc:ec:c8:c2:44:
24:1b:f6:0a:02:82:fe:f7:1d:93:17:13:ad:67:7e:cd:6a:de:
5b:b0:78:ad:07:24:5c:27:d2:35:15:51:eb:2c:61:87:de:f4:
0f:33:8b:02:34:5a:cc:9a:f6:79:36:ac:7b:e9:c7:71:a3:9e:
13:6b:30:c1:0e:13:93:3a:3c:b1:d5:60:e7:d4:c9:d5:24:b8:
07:08:32:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 10:46:11 2026 by rpki-client