Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32303a3a2f34382d3438203d3e20323130393835.roa
File: 326131313a323963303a32303a3a2f34382d3438203d3e20323130393835.roa (raw, json)
Hash identifier: 5Y+5mJGZYBP543KNeRlJm7h14S0zlMZAVmy+kQj474o=
Subject key identifier: 60:C3:89:A7:FA:5E:17:2B:C2:98:0D:56:69:30:22:87:D5:17:54:AE
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 1F9BAB154DF507E1F1A254F0D8745C623703D911
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32303a3a2f34382d3438203d3e20323130393835.roa
Signing time: Wed 22 Apr 2026 14:22:48 +0000
ROA not before: Wed 22 Apr 2026 14:17:48 +0000
ROA not after: Wed 21 Apr 2027 14:22:48 +0000
asID: 210985
IP address blocks: 2a11:29c0:20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 20:56:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:9b:ab:15:4d:f5:07:e1:f1:a2:54:f0:d8:74:5c:62:37:03:d9:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Apr 22 14:17:48 2026 GMT
Not After : Apr 21 14:22:48 2027 GMT
Subject: CN=60C389A7FA5E172BC2980D5669302287D51754AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6d:0e:eb:e3:24:da:ea:7e:7a:a7:f7:20:34:
b7:c3:a0:13:1d:67:ac:3b:05:d4:7a:d3:31:ba:c0:
d7:16:0f:74:80:2f:d8:2d:e3:0f:ee:f6:9f:df:21:
55:3a:8d:da:38:7c:8e:d7:77:fa:a1:70:d7:66:a9:
31:64:86:68:9f:b1:90:8a:dc:b4:98:d4:ac:1c:59:
30:b3:8a:18:d9:c7:8e:1f:b0:ad:ee:d3:6e:cd:93:
92:9f:9e:93:94:00:4e:ee:be:5d:d4:d3:04:7c:73:
08:f9:62:40:01:42:92:c5:c2:31:ff:57:eb:1c:99:
c4:fb:88:7e:e1:b0:e9:4d:68:62:cd:d0:86:96:89:
ff:23:d1:f3:39:1b:64:07:f9:71:91:51:30:8f:a4:
89:9a:03:0f:a3:7b:bd:17:fa:26:4b:80:bc:15:f0:
26:36:fe:67:7c:e1:0b:74:b9:ca:0b:aa:b5:ef:d8:
20:1d:a7:b7:a3:2a:2e:9b:09:98:4e:55:33:d1:e4:
00:7c:e4:b8:5a:23:93:ed:ea:22:de:5f:d5:1b:60:
0a:38:d1:a9:b3:0c:67:89:18:15:53:62:03:2c:18:
bc:fc:f1:c0:0b:b7:51:11:82:34:d7:cc:a7:ad:b2:
28:a9:27:6d:88:8b:21:34:f7:67:a1:14:09:86:dc:
a1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C3:89:A7:FA:5E:17:2B:C2:98:0D:56:69:30:22:87:D5:17:54:AE
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32303a3a2f34382d3438203d3e20323130393835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:20::/48
Signature Algorithm: sha256WithRSAEncryption
7f:93:fe:14:c6:49:f4:e7:03:9d:44:cc:ab:05:04:17:43:f3:
d6:a5:67:14:bb:13:5f:12:58:15:4e:c1:e2:5a:1d:d6:70:cb:
12:61:47:d3:d8:b2:31:6d:bf:ed:bd:63:f0:73:bc:20:71:87:
f4:fd:84:7d:fb:9f:25:7d:df:eb:99:12:a5:bf:93:4f:20:01:
63:72:32:09:af:1d:ce:81:a9:94:36:49:f2:f2:6e:ea:7f:1a:
d9:88:ad:31:7a:96:fd:1a:7d:a6:40:c1:77:ed:8d:d6:f0:6e:
c2:ee:2d:86:e9:94:cc:a4:03:4c:3a:d6:12:65:a9:6d:40:ee:
d9:7d:fe:52:cf:cc:df:77:77:87:29:91:81:c6:83:04:b0:2c:
b3:73:89:d7:3e:dc:d4:66:e4:7f:70:0a:c8:ab:99:7f:cd:04:
a1:63:b3:05:1b:4a:9d:8b:60:a2:1a:15:5c:99:ea:d3:3c:ee:
a4:96:3c:1f:da:d3:07:c9:81:38:1e:d8:6d:7a:90:e3:73:5f:
2c:cf:78:65:ca:9d:08:8e:c5:ee:54:ac:7a:3d:66:83:05:83:
6a:84:57:c3:25:4e:a1:f8:a7:e6:ae:6e:93:17:e3:a3:49:4c:
b3:9a:c5:9d:a5:6d:59:75:63:a5:ed:41:8f:6b:2b:d7:3f:8a:
b9:78:f4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:46:34 2026 by rpki-client