Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32313a3a2f34382d3438203d3e20323130393835.roa
File: 326131313a323963303a32313a3a2f34382d3438203d3e20323130393835.roa (raw, json)
Hash identifier: 71dSzAor0RThGltjicY+NBXJRZFB9gin3EMSA1xCmME=
Subject key identifier: 67:B2:13:FF:E8:20:E6:11:87:92:3C:A0:2C:43:2B:95:91:49:37:BF
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 4FE1A98AC1486C127860DA9C1F9F6C0D972084E9
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32313a3a2f34382d3438203d3e20323130393835.roa
Signing time: Tue 09 Sep 2025 15:35:54 +0000
ROA not before: Tue 09 Sep 2025 15:30:54 +0000
ROA not after: Tue 08 Sep 2026 15:35:54 +0000
asID: 210985
IP address blocks: 2a11:29c0:21::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 16:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:e1:a9:8a:c1:48:6c:12:78:60:da:9c:1f:9f:6c:0d:97:20:84:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Sep 9 15:30:54 2025 GMT
Not After : Sep 8 15:35:54 2026 GMT
Subject: CN=67B213FFE820E61187923CA02C432B95914937BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:db:39:5f:63:b1:68:70:60:11:36:19:cb:68:
a2:c6:41:4d:68:3d:b2:c2:0f:59:bf:5d:ba:ef:69:
15:42:2b:6f:fd:59:53:62:0b:26:0d:f9:61:fe:b0:
47:7e:cc:10:bf:7f:f4:cd:26:13:0b:15:99:cd:62:
0f:53:b2:3b:c2:a2:4e:47:e6:dd:6e:7c:dd:48:43:
7b:09:44:1c:61:b4:1a:f5:74:36:3e:51:63:76:82:
c5:37:95:56:8e:f6:8b:17:85:d4:3b:95:c0:97:bc:
39:2c:1a:b2:d0:d7:22:5a:f2:27:ff:cf:d2:b8:97:
5a:04:ab:3a:f9:97:62:db:b1:53:0e:25:71:40:d1:
df:e6:8e:f8:09:b6:26:e4:0d:2b:2c:b5:4f:ca:9f:
06:e7:3c:2c:9b:cd:db:15:48:4f:c8:d9:97:67:73:
32:53:09:d7:0b:07:02:6c:53:df:44:1d:cb:e0:60:
15:1e:f1:ac:00:12:7b:58:cc:92:8e:22:07:f9:65:
ea:22:1d:bd:5d:de:9b:3f:cf:c6:b1:f6:db:75:13:
78:7d:00:a6:9d:2c:d8:44:f0:0d:d2:f9:50:23:eb:
51:88:10:25:a9:6e:1e:3a:02:d0:8c:8f:dc:57:1d:
ba:1f:be:15:2f:3f:b3:c7:32:4b:68:af:3e:1a:af:
63:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B2:13:FF:E8:20:E6:11:87:92:3C:A0:2C:43:2B:95:91:49:37:BF
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32313a3a2f34382d3438203d3e20323130393835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:21::/48
Signature Algorithm: sha256WithRSAEncryption
62:6c:34:ac:2b:4e:8a:99:8b:00:1e:2f:80:a7:aa:65:46:8b:
3e:66:d5:31:bb:68:4f:17:f6:8a:ab:b3:b8:be:f1:ee:5f:7a:
b3:1a:e0:ce:2d:e9:f0:b4:b1:71:bc:3a:89:be:24:73:5f:a0:
8d:ba:17:80:f6:fb:3d:91:96:71:8c:ca:13:ea:6a:c3:93:63:
d9:7a:92:40:a2:bf:19:9c:25:e7:70:b0:a0:b6:cc:13:cd:c0:
4b:ae:43:37:b7:f3:e3:e5:ea:53:96:09:fd:ab:d4:91:c1:79:
2b:98:40:7d:0e:32:aa:59:16:7f:35:0e:63:3d:c9:d4:fe:b3:
1c:7f:a9:3e:15:01:fd:84:58:90:b8:2c:6b:f9:40:c6:70:90:
35:c7:41:be:cf:5d:0e:97:20:ec:3b:ff:c7:3a:6d:ea:b6:9d:
25:e2:55:6b:9b:4f:9d:48:19:e6:b5:72:c9:23:2a:94:e9:6d:
6e:85:41:ef:08:9b:06:d3:08:3d:09:78:73:0c:d2:b0:49:7e:
e8:29:bb:20:50:24:fd:48:44:91:fa:54:fc:63:93:3a:39:0f:
cc:aa:70:07:98:49:6f:24:46:73:d8:7d:0a:f0:03:74:74:c3:
bd:a5:3a:72:93:98:b1:bf:5a:90:48:ef:b5:aa:cd:e0:ad:6e:
cd:2b:e4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 01:06:00 2025 by rpki-client