Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32313a3a2f34382d3438203d3e20323130393835.roa
File: 326131313a323963303a32313a3a2f34382d3438203d3e20323130393835.roa (raw, json)
Hash identifier: iWbh+vfpGiGgc7hMFvewQBYMiAkHufAa2zzLqFZif3o=
Subject key identifier: C6:65:F7:72:0C:46:A9:7C:C7:9D:B7:E7:EA:22:6E:D5:FB:3B:B8:F7
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 762E50D5FFCE08DD76B116C3875BB1CC4B3B77E1
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32313a3a2f34382d3438203d3e20323130393835.roa
Signing time: Tue 11 Aug 2026 16:22:58 +0000
ROA not before: Tue 11 Aug 2026 16:17:58 +0000
ROA not after: Tue 10 Aug 2027 16:22:58 +0000
asID: 210985
IP address blocks: 2a11:29c0:21::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:2e:50:d5:ff:ce:08:dd:76:b1:16:c3:87:5b:b1:cc:4b:3b:77:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Aug 11 16:17:58 2026 GMT
Not After : Aug 10 16:22:58 2027 GMT
Subject: CN=C665F7720C46A97CC79DB7E7EA226ED5FB3BB8F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c0:af:67:6e:eb:91:b0:08:5f:58:17:ee:e3:
e9:1b:cc:25:45:bc:3b:37:31:24:3a:a9:02:5e:1b:
ef:a5:62:81:ee:09:3a:ce:3f:bf:ed:71:dd:a1:c9:
0a:61:e2:1b:45:3a:e2:5a:68:70:93:5b:67:82:9e:
fb:e9:c8:d0:a1:b0:a4:4e:d4:2a:ce:97:35:0d:ef:
5c:ae:d5:48:65:36:14:40:00:26:c8:88:bf:bf:cf:
1b:1a:97:05:8d:cf:03:93:96:5c:9c:19:dc:be:00:
10:1d:f1:ee:57:f9:54:ea:dd:a0:56:67:60:42:0c:
ce:98:91:18:14:75:36:50:bf:f2:9f:e6:0d:5c:2c:
1d:e4:7f:50:9c:54:5b:b3:bd:ef:57:59:d7:76:b0:
3d:af:b7:3e:5a:46:d6:ba:68:0a:b5:4d:2a:98:cd:
ea:d5:5c:be:b7:a7:ee:fd:06:62:4c:0d:9a:07:7a:
1e:c5:26:aa:f5:2c:45:e3:4d:87:a4:d8:6d:0d:ac:
38:7c:58:1b:15:6c:0b:63:05:c1:8d:5c:ca:0e:56:
49:1b:9b:7f:55:30:52:78:31:42:20:d0:44:71:13:
de:bf:0d:3a:2e:53:41:35:c8:dd:53:d9:8a:5f:38:
72:05:4c:38:4e:6f:bc:8e:4e:b8:1f:ec:a7:06:c5:
28:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:65:F7:72:0C:46:A9:7C:C7:9D:B7:E7:EA:22:6E:D5:FB:3B:B8:F7
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32313a3a2f34382d3438203d3e20323130393835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:21::/48
Signature Algorithm: sha256WithRSAEncryption
92:8c:00:ab:66:c1:b1:73:a6:bf:f2:36:db:fe:71:9e:4c:ea:
50:98:22:6b:3a:0f:ce:59:94:a2:5a:c4:65:1a:6b:5f:e7:51:
33:f5:90:07:93:e8:ed:b9:96:11:70:3d:19:4d:13:fe:9d:46:
e9:fc:a6:48:b1:90:63:f8:7f:d1:cf:ba:fe:73:7b:74:77:57:
e6:55:a3:d5:88:22:80:c0:3b:6e:2e:0e:e8:ad:89:37:ce:a5:
d1:99:b2:a2:41:58:a0:b8:c5:2d:33:ec:f3:2a:2e:86:a2:3a:
80:64:6a:27:68:c1:43:17:2d:9f:03:7c:d7:19:9e:da:72:e9:
52:a6:cd:74:59:6f:b8:d1:14:bf:28:7e:73:24:c0:b7:a0:ed:
ea:e1:a0:38:04:6a:8e:4a:fc:96:01:7c:a1:0b:46:84:45:3d:
70:a4:cb:33:6e:e5:2d:6d:62:9d:82:21:d3:f6:41:dd:21:a3:
69:f0:db:73:d6:5b:04:0c:db:9e:4d:fa:df:af:8f:63:e3:b0:
0c:37:39:fa:39:26:cb:99:72:7b:d3:96:82:af:06:3d:6f:06:
f2:a3:5b:93:1c:64:38:80:3a:8d:f0:78:f2:4c:63:5d:b4:1a:
f4:f7:02:d5:d0:95:7a:4a:f4:e8:74:dd:1d:75:ad:54:ec:d5:
ae:98:50:23
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUdi5Q1f/OCN12sRbDh1uxzEs7d+EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTk2ZDg1OTk2ZTkzNTRkMTAwNWU0NGM3ODFkMzhhZGNm
MTA4Mjg3MzAeFw0yNjA4MTExNjE3NThaFw0yNzA4MTAxNjIyNThaMDMxMTAvBgNV
BAMTKEM2NjVGNzcyMEM0NkE5N0NDNzlEQjdFN0VBMjI2RUQ1RkIzQkI4RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkwK9nbuuRsAhfWBfu4+kbzCVF
vDs3MSQ6qQJeG++lYoHuCTrOP7/tcd2hyQph4htFOuJaaHCTW2eCnvvpyNChsKRO
1CrOlzUN71yu1UhlNhRAACbIiL+/zxsalwWNzwOTllycGdy+ABAd8e5X+VTq3aBW
Z2BCDM6YkRgUdTZQv/Kf5g1cLB3kf1CcVFuzve9XWdd2sD2vtz5aRta6aAq1TSqY
zerVXL63p+79BmJMDZoHeh7FJqr1LEXjTYek2G0NrDh8WBsVbAtjBcGNXMoOVkkb
m39VMFJ4MUIg0ERxE96/DTouU0E1yN1T2YpfOHIFTDhOb7yOTrgf7KcGxSg/AgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUxmX3cgxGqXzHnbfn6iJu1fs7uPcwHwYDVR0j
BBgwFoAU6W2FmW6TVNEAXkTHgdOK3PEIKHMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm
YmY1LzAvRTk2RDg1OTk2RTkzNTREMTAwNUU0NEM3ODFEMzhBRENGMTA4Mjg3My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZXMkZtVzZUVk5FQVhrVEhnZE9LM1BF
SUtITS5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExMTViYzYt
MTBmNi00YWYzLWJhMDktOGI2ODdhNTZmYmY1LzAvMzI2MTMxMzEzYTMyMzk2MzMw
M2EzMjMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMTMwMzkzODM1LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKhEpwAAhMA0GCSqGSIb3DQEBCwUAA4IBAQCSjACrZsGxc6a/8jbb/nGe
TOpQmCJrOg/OWZSiWsRlGmtf51Ez9ZAHk+jtuZYRcD0ZTRP+nUbp/KZIsZBj+H/R
z7r+c3t0d1fmVaPViCKAwDtuLg7orYk3zqXRmbKiQViguMUtM+zzKi6GojqAZGon
aMFDFy2fA3zXGZ7aculSps10WW+40RS/KH5zJMC3oO3q4aA4BGqOSvyWAXyhC0aE
RT1wpMszbuUtbWKdgiHT9kHdIaNp8Ntz1lsEDNueTfrfr49j47AMNzn6OSbLmXJ7
05aCrwY9bwbyo1uTHGQ4gDqN8HjyTGNdtBr09wLV0JV6SvTodN0dda1U7NWumFAj
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:44:46 2026 by rpki-client