Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32393a3a2f34382d3438203d3e20323136303732.roa
File: 326131313a323963303a32393a3a2f34382d3438203d3e20323136303732.roa (raw, json)
Hash identifier: Ps83ToHPnMu5a4PxisXh7Yml/2ERJQaky6kDDPO78wc=
Subject key identifier: 56:14:54:B2:15:1D:8E:F6:DE:F8:33:54:98:81:37:C8:E6:7F:20:3D
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 61A15AFF8E13BB0DBAFB5495BF5FB88A1FE5BC5C
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32393a3a2f34382d3438203d3e20323136303732.roa
Signing time: Tue 04 Aug 2026 15:22:58 +0000
ROA not before: Tue 04 Aug 2026 15:17:58 +0000
ROA not after: Tue 03 Aug 2027 15:22:58 +0000
asID: 216072
IP address blocks: 2a11:29c0:29::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 22:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:a1:5a:ff:8e:13:bb:0d:ba:fb:54:95:bf:5f:b8:8a:1f:e5:bc:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Aug 4 15:17:58 2026 GMT
Not After : Aug 3 15:22:58 2027 GMT
Subject: CN=561454B2151D8EF6DEF83354988137C8E67F203D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:22:6f:43:24:3d:dc:04:c7:d9:c2:dc:e4:0b:
a2:e6:78:2c:ba:cc:a7:c0:37:f9:92:97:75:fe:19:
a2:94:ee:e6:7e:62:f1:8c:c0:de:3a:c8:5d:4c:b6:
48:85:41:0e:65:aa:c7:13:0c:e3:40:b0:1f:17:0d:
c2:1c:a3:30:1c:24:18:9a:6a:90:06:b4:b8:26:04:
45:36:40:38:0e:22:8f:fd:91:78:e8:f6:e1:a0:e9:
81:c6:20:d9:71:4d:9f:76:6a:86:5b:3a:be:c2:e4:
e0:89:35:e9:94:67:2e:5f:22:10:5d:df:11:b3:60:
cc:5e:cb:68:8d:de:30:52:07:dd:d7:c2:1b:b0:a7:
b8:9a:47:3a:6b:f8:de:8c:13:4e:b2:b2:45:4a:bf:
a9:5b:c2:b5:11:50:71:2b:96:95:cd:04:91:d6:93:
48:3b:c6:51:6a:32:c2:ee:79:2b:94:67:b7:26:4f:
c8:af:0a:e9:66:12:a1:55:73:7c:b5:65:c1:db:31:
3e:b3:90:4a:88:be:09:30:18:38:f3:b4:52:2c:cf:
63:dc:c3:7f:e2:79:ab:17:b3:13:71:54:81:28:d7:
16:06:ae:da:fd:6c:8c:91:f5:5a:4f:3a:aa:8e:31:
30:c8:71:ac:0a:1f:50:9b:75:7d:9c:41:37:a0:6b:
70:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:14:54:B2:15:1D:8E:F6:DE:F8:33:54:98:81:37:C8:E6:7F:20:3D
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32393a3a2f34382d3438203d3e20323136303732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:29::/48
Signature Algorithm: sha256WithRSAEncryption
30:8e:10:cc:26:40:31:6c:5a:23:68:77:4f:4c:c6:69:cc:61:
ea:b8:24:5e:28:68:c9:83:d6:96:d1:11:91:21:e5:28:5b:c9:
b7:15:2f:4b:2d:48:8b:38:fd:47:8c:00:1d:71:69:d2:03:aa:
8a:39:76:89:12:63:51:54:d2:6f:0e:60:44:ad:7d:9a:fc:d9:
0f:ac:cd:eb:c9:2a:2f:1c:33:a1:7a:d9:20:37:54:60:71:8b:
3d:71:cf:88:99:e9:a3:bf:cc:e8:a6:6d:ff:fa:e7:82:88:ad:
75:5d:8c:32:31:94:4a:85:69:60:d2:13:fe:be:c4:ef:86:b6:
9c:09:27:47:d6:0a:6e:98:78:f4:b3:4a:96:e1:fd:78:21:e9:
56:71:a3:71:81:da:15:f7:7f:26:7d:a3:f8:02:57:9c:c7:20:
cf:5d:3a:2e:e0:eb:f0:d0:76:92:69:95:f1:f3:1a:c4:10:85:
3f:58:87:0b:54:1f:47:3b:6e:cd:6e:ee:cb:82:62:52:1b:c9:
fe:50:d3:ca:0f:e2:fa:48:3b:e1:2f:c5:d5:bb:2e:09:3c:5e:
41:65:c3:be:b0:11:a0:46:64:99:f9:cc:6c:ca:6a:98:94:f2:
ac:c6:4d:16:ae:9a:0d:9e:e9:56:02:91:ff:cf:98:18:46:a6:
f9:61:6b:f8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUYaFa/44Tuw26+1SVv1+4ih/lvFwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTk2ZDg1OTk2ZTkzNTRkMTAwNWU0NGM3ODFkMzhhZGNm
MTA4Mjg3MzAeFw0yNjA4MDQxNTE3NThaFw0yNzA4MDMxNTIyNThaMDMxMTAvBgNV
BAMTKDU2MTQ1NEIyMTUxRDhFRjZERUY4MzM1NDk4ODEzN0M4RTY3RjIwM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Im9DJD3cBMfZwtzkC6LmeCy6
zKfAN/mSl3X+GaKU7uZ+YvGMwN46yF1MtkiFQQ5lqscTDONAsB8XDcIcozAcJBia
apAGtLgmBEU2QDgOIo/9kXjo9uGg6YHGINlxTZ92aoZbOr7C5OCJNemUZy5fIhBd
3xGzYMxey2iN3jBSB93Xwhuwp7iaRzpr+N6ME06yskVKv6lbwrURUHErlpXNBJHW
k0g7xlFqMsLueSuUZ7cmT8ivCulmEqFVc3y1ZcHbMT6zkEqIvgkwGDjztFIsz2Pc
w3/ieasXsxNxVIEo1xYGrtr9bIyR9VpPOqqOMTDIcawKH1CbdX2cQTega3D/AgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUVhRUshUdjvbe+DNUmIE3yOZ/ID0wHwYDVR0j
BBgwFoAU6W2FmW6TVNEAXkTHgdOK3PEIKHMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm
YmY1LzAvRTk2RDg1OTk2RTkzNTREMTAwNUU0NEM3ODFEMzhBRENGMTA4Mjg3My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZXMkZtVzZUVk5FQVhrVEhnZE9LM1BF
SUtITS5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExMTViYzYt
MTBmNi00YWYzLWJhMDktOGI2ODdhNTZmYmY1LzAvMzI2MTMxMzEzYTMyMzk2MzMw
M2EzMjM5M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMTM2MzAzNzMyLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKhEpwAApMA0GCSqGSIb3DQEBCwUAA4IBAQAwjhDMJkAxbFojaHdPTMZp
zGHquCReKGjJg9aW0RGRIeUoW8m3FS9LLUiLOP1HjAAdcWnSA6qKOXaJEmNRVNJv
DmBErX2a/NkPrM3rySovHDOhetkgN1RgcYs9cc+Imemjv8zopm3/+ueCiK11XYwy
MZRKhWlg0hP+vsTvhracCSdH1gpumHj0s0qW4f14IelWcaNxgdoV938mfaP4Alec
xyDPXTou4Ovw0HaSaZXx8xrEEIU/WIcLVB9HO27Nbu7LgmJSG8n+UNPKD+L6SDvh
L8XVuy4JPF5BZcO+sBGgRmSZ+cxsymqYlPKsxk0WrpoNnulWApH/z5gYRqb5YWv4
-----END CERTIFICATE-----
Generated at Thu Sep 10 12:40:31 2026 by rpki-client