Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32613a3a2f34382d3438203d3e20323136313231.roa
File: 326131313a323963303a32613a3a2f34382d3438203d3e20323136313231.roa (raw, json)
Hash identifier: GCEntgsbkNFfhNbADFwCFH7QOyCMhWaA5EFOSGVIF8I=
Subject key identifier: 6C:5E:5B:BC:6F:3B:52:9A:0D:C6:41:C4:26:B8:73:B6:A6:85:41:7F
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 37A2507F7C5ACC5FBA194328A5059C33F9898A80
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32613a3a2f34382d3438203d3e20323136313231.roa
Signing time: Tue 19 May 2026 21:22:53 +0000
ROA not before: Tue 19 May 2026 21:17:53 +0000
ROA not after: Tue 18 May 2027 21:22:53 +0000
asID: 216121
IP address blocks: 2a11:29c0:2a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:a2:50:7f:7c:5a:cc:5f:ba:19:43:28:a5:05:9c:33:f9:89:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: May 19 21:17:53 2026 GMT
Not After : May 18 21:22:53 2027 GMT
Subject: CN=6C5E5BBC6F3B529A0DC641C426B873B6A685417F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8e:9b:42:a7:86:9b:64:fa:c9:a9:69:05:5b:
c7:20:97:eb:55:0d:e4:48:4b:86:e7:34:ff:70:70:
4d:17:74:10:c5:6c:a4:46:49:a6:bb:e3:db:f7:6c:
c1:a0:f7:d0:40:56:89:3b:7b:b7:c5:bc:1f:8a:7f:
cf:7e:91:8c:1a:81:e3:76:17:1c:83:62:8e:85:83:
ad:5d:55:02:4c:af:11:73:54:f6:dd:04:76:94:66:
79:bc:27:35:a0:22:95:40:7f:90:23:fb:bb:1e:a1:
04:ee:4c:e3:e8:db:a8:77:86:78:72:83:d6:47:ff:
e1:4f:5d:4a:9e:8a:52:62:7e:f9:f2:8e:5d:ef:72:
67:03:05:48:a5:6a:8c:2d:63:3f:87:32:91:78:6f:
9a:1f:53:31:6c:21:8d:93:33:22:91:ca:b4:50:8c:
d8:a9:08:43:65:4f:3a:57:15:6d:16:cc:2f:ec:95:
c7:1a:79:e1:20:bc:e3:41:a1:50:48:87:30:77:e4:
dc:87:f8:65:0f:06:14:f7:ce:f9:f9:88:ae:93:a0:
92:ac:30:4b:34:c3:39:f0:e4:90:0a:57:27:a6:a8:
36:97:87:bf:57:05:df:2d:c9:24:62:0f:d6:02:98:
76:f5:11:4b:7c:65:95:66:88:47:9c:fa:e5:da:73:
f5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5E:5B:BC:6F:3B:52:9A:0D:C6:41:C4:26:B8:73:B6:A6:85:41:7F
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32613a3a2f34382d3438203d3e20323136313231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:2a::/48
Signature Algorithm: sha256WithRSAEncryption
51:58:83:59:23:0b:51:1b:e9:3e:b6:61:42:df:b4:4b:a8:93:
7a:34:5d:35:20:ec:14:15:e8:b4:8f:6e:19:58:ce:01:77:f0:
7a:8c:67:df:21:b1:f1:22:da:e1:20:54:e2:b9:e2:26:ef:02:
af:02:29:7f:b6:58:be:09:4d:be:42:eb:75:5f:b8:43:ee:58:
c7:cc:44:95:36:e4:c1:68:a1:c4:d9:01:a7:94:4d:7f:a9:96:
4e:83:c6:9d:45:71:2d:6d:0e:31:0b:c6:88:fb:26:00:2d:cc:
56:3e:f0:3e:c8:0d:1d:f5:99:7a:91:27:7f:4b:17:62:50:20:
1c:01:af:1b:08:20:35:b1:4a:7a:81:e4:47:42:d1:37:02:8c:
0c:04:89:c6:75:5b:e8:e6:1f:da:34:eb:43:cc:61:39:38:c9:
2f:16:11:e2:91:ab:16:97:64:c3:ac:30:8d:48:cb:b6:eb:00:
2a:20:bf:53:6a:a2:ce:4d:73:ea:5e:6b:5b:3a:5e:26:1a:56:
e0:9d:32:85:54:10:e4:03:70:57:b5:8c:25:19:81:3b:49:87:
b3:d4:6a:0f:32:3d:1b:ae:66:76:81:15:ee:77:43:e3:91:da:
06:e4:ae:6c:a0:8e:b8:9b:b6:e4:f3:f0:0e:f4:d8:c7:63:ac:
be:72:6a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:08:49 2026 by rpki-client