Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32623a3a2f34382d3438203d3e20323135393533.roa
File: 326131313a323963303a32623a3a2f34382d3438203d3e20323135393533.roa (raw, json)
Hash identifier: WlpE3RBLqOWNXkn3+Lhsz6i5EWldBHYeNeB0sha7JD8=
Subject key identifier: 27:61:65:8C:95:04:34:53:8B:FC:A8:B2:06:60:64:23:46:47:27:13
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 6C537022984254AB59B9DFC8048996C333D464AC
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32623a3a2f34382d3438203d3e20323135393533.roa
Signing time: Sat 05 Sep 2026 10:23:02 +0000
ROA not before: Sat 05 Sep 2026 10:18:02 +0000
ROA not after: Sat 04 Sep 2027 10:23:02 +0000
asID: 215953
IP address blocks: 2a11:29c0:2b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:53:70:22:98:42:54:ab:59:b9:df:c8:04:89:96:c3:33:d4:64:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Sep 5 10:18:02 2026 GMT
Not After : Sep 4 10:23:02 2027 GMT
Subject: CN=2761658C950434538BFCA8B20660642346472713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b5:16:6e:d8:b4:ea:7a:35:9e:c7:8c:65:54:
87:60:82:e8:e5:c8:75:ec:50:23:f8:91:bb:6a:0f:
24:8a:8a:c6:f0:5e:50:bc:4c:62:e4:b9:dd:cc:f0:
ac:e8:d3:3c:20:5e:d5:af:57:73:28:4d:95:6b:3e:
ac:38:5e:dc:50:6a:dd:2e:60:ce:ad:94:f0:a3:5d:
f5:9a:02:2d:b9:f4:26:30:83:9a:c3:4a:45:b1:bb:
9c:74:32:2d:69:58:82:f2:4d:2e:e2:1a:7f:4b:f2:
d9:32:f1:24:ba:a1:fb:41:0a:20:13:e7:d8:bd:c0:
07:22:10:17:bf:81:dd:1c:b6:f8:c8:a9:ec:c8:a6:
2b:ce:1c:c6:1e:c6:5f:2c:62:de:84:6f:0a:8a:b1:
33:b1:b3:51:58:5d:7b:b1:cb:b0:60:6f:58:d7:4d:
31:aa:bf:0b:c6:95:d3:9e:01:e1:fc:c5:1c:29:de:
3e:6d:2c:cc:0c:40:4a:d1:10:87:df:39:9f:84:a9:
9c:30:19:79:10:d2:cf:0d:cd:56:08:40:e2:56:f8:
1a:67:bc:67:8d:67:8f:ee:9f:e9:cb:63:f2:bd:e3:
33:98:bd:a2:fd:85:af:54:ed:27:05:d9:96:e3:9d:
d2:6e:f3:8b:29:8d:ea:0e:25:e8:bd:21:2f:5b:03:
2c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:61:65:8C:95:04:34:53:8B:FC:A8:B2:06:60:64:23:46:47:27:13
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32623a3a2f34382d3438203d3e20323135393533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:2b::/48
Signature Algorithm: sha256WithRSAEncryption
79:0b:91:f2:bd:b6:9e:dc:31:63:f5:f8:07:9c:c2:4b:10:62:
78:3c:d1:ec:8b:23:0f:04:61:c2:2c:e4:0d:a3:fd:8e:e7:6c:
b8:30:9b:b0:be:a0:2d:7d:ff:4b:62:d8:48:09:40:57:ff:e9:
c4:28:4b:4c:c9:e3:90:dc:8f:0c:f8:c4:d3:93:b5:ef:97:f2:
d8:eb:e8:01:f3:e0:78:0f:2f:29:cc:9a:1a:52:e6:99:e1:6c:
b4:e1:8f:8a:62:5d:64:c9:0f:7d:97:79:4b:51:d6:b2:75:aa:
95:fb:23:83:b3:16:4c:bd:74:e5:cc:61:59:f2:37:7f:e1:f0:
0c:64:e1:7e:c9:8a:ec:57:bf:5e:0b:c6:f9:1e:ae:5f:83:fd:
a5:34:7a:73:98:aa:09:30:3d:66:e0:26:9e:ef:57:02:73:b4:
50:f9:2b:32:7c:d3:cc:0d:d4:0f:0d:6f:45:25:4c:aa:28:fa:
18:5f:e6:a8:15:98:37:15:fb:e8:a0:dc:46:18:4c:90:f0:51:
68:93:8a:94:3e:6f:93:1b:e7:87:4c:ef:fc:9a:6e:f9:cf:81:
7b:a2:c5:fd:f3:99:2c:6c:d7:ee:33:22:06:47:b2:b9:cd:e5:
5c:41:d3:d9:a6:aa:41:78:11:9a:ce:2c:1c:50:1b:d8:ed:a3:
f6:58:0a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:46:36 2026 by rpki-client