Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32633a3a2f34382d3438203d3e20323135393533.roa
File: 326131313a323963303a32633a3a2f34382d3438203d3e20323135393533.roa (raw, json)
Hash identifier: aEMsR+MTgNTMFZbVHA0SFf9vRiW+9Lgu85wlng6zvRA=
Subject key identifier: 10:A6:00:E4:04:65:81:2F:BF:C5:AB:BA:3C:D1:E1:B1:FA:03:72:02
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 668513AEE9A6263F3F37BE3D3E23C4AEC2004800
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32633a3a2f34382d3438203d3e20323135393533.roa
Signing time: Sat 05 Sep 2026 10:23:02 +0000
ROA not before: Sat 05 Sep 2026 10:18:02 +0000
ROA not after: Sat 04 Sep 2027 10:23:02 +0000
asID: 215953
IP address blocks: 2a11:29c0:2c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 22:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:85:13:ae:e9:a6:26:3f:3f:37:be:3d:3e:23:c4:ae:c2:00:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Sep 5 10:18:02 2026 GMT
Not After : Sep 4 10:23:02 2027 GMT
Subject: CN=10A600E40465812FBFC5ABBA3CD1E1B1FA037202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:16:0a:52:e1:9a:84:c2:e6:4e:f5:96:06:f3:
a6:63:7c:ad:4e:f5:46:d8:17:45:2d:76:3b:e0:b9:
9f:d0:8f:4e:05:b1:9e:59:93:6a:8c:c6:10:b3:fe:
81:fa:1a:0f:07:97:73:c6:99:5d:2f:cb:15:ca:8f:
b6:7a:81:2c:15:c8:76:a3:b7:d8:9b:21:cf:f4:ed:
ff:95:65:32:39:0f:26:71:97:e0:8b:61:dd:b9:07:
a3:bb:5f:4d:52:96:ae:02:ac:35:40:01:57:8f:12:
ed:c2:95:d4:0f:b9:74:0f:ca:6d:70:c8:ab:cf:71:
27:db:9b:ca:74:a8:45:f1:57:08:48:94:a3:f5:ec:
e1:fd:5b:47:66:ec:4a:0a:6e:0b:37:c6:74:65:a9:
c4:a8:51:e3:f9:68:8b:a7:5f:d0:4a:2a:90:e2:83:
e3:81:52:1a:0e:b8:13:51:b2:97:60:24:42:8e:34:
e6:50:9f:c4:65:d6:06:04:59:12:2b:4c:fa:7e:a6:
db:70:7c:f9:8a:df:66:b6:14:09:2d:7c:34:57:93:
7f:2c:4e:0d:d9:c5:b0:bd:85:d2:82:62:b0:b0:c8:
c5:70:c3:01:23:bb:12:98:bd:2e:17:2b:ed:0e:ff:
af:07:d9:c9:e7:34:ed:9f:78:30:54:39:6c:60:ed:
b4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A6:00:E4:04:65:81:2F:BF:C5:AB:BA:3C:D1:E1:B1:FA:03:72:02
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32633a3a2f34382d3438203d3e20323135393533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:2c::/48
Signature Algorithm: sha256WithRSAEncryption
0b:d6:6b:c8:9f:6a:39:42:08:b6:6c:95:12:af:77:12:86:e9:
f1:96:97:d8:e9:46:52:12:56:ee:58:8e:b2:28:16:0a:fd:c9:
ac:a0:f1:35:0a:39:36:8c:a4:47:ca:ba:9a:54:d7:74:2d:23:
bd:39:73:c3:18:71:76:a4:d3:de:15:08:2a:63:c2:a9:9e:b3:
8e:6b:da:6c:2e:9b:0a:60:f5:19:6f:7e:51:72:be:63:65:37:
b8:f2:30:a2:68:46:fb:19:bb:f0:90:44:21:a6:87:a9:55:88:
cf:ba:39:19:89:5a:a8:0c:1d:06:c8:ee:2b:10:c9:5e:56:63:
7b:cc:9b:f0:e8:1e:9e:50:ed:5f:53:84:5a:08:28:e0:3a:a5:
fa:bd:42:0a:87:e5:90:d8:8c:74:6f:8e:e9:34:de:79:ec:02:
92:22:c8:40:2e:9c:ac:77:fe:16:3b:9f:3e:a9:23:0e:bf:04:
27:33:e7:c7:68:04:15:2c:3b:f6:56:6b:7f:97:df:5f:7a:1c:
48:a5:9a:90:3f:d0:50:4c:4a:e2:1b:bf:7a:68:11:97:bc:31:
eb:cc:f4:0e:4d:0d:e0:e9:03:fa:ec:be:45:c9:ca:10:49:c1:
ce:9c:09:49:50:d3:87:57:63:4d:ef:c5:ac:75:68:43:3b:26:
59:81:69:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:22:25 2026 by rpki-client