Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32653a3a2f34382d3438203d3e20323135393837.roa
File: 326131313a323963303a32653a3a2f34382d3438203d3e20323135393837.roa (raw, json)
Hash identifier: GKPEYad3w+9kG/kqMwZmCP/JkaitJNQXAc8GPYTAwh8=
Subject key identifier: 4A:FA:8B:6A:26:A8:0A:28:45:C5:84:C4:49:65:39:DF:87:72:58:56
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 79E85E6EC5669F4A8F8A29A36A27D92E78A91096
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32653a3a2f34382d3438203d3e20323135393837.roa
Signing time: Sun 07 Jun 2026 21:22:54 +0000
ROA not before: Sun 07 Jun 2026 21:17:54 +0000
ROA not after: Sun 06 Jun 2027 21:22:54 +0000
asID: 215987
IP address blocks: 2a11:29c0:2e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:e8:5e:6e:c5:66:9f:4a:8f:8a:29:a3:6a:27:d9:2e:78:a9:10:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Jun 7 21:17:54 2026 GMT
Not After : Jun 6 21:22:54 2027 GMT
Subject: CN=4AFA8B6A26A80A2845C584C4496539DF87725856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:52:93:3c:83:68:9a:ab:3f:2e:bb:4d:d9:
29:46:5f:01:3a:77:52:c3:a1:c0:af:3c:53:60:61:
a9:41:70:63:b1:1e:1a:d0:aa:44:d0:73:dc:1b:6b:
04:a4:78:23:ee:b1:10:86:51:8b:2b:23:eb:d8:0f:
df:a3:ae:00:2f:a2:7b:9c:84:96:05:39:be:09:b3:
f7:17:9a:cf:61:d3:63:ea:bd:da:dd:a0:2e:f7:fe:
2d:4a:66:bf:2e:27:e2:a7:31:e4:ff:7c:06:97:bb:
b7:1d:24:9e:70:19:88:11:77:5e:e4:18:99:17:64:
81:47:66:ff:d2:cf:c6:c8:9c:d7:fc:8a:7c:72:24:
17:80:09:57:f8:ec:97:be:ff:80:ce:29:29:cb:17:
98:67:0c:63:47:61:a0:46:a2:52:e0:61:4c:69:82:
ae:0a:b2:c7:0f:e1:50:be:6e:f3:9d:8b:e1:ec:98:
a4:38:1b:4d:df:b7:c4:cc:9c:4d:42:c6:10:0d:83:
70:9e:68:d9:57:f9:f0:fe:98:ba:0d:4d:41:a3:ae:
b8:49:20:fd:65:14:ad:16:b2:f9:ed:46:f7:7d:4b:
58:f7:cd:84:60:13:88:3e:00:4a:e0:bf:1f:97:79:
01:dd:89:5e:3e:fb:e7:d2:bc:15:9c:b6:a7:42:dd:
df:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FA:8B:6A:26:A8:0A:28:45:C5:84:C4:49:65:39:DF:87:72:58:56
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32653a3a2f34382d3438203d3e20323135393837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:2e::/48
Signature Algorithm: sha256WithRSAEncryption
2e:25:6b:06:3e:78:5f:5f:10:cc:42:58:d9:83:50:0d:7e:2f:
ec:b8:24:e3:e5:9f:fc:50:00:a5:6c:1a:c3:d9:85:37:4f:91:
d7:25:b1:74:e8:5b:c5:05:db:85:b3:bf:71:96:ba:49:45:d7:
7e:ca:2a:6d:a1:56:c4:bd:bc:ab:a6:57:25:d2:e9:9c:22:a9:
00:d7:3e:22:a3:e7:47:77:d8:7f:e3:04:40:e4:5c:5d:4d:d1:
e3:5d:a9:28:7d:9e:06:af:7c:ce:ce:98:0f:75:50:d8:6d:58:
8f:e5:49:8d:d0:2d:79:80:cc:46:53:8f:ad:1b:04:4b:26:f7:
a0:73:cb:96:42:9e:70:98:ca:db:74:27:e8:4b:19:20:3a:74:
42:5c:f9:37:33:53:93:23:ed:dc:fd:2f:22:10:b9:67:db:5d:
71:91:b7:65:52:32:53:6c:74:29:21:5b:38:3e:fa:ae:a7:cf:
d9:a5:33:61:00:70:db:ef:f5:9b:0b:f5:c9:3d:75:18:e4:41:
ba:6a:86:66:48:0e:ea:09:23:01:f6:97:9d:f2:53:02:09:83:
35:47:05:7e:44:d2:a7:9d:2e:91:87:9c:55:08:52:c5:4a:c1:
e1:00:8b:b2:f2:ce:fa:58:b8:dd:9b:b5:59:7d:a1:d4:93:95:
1f:64:f7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:09:24 2026 by rpki-client