Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32663a3a2f34382d3438203d3e20323036303333.roa
File: 326131313a323963303a32663a3a2f34382d3438203d3e20323036303333.roa (raw, json)
Hash identifier: zb65Tcs9qzDw3CcES1Pzdv432E5w8psuTVElBBEsyR8=
Subject key identifier: B6:A8:27:8F:26:E8:11:D1:40:8B:29:B5:F5:3F:DF:87:D6:E7:BA:F2
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 6E84E4199A3CB03915A60C3643C804685632BB28
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32663a3a2f34382d3438203d3e20323036303333.roa
Signing time: Sun 25 Oct 2026 19:23:04 +0000
ROA not before: Sun 25 Oct 2026 19:18:04 +0000
ROA not after: Sun 24 Oct 2027 19:23:04 +0000
asID: 206033
IP address blocks: 2a11:29c0:2f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:84:e4:19:9a:3c:b0:39:15:a6:0c:36:43:c8:04:68:56:32:bb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Oct 25 19:18:04 2026 GMT
Not After : Oct 24 19:23:04 2027 GMT
Subject: CN=B6A8278F26E811D1408B29B5F53FDF87D6E7BAF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:a2:5e:f5:13:b3:84:d4:cd:0b:cf:b1:90:
d2:af:2f:87:b7:a7:1e:a3:8f:03:c9:7d:78:94:b3:
fa:f5:44:ad:6a:6a:4b:aa:d1:68:0d:45:00:5c:65:
73:3b:f5:42:61:38:fa:96:69:65:ea:7d:cf:dd:17:
84:4c:a6:69:d4:22:67:96:b7:7e:c9:18:a8:f5:fa:
17:c6:70:cb:c7:c8:d7:71:52:4d:84:b2:5b:9c:cc:
f6:4f:32:81:22:ea:ea:3d:1f:c9:89:3c:c5:6c:f6:
48:28:82:49:8c:ec:32:69:0d:71:26:79:7c:3c:f3:
ab:fb:22:37:92:43:67:35:e5:fe:60:bd:c3:41:6a:
05:7e:9c:88:43:83:95:8e:4c:e7:37:4f:95:5f:8d:
8e:7f:35:98:cf:9f:52:9a:25:bd:bb:4f:e4:ac:0e:
2a:0a:22:f0:d0:58:c7:7b:9f:27:86:85:a7:24:da:
20:b4:a0:3c:65:98:96:fe:98:43:74:bc:7f:8c:5a:
30:6e:f8:9b:8c:c9:e1:9e:49:f6:41:af:62:7e:93:
68:19:16:10:7b:b9:4d:0b:7a:90:a9:8a:f0:b5:44:
c4:74:38:14:50:2f:dc:50:7c:83:2d:e8:63:b4:af:
6e:1e:1d:18:26:38:97:03:e5:1b:bf:1e:01:df:8a:
43:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A8:27:8F:26:E8:11:D1:40:8B:29:B5:F5:3F:DF:87:D6:E7:BA:F2
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32663a3a2f34382d3438203d3e20323036303333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:2f::/48
Signature Algorithm: sha256WithRSAEncryption
28:86:0b:fe:0a:ac:e4:47:c0:da:b2:ee:60:de:b3:52:ac:66:
c9:95:64:2f:a1:63:a0:fa:be:d4:47:bb:45:63:5b:4e:fb:5a:
fb:68:af:87:f6:ea:5e:78:a4:57:5f:0a:80:bc:9c:99:1b:ed:
d7:7c:36:2e:93:92:00:20:de:cd:af:d3:58:30:48:d3:6a:94:
f2:fe:ac:0b:e3:d8:e6:56:77:cd:b5:dc:aa:16:f7:9f:b1:e7:
df:89:f6:85:fd:43:a5:a3:17:9f:8f:a5:30:ca:8e:51:0d:ed:
49:b4:1f:64:01:1a:22:64:ae:f2:95:b2:42:e8:8e:56:77:91:
28:48:6d:db:25:94:30:e9:37:74:7c:53:e8:b0:73:4a:2b:0a:
ea:ee:52:b6:6e:98:4b:3d:f5:86:42:11:48:2c:20:82:cb:4c:
c3:74:36:bb:4e:13:86:08:8d:5d:f9:ea:1d:b9:9a:92:79:ce:
1f:85:b5:e2:67:d8:66:51:1f:5b:a6:25:5f:62:21:89:69:49:
66:69:94:3e:87:12:ff:d4:9a:94:bf:d7:4e:38:44:66:c3:9e:
9c:3e:1c:47:10:80:79:d6:8f:ee:fb:82:d9:8f:78:37:f5:5d:
d0:61:6b:bc:0c:e0:22:bd:c1:1a:54:e6:31:81:a2:3f:af:16:
db:45:e8:c6
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUboTkGZo8sDkVpgw2Q8gEaFYyuygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTk2ZDg1OTk2ZTkzNTRkMTAwNWU0NGM3ODFkMzhhZGNm
MTA4Mjg3MzAeFw0yNjEwMjUxOTE4MDRaFw0yNzEwMjQxOTIzMDRaMDMxMTAvBgNV
BAMTKEI2QTgyNzhGMjZFODExRDE0MDhCMjlCNUY1M0ZERjg3RDZFN0JBRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5cqJe9ROzhNTNC8+xkNKvL4e3
px6jjwPJfXiUs/r1RK1qakuq0WgNRQBcZXM79UJhOPqWaWXqfc/dF4RMpmnUImeW
t37JGKj1+hfGcMvHyNdxUk2EsluczPZPMoEi6uo9H8mJPMVs9kgogkmM7DJpDXEm
eXw886v7IjeSQ2c15f5gvcNBagV+nIhDg5WOTOc3T5VfjY5/NZjPn1KaJb27T+Ss
DioKIvDQWMd7nyeGhack2iC0oDxlmJb+mEN0vH+MWjBu+JuMyeGeSfZBr2J+k2gZ
FhB7uU0LepCpivC1RMR0OBRQL9xQfIMt6GO0r24eHRgmOJcD5Ru/HgHfikMNAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUtqgnjyboEdFAiym19T/fh9bnuvIwHwYDVR0j
BBgwFoAU6W2FmW6TVNEAXkTHgdOK3PEIKHMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm
YmY1LzAvRTk2RDg1OTk2RTkzNTREMTAwNUU0NEM3ODFEMzhBRENGMTA4Mjg3My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZXMkZtVzZUVk5FQVhrVEhnZE9LM1BF
SUtITS5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExMTViYzYt
MTBmNi00YWYzLWJhMDktOGI2ODdhNTZmYmY1LzAvMzI2MTMxMzEzYTMyMzk2MzMw
M2EzMjY2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMDM2MzAzMzMzLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKhEpwAAvMA0GCSqGSIb3DQEBCwUAA4IBAQAohgv+CqzkR8Dasu5g3rNS
rGbJlWQvoWOg+r7UR7tFY1tO+1r7aK+H9upeeKRXXwqAvJyZG+3XfDYuk5IAIN7N
r9NYMEjTapTy/qwL49jmVnfNtdyqFvefseffifaF/UOloxefj6Uwyo5RDe1JtB9k
ARoiZK7ylbJC6I5Wd5EoSG3bJZQw6Td0fFPosHNKKwrq7lK2bphLPfWGQhFILCCC
y0zDdDa7ThOGCI1d+eoduZqSec4fhbXiZ9hmUR9bpiVfYiGJaUlmaZQ+hxL/1JqU
v9dOOERmw56cPhxHEIB51o/u+4LZj3g39V3QYWu8DOAivcEaVOYxgaI/rxbbRejG
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:46:46 2026 by rpki-client