Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33333a3a2f34382d3438203d3e20323130333338.roa
File: 326131313a323963303a33333a3a2f34382d3438203d3e20323130333338.roa (raw, json)
Hash identifier: x6vcWA72YxL51QMicdh07/uWnwuFbWBtHS1f0LJeUhk=
Subject key identifier: 57:F9:24:6C:B3:20:46:45:08:24:9C:B8:A9:8F:EF:D0:78:92:AE:E0
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 18BE3E8A6E70823BD70D580836CA50F7C11153CE
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33333a3a2f34382d3438203d3e20323130333338.roa
Signing time: Wed 19 Aug 2026 20:23:00 +0000
ROA not before: Wed 19 Aug 2026 20:18:00 +0000
ROA not after: Wed 18 Aug 2027 20:23:00 +0000
asID: 210338
IP address blocks: 2a11:29c0:33::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:be:3e:8a:6e:70:82:3b:d7:0d:58:08:36:ca:50:f7:c1:11:53:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Aug 19 20:18:00 2026 GMT
Not After : Aug 18 20:23:00 2027 GMT
Subject: CN=57F9246CB320464508249CB8A98FEFD07892AEE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:b1:1d:1b:77:f5:31:97:4b:3b:f1:06:03:
d8:d3:9c:6d:8a:4a:b1:05:99:e1:b5:85:d5:44:71:
e2:bb:7b:3b:43:e7:54:cb:66:75:26:03:39:5a:95:
a3:c1:6d:12:74:39:83:33:e4:96:57:db:4f:18:a8:
1e:a4:89:28:eb:6f:90:39:37:bb:ee:78:bd:14:2d:
5f:f3:9d:5a:66:e7:6f:d3:69:0a:ae:2d:a1:e0:2f:
0f:8f:7e:bf:cc:a3:85:59:7e:b7:88:5b:4e:e2:bb:
30:73:3e:e1:63:33:51:65:79:c7:12:77:77:4c:86:
8f:e4:bc:05:65:e9:a1:78:93:13:d7:12:c1:5f:81:
c0:99:ce:a4:3c:17:24:c1:31:36:e0:7a:6d:2c:fb:
46:a9:65:c7:93:bc:28:d5:1d:93:aa:0b:d9:d9:25:
d5:72:3a:26:e1:8d:f4:d3:c7:a6:5e:2e:e1:53:e6:
01:c9:b2:19:ba:1c:f2:24:84:f3:31:9b:74:ff:8f:
2a:f5:39:b2:72:44:aa:7d:c9:c3:1a:02:29:dc:c4:
31:51:22:f5:87:34:70:96:eb:f1:41:dc:c9:59:ad:
79:5c:66:3b:d1:76:c2:cb:14:b3:9b:67:e5:24:82:
9e:23:fd:67:f5:0f:8d:cb:03:15:b2:b1:85:1f:1b:
13:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F9:24:6C:B3:20:46:45:08:24:9C:B8:A9:8F:EF:D0:78:92:AE:E0
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33333a3a2f34382d3438203d3e20323130333338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:33::/48
Signature Algorithm: sha256WithRSAEncryption
79:b3:e8:13:02:ba:60:d1:e2:97:3e:98:70:14:ae:3c:b8:6b:
2c:af:b8:ff:b1:24:fd:7e:a2:4c:d1:71:87:7b:aa:8e:6b:01:
b7:3a:04:0a:f3:94:f6:70:d6:08:11:6d:c5:0d:ce:6a:f1:07:
63:e9:a5:0a:64:22:c6:e5:3e:c5:f6:b2:5f:c1:c1:75:50:0f:
23:95:98:c5:95:9e:80:d7:6c:b0:52:0d:15:20:cc:64:e9:9e:
e9:c8:05:73:21:07:47:3d:5d:45:8b:4b:fe:3d:ee:c1:b2:71:
ea:3f:e5:df:54:4d:e7:33:97:a0:79:5b:b5:e1:9b:9b:3d:bd:
1c:39:d8:27:94:19:c1:6b:c2:b4:7c:a3:3f:a2:37:d9:17:5c:
74:ee:2d:62:d9:8f:2b:5f:04:bd:f0:b2:96:ca:21:12:32:e2:
74:86:b1:d1:e5:af:df:c4:9a:d9:b8:31:39:d8:8d:37:98:8e:
2a:4f:64:fd:80:28:7a:7a:72:c5:32:57:85:4e:55:65:7d:7b:
91:aa:d6:72:03:99:93:41:93:9b:a3:37:24:e3:db:ad:33:e9:
ae:6c:c0:e0:d2:30:a1:80:b8:ff:91:cb:ad:11:a8:80:ed:f0:
50:aa:e2:9d:11:0e:6a:a6:12:5d:23:2c:13:03:80:e0:8b:63:
9d:27:bc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:06:33 2026 by rpki-client