Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33363a3a2f34382d3438203d3e20323035373035.roa
File: 326131313a323963303a33363a3a2f34382d3438203d3e20323035373035.roa (raw, json)
Hash identifier: A7uYEjrlJwW+F5JVxF35WfnsybiF3nH1+3xrPsF9vQw=
Subject key identifier: EE:28:16:B9:87:DC:40:EB:71:3B:B0:79:01:B8:28:0E:2C:49:1A:14
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 64F98112BD75AA83BFC10C5253E4C9B76F595334
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33363a3a2f34382d3438203d3e20323035373035.roa
Signing time: Wed 27 May 2026 16:36:18 +0000
ROA not before: Wed 27 May 2026 16:31:18 +0000
ROA not after: Wed 26 May 2027 16:36:18 +0000
asID: 205705
IP address blocks: 2a11:29c0:36::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:f9:81:12:bd:75:aa:83:bf:c1:0c:52:53:e4:c9:b7:6f:59:53:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: May 27 16:31:18 2026 GMT
Not After : May 26 16:36:18 2027 GMT
Subject: CN=EE2816B987DC40EB713BB07901B8280E2C491A14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4a:8e:ba:51:b0:ee:81:10:62:83:5a:3e:dc:
3c:c2:b3:03:4d:a6:57:b1:43:b5:a9:6f:ab:12:c0:
c5:bd:aa:8c:56:9b:6f:3b:fa:d3:1f:51:14:48:63:
53:e3:ac:10:8a:99:88:5e:37:36:5c:c2:76:21:1d:
4f:5f:6e:75:92:91:c2:fb:dd:9e:30:51:e3:35:7b:
2f:b1:43:23:de:ba:e6:24:4a:f7:d5:43:ae:cd:ec:
1b:0f:3a:37:27:41:5b:ce:b3:47:4c:50:b1:62:e1:
b2:45:64:ae:70:04:04:e0:95:a6:b4:cc:74:c5:f9:
65:f9:e4:2b:d0:9f:d4:83:62:f3:35:7d:a7:58:f2:
99:56:0c:01:bd:b6:ea:08:25:00:7d:e1:6e:d1:81:
de:11:8c:f4:66:8b:3b:98:5e:10:5d:ae:d3:a6:6e:
be:a3:a4:cc:4a:3f:4b:18:c4:97:ef:d3:1f:6d:ff:
ba:c8:da:08:c7:f6:aa:74:b7:43:19:45:ac:8d:c3:
76:fc:b0:60:39:c3:d8:b5:c1:8d:f9:aa:43:3d:b7:
aa:1c:75:9e:e0:61:a9:87:8c:57:00:ff:3e:61:fe:
79:29:ab:2b:e8:b5:39:12:c1:45:31:4d:1e:08:95:
7b:78:e8:1c:c2:ed:7c:1a:fa:7e:41:f3:43:46:4e:
22:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:28:16:B9:87:DC:40:EB:71:3B:B0:79:01:B8:28:0E:2C:49:1A:14
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33363a3a2f34382d3438203d3e20323035373035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:36::/48
Signature Algorithm: sha256WithRSAEncryption
4c:cb:e6:12:58:3a:3d:7b:f6:1c:35:1a:6a:86:eb:ba:fc:39:
1a:92:2b:35:50:c6:6d:9e:0d:5a:8c:36:9b:bc:8e:47:43:00:
38:f0:8b:eb:a4:43:a3:be:76:89:68:4b:95:3f:14:17:2f:a7:
26:5f:18:4b:b5:eb:f3:7a:86:8e:06:47:a5:3d:03:7d:45:6f:
cd:c0:ba:93:e6:49:5d:38:60:a2:29:f6:b4:76:f9:ca:a4:b1:
cb:25:13:10:5f:2b:e2:cd:48:f5:c8:51:09:d8:a5:a7:97:2d:
14:21:59:fd:a5:a1:28:f9:8e:ef:a0:57:a8:2e:53:46:9e:d6:
cc:e7:3e:14:c9:62:dc:67:17:01:bd:92:5e:f6:ae:6c:6b:58:
45:b6:6f:d1:6e:de:32:d1:ff:61:18:5c:7e:1c:cd:6a:db:99:
cc:ac:0d:d4:d6:d1:01:43:85:df:c7:b2:64:7e:ed:ba:31:c3:
01:0b:0f:77:b1:1a:1b:ff:4f:97:9d:00:0f:b9:8a:bc:44:52:
42:29:fd:a4:64:c3:de:b3:20:98:a3:1f:2f:8f:f1:0a:93:19:
b9:91:30:8b:00:5c:97:7c:3b:3d:24:87:bf:83:8d:0b:47:27:
27:2a:76:da:f0:c4:0a:e5:e5:ad:45:12:50:4e:2f:6d:e2:e3:
60:fd:60:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:32:35 2026 by rpki-client