Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336463303a3a2f34342d3438203d3e20323039363030.roa
File: 326131313a323963303a336463303a3a2f34342d3438203d3e20323039363030.roa (raw, json)
Hash identifier: 7M8/KrRDEA1E7QdI8wv9gvlVXmu2kZFQGw+OvnFOQNM=
Subject key identifier: 3C:2D:4C:CB:FC:00:A3:A7:9A:ED:55:94:31:CD:7E:A0:22:F6:8C:12
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 3CE66B5C1FC6DE31186DDF84224ED0FA8E438138
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336463303a3a2f34342d3438203d3e20323039363030.roa
Signing time: Thu 14 May 2026 16:22:52 +0000
ROA not before: Thu 14 May 2026 16:17:52 +0000
ROA not after: Thu 13 May 2027 16:22:52 +0000
asID: 209600
IP address blocks: 2a11:29c0:3dc0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:e6:6b:5c:1f:c6:de:31:18:6d:df:84:22:4e:d0:fa:8e:43:81:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: May 14 16:17:52 2026 GMT
Not After : May 13 16:22:52 2027 GMT
Subject: CN=3C2D4CCBFC00A3A79AED559431CD7EA022F68C12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a3:17:6d:7c:93:9c:8b:ea:3b:df:23:42:14:
4a:d5:a0:9e:c0:01:ba:aa:46:09:91:37:6b:88:5e:
e5:73:b5:7a:74:4d:d9:fa:56:aa:9c:3f:4f:39:99:
70:4e:88:1d:06:6a:35:aa:05:56:ca:09:89:25:04:
68:fb:3c:7c:ba:77:48:5d:7a:48:19:de:53:12:10:
fa:49:34:18:4c:11:ec:0f:59:56:30:50:d7:2a:3f:
38:bc:04:b2:d8:33:7c:07:69:23:77:56:60:2c:b1:
1c:82:2b:92:9e:26:25:28:fe:59:c7:21:fc:f5:cc:
70:9c:4e:1c:64:51:48:e7:36:9c:ab:75:e5:3e:54:
86:67:cc:36:e4:17:b3:22:75:ed:eb:1f:45:6f:14:
19:62:8a:a9:43:ee:eb:5d:3b:b8:8e:5c:da:fc:f1:
06:8c:1a:73:65:b8:0d:67:1a:a5:0f:94:69:e3:c0:
9c:11:a2:5c:6e:d3:31:f0:46:04:99:92:0a:6a:c9:
56:d7:55:b3:03:44:27:16:d3:e1:0c:82:d0:2c:d3:
e4:2f:82:97:1c:77:d8:82:1f:2d:68:ae:c8:b4:c8:
9c:5b:fc:d7:b9:c9:02:5b:b2:8a:b5:29:b7:0a:8c:
d3:6e:4e:c2:2c:a3:3c:05:35:87:27:10:63:79:25:
8f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2D:4C:CB:FC:00:A3:A7:9A:ED:55:94:31:CD:7E:A0:22:F6:8C:12
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336463303a3a2f34342d3438203d3e20323039363030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3dc0::/44
Signature Algorithm: sha256WithRSAEncryption
99:b2:b9:79:46:0d:1d:ec:c6:9c:ab:c0:6f:86:db:d1:d3:50:
8a:c0:57:cb:61:c1:55:12:6b:5b:84:c2:87:75:65:b5:d1:86:
f8:47:87:50:45:7f:06:69:67:1e:2d:74:0e:32:6d:aa:3d:6f:
c7:28:ef:f6:51:56:7b:e0:f8:7b:0e:16:37:55:b7:54:37:e2:
06:4b:8a:e8:2b:9c:a6:26:2b:77:3c:ca:71:98:7a:f9:ec:a8:
78:34:b8:df:7e:aa:b2:18:9f:82:55:55:94:c1:12:42:10:57:
99:68:23:9c:51:63:a8:40:59:54:87:81:b7:6d:68:e8:bf:61:
cf:fe:b1:6d:dc:be:fa:ad:56:06:e7:6b:0b:68:13:ad:92:9f:
34:f5:e4:23:e7:22:96:48:8a:38:1c:09:3d:48:e5:ef:46:6b:
1a:00:b5:9c:9f:5e:97:a5:a7:28:62:e0:40:51:6e:2f:4b:7b:
bd:cd:6d:c5:f4:b9:27:b8:d5:d0:9f:78:3a:d6:59:3e:8b:7f:
b3:79:19:8a:22:81:0b:24:1b:0f:d2:81:ea:bf:79:20:9f:7a:
12:15:ba:1b:ee:53:ff:47:09:37:5a:0e:c8:33:eb:f2:ed:2a:
6f:11:e1:f6:56:6f:a0:c4:5b:0b:ca:bf:93:f8:cd:6f:0d:57:
e6:e5:66:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:08:25 2026 by rpki-client