Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336466353a3a2f34382d3438203d3e20323038333333.roa
File: 326131313a323963303a336466353a3a2f34382d3438203d3e20323038333333.roa (raw, json)
Hash identifier: XPoeFvvvDrVVjPzxx7CgTtHtGGEsOxMWlypqmrpTHDM=
Subject key identifier: 4E:BB:EE:A8:A3:35:45:9F:76:52:82:3E:76:79:13:B6:C3:91:8F:97
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 2DFA7EE8A10A9A87D86C5D5D3428F7DDA1EF3490
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336466353a3a2f34382d3438203d3e20323038333333.roa
Signing time: Wed 22 Apr 2026 14:22:48 +0000
ROA not before: Wed 22 Apr 2026 14:17:48 +0000
ROA not after: Wed 21 Apr 2027 14:22:48 +0000
asID: 208333
IP address blocks: 2a11:29c0:3df5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 20:56:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:fa:7e:e8:a1:0a:9a:87:d8:6c:5d:5d:34:28:f7:dd:a1:ef:34:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Apr 22 14:17:48 2026 GMT
Not After : Apr 21 14:22:48 2027 GMT
Subject: CN=4EBBEEA8A335459F7652823E767913B6C3918F97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:79:28:fb:db:a9:b5:7a:20:b4:02:a1:b1:ab:
a0:15:24:86:32:ae:29:2c:f5:a1:f0:35:7f:30:e3:
8e:e7:fb:0a:37:55:6e:88:c2:df:fd:64:29:46:d3:
0b:ca:f5:b7:00:6c:39:73:b0:6d:3f:7b:70:a1:1c:
e6:b9:42:a0:5a:ce:9d:67:2d:67:2e:be:d3:b0:f7:
60:45:b1:1f:14:c1:40:86:43:37:35:fd:59:c0:ad:
da:e5:1c:7e:fc:9c:c6:55:f7:25:58:87:81:97:90:
5e:ec:b2:4b:20:b2:a4:72:1a:27:8c:08:15:8d:03:
db:a6:15:37:1d:0f:e1:7b:f6:cd:16:65:5d:60:71:
2b:ed:04:68:f2:e0:c4:1a:0a:c4:d8:5f:f3:1b:cb:
4f:50:2a:e8:5a:8f:f2:38:90:04:93:13:1f:5d:45:
26:79:67:c6:c7:1e:b1:ba:aa:75:f5:fc:b4:74:af:
fc:6a:6a:0c:37:25:a7:52:37:36:18:40:db:36:e1:
c2:62:e8:68:cb:f9:37:82:21:19:e0:5f:e7:da:d7:
4b:d2:f1:e5:86:21:61:5d:c2:f1:6d:c6:20:5b:8e:
7f:df:ca:0e:6d:dc:43:d7:ca:bf:df:6d:7a:36:e8:
0a:f9:d9:aa:bd:6c:85:13:64:df:0b:17:63:bd:ac:
11:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BB:EE:A8:A3:35:45:9F:76:52:82:3E:76:79:13:B6:C3:91:8F:97
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336466353a3a2f34382d3438203d3e20323038333333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3df5::/48
Signature Algorithm: sha256WithRSAEncryption
72:6a:44:c0:1a:d0:68:71:af:20:ed:57:0e:b1:aa:ea:87:b4:
b2:78:f5:4d:92:bd:e9:ea:3e:9c:58:0d:99:81:5f:13:67:ea:
e3:bb:7c:51:4f:f0:35:fc:ed:34:52:31:ca:cd:f6:6c:a5:ab:
81:fa:62:5e:c3:da:f9:35:19:99:e7:a5:85:11:6d:66:1c:da:
04:05:64:6b:cc:0b:e8:14:81:03:94:5a:ab:3c:86:ae:77:56:
de:25:a3:fc:fb:2e:e8:10:41:e2:b3:a2:0b:f8:27:e6:d0:11:
78:fa:f6:8c:05:73:98:82:b9:55:04:a5:56:19:ac:8e:7e:19:
6d:2a:1b:8d:64:ac:3e:05:23:ed:98:b7:ef:8a:50:da:9a:eb:
9b:3c:af:71:ad:d5:4f:95:61:4a:d4:a3:bc:49:38:7c:cc:ca:
65:05:85:cc:0c:ee:48:10:f3:3f:9e:ed:2f:f4:14:e8:08:61:
c9:38:37:68:14:16:50:c6:5a:39:be:61:2e:99:ac:fb:22:63:
b7:ce:4a:30:6d:1b:8f:35:29:09:bd:4d:e1:77:a6:9b:92:da:
29:cf:75:1d:20:64:07:f3:79:52:07:19:5a:dc:27:18:eb:a9:
a4:ec:8f:26:07:f4:a5:18:46:06:97:16:88:08:6f:f1:2c:f2:
07:de:2e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:59:29 2026 by rpki-client