Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336466623a3a2f34382d3438203d3e20323130333335.roa
File: 326131313a323963303a336466623a3a2f34382d3438203d3e20323130333335.roa (raw, json)
Hash identifier: XvTUe5Rhy55ta/moK5xqK7xST5ybIzJhABAiRfj1Jaw=
Subject key identifier: A0:1C:D3:56:DB:59:D1:C7:FD:AC:BC:CD:9F:62:1A:AB:70:7B:B9:7D
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 58C00557FA1A44F4AE3A76CD38C2ACE72E8A0823
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336466623a3a2f34382d3438203d3e20323130333335.roa
Signing time: Wed 22 Apr 2026 14:22:48 +0000
ROA not before: Wed 22 Apr 2026 14:17:48 +0000
ROA not after: Wed 21 Apr 2027 14:22:48 +0000
asID: 210335
IP address blocks: 2a11:29c0:3dfb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 20:56:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:c0:05:57:fa:1a:44:f4:ae:3a:76:cd:38:c2:ac:e7:2e:8a:08:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Apr 22 14:17:48 2026 GMT
Not After : Apr 21 14:22:48 2027 GMT
Subject: CN=A01CD356DB59D1C7FDACBCCD9F621AAB707BB97D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3e:bf:a0:87:c6:56:6d:e7:1d:49:ee:78:91:
ea:d6:2f:01:44:18:0f:ba:76:da:38:ed:b0:c0:bf:
f7:33:e1:d7:84:15:56:20:ac:f5:da:7f:2a:f4:0e:
03:1e:08:b5:cf:46:47:9c:95:65:80:39:ef:2e:0f:
08:9e:0c:f4:96:9b:2a:fb:00:8f:8e:12:d8:42:58:
c6:f4:f5:f3:e8:e3:b0:c4:08:a8:70:eb:23:7b:aa:
80:d4:66:4c:b6:e8:51:70:97:0f:19:f8:82:91:e9:
a6:e9:92:b2:d4:5f:da:c2:76:cf:0b:67:d3:25:cd:
ec:c1:3f:cc:2a:09:79:e6:80:aa:c4:6a:c7:21:73:
f7:a7:d4:e7:dd:da:a6:c7:7a:2f:a9:8e:2a:9b:79:
a2:d0:e6:f6:30:36:87:e0:b5:d7:b7:c8:87:ab:86:
dc:4e:77:00:fe:05:69:8e:ad:81:a0:71:bf:07:fc:
4b:e6:7e:f3:f8:7f:3b:a1:0c:cb:c5:ea:b3:e5:ca:
40:91:49:21:be:39:22:02:15:94:9b:9c:ab:da:0a:
ba:74:ab:67:e5:76:9b:1f:6b:df:23:39:d5:cd:98:
ca:52:a0:80:30:f9:f6:31:de:31:55:97:af:81:3c:
ac:46:13:e2:6a:c8:d3:ad:a6:46:73:18:51:c8:9f:
d7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1C:D3:56:DB:59:D1:C7:FD:AC:BC:CD:9F:62:1A:AB:70:7B:B9:7D
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336466623a3a2f34382d3438203d3e20323130333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3dfb::/48
Signature Algorithm: sha256WithRSAEncryption
68:80:69:40:74:62:c5:c9:43:cb:06:4f:21:a2:eb:51:35:d8:
9a:e6:bb:c6:76:0f:7a:48:0f:88:17:2d:ec:9b:2d:78:e3:83:
9c:f3:06:49:fc:03:47:11:dc:ec:8c:82:78:e2:8c:78:85:ba:
af:b4:23:f3:3c:dd:83:9b:65:5a:5d:69:ab:f6:e3:9c:1d:3d:
31:68:b7:95:23:e0:0d:15:a4:1c:00:f8:f5:47:84:2a:0e:0e:
a4:fa:35:c7:37:8c:e6:75:b0:c0:1e:7f:19:b9:1e:b3:fb:2d:
4a:4c:ec:f0:c6:d5:af:55:c7:0f:6a:ba:ab:02:cd:7b:a4:cc:
4e:bd:22:79:90:95:6b:9d:9c:72:45:ee:3c:de:36:b0:f0:6a:
cb:af:fc:08:42:35:0b:a4:d0:86:95:f5:79:95:49:1f:c1:6f:
29:46:4c:4f:61:3d:f2:6f:8d:51:5a:37:4f:44:ed:8a:3c:e5:
15:b2:c5:d6:cf:37:a6:f9:67:6e:cd:12:e3:4a:94:83:00:4f:
32:91:10:f5:c6:42:fa:db:ba:04:96:6b:c5:a1:48:66:83:03:
6c:14:8a:4d:26:cd:ad:e7:dd:cc:ff:57:2b:52:5f:06:54:f3:
47:df:eb:f2:23:6b:91:ee:13:78:81:4d:a7:2b:bf:7e:f9:b1:
b1:c9:f0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:46:32 2026 by rpki-client