Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336530303a3a2f34342d3438203d3e20323130333338.roa
File: 326131313a323963303a336530303a3a2f34342d3438203d3e20323130333338.roa (raw, json)
Hash identifier: 9NJSX0b2gpPGj4WwjWl+K000WOnw4N6pU0y9569cEdk=
Subject key identifier: 67:BD:99:9B:65:9E:BF:EE:1E:1A:7E:6E:23:30:B7:61:B7:28:88:9A
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 16E6D73C33E1D0A2F2AEBD2C11AA0D64298AFC24
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336530303a3a2f34342d3438203d3e20323130333338.roa
Signing time: Wed 19 Aug 2026 21:23:00 +0000
ROA not before: Wed 19 Aug 2026 21:18:00 +0000
ROA not after: Wed 18 Aug 2027 21:23:00 +0000
asID: 210338
IP address blocks: 2a11:29c0:3e00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 22:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:e6:d7:3c:33:e1:d0:a2:f2:ae:bd:2c:11:aa:0d:64:29:8a:fc:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Aug 19 21:18:00 2026 GMT
Not After : Aug 18 21:23:00 2027 GMT
Subject: CN=67BD999B659EBFEE1E1A7E6E2330B761B728889A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fd:fd:e2:d7:a6:c5:b2:cb:ec:af:01:03:a5:
98:9e:9b:cd:7f:52:ce:31:1b:fc:fe:1d:5f:34:2c:
77:46:48:d4:4c:11:85:35:f3:90:6f:08:ab:ce:43:
93:36:64:e2:73:a5:1b:52:38:ba:89:65:4d:58:cd:
28:e7:43:01:44:10:11:10:48:16:7b:21:f9:27:ce:
a9:4e:14:4b:6d:08:fc:de:23:0d:0d:08:b8:be:77:
5a:92:f7:e7:f0:1c:fe:23:f2:87:1b:b1:a1:20:1a:
f1:60:7e:f1:ee:b1:09:ae:e2:af:0f:49:71:54:7c:
43:bf:9c:d9:3c:85:92:d5:e4:94:40:23:10:0e:45:
e8:66:ec:7d:c6:87:e1:23:cb:9c:61:1c:4b:b4:79:
a1:ea:c2:02:9f:6a:8d:a8:96:f4:c5:db:a6:18:89:
4f:5a:f9:bd:60:c0:11:8d:c0:66:c8:94:64:b1:d9:
eb:9b:3e:7c:1d:40:35:d4:c9:4d:1f:8d:28:cc:ca:
d9:09:bc:ce:30:2f:21:36:57:4e:cc:05:64:3f:17:
f7:0c:29:bf:af:14:24:96:a4:d1:af:ac:15:6a:8f:
25:89:b5:fc:d6:5f:2d:31:32:fb:37:69:9f:31:9f:
04:53:7a:02:d5:19:bb:34:da:90:f8:29:58:97:6a:
a6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BD:99:9B:65:9E:BF:EE:1E:1A:7E:6E:23:30:B7:61:B7:28:88:9A
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336530303a3a2f34342d3438203d3e20323130333338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3e00::/44
Signature Algorithm: sha256WithRSAEncryption
10:06:9b:73:72:71:f8:af:bf:0a:31:aa:33:f7:d7:ee:bc:7f:
62:b6:d1:8b:d2:ed:16:fc:b7:43:5f:fb:2f:a5:93:3d:6e:3c:
a5:ef:a5:90:d7:db:47:0d:69:45:50:80:6b:e4:41:8c:b4:0b:
06:07:02:bb:33:c3:23:f6:21:66:41:b5:87:6e:a3:79:71:be:
4f:7d:11:aa:44:0b:e9:a4:15:70:03:23:93:50:13:b4:52:c0:
3b:e9:74:90:8a:7a:00:50:43:9d:53:9b:66:88:a7:a0:68:eb:
66:7e:17:a3:4c:f4:83:86:d5:d0:37:50:eb:f9:23:4f:23:5e:
3a:75:0e:82:ff:4f:5f:63:35:27:c8:99:33:8a:5c:e4:20:c1:
69:8d:91:25:b9:2f:27:1c:e9:7d:a0:f6:4b:0c:0e:5b:c9:25:
e2:59:b0:e8:93:c7:fa:0c:23:44:04:29:b7:cc:7c:ec:d2:e1:
35:a7:3b:3a:6c:de:18:f7:ce:0c:d7:29:11:55:aa:b1:e2:bd:
35:04:0c:14:b4:31:7e:8f:76:f7:26:47:c1:3d:64:23:3c:59:
4e:52:1c:dd:cb:6f:1c:42:e4:de:1a:b1:55:57:3a:dd:22:d9:
69:13:7e:16:19:2e:e4:01:45:b4:a9:c5:50:a6:92:62:7e:b3:
b0:61:e6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:24:23 2026 by rpki-client