Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336532383a3a2f34382d3438203d3e20323030303237.roa
File: 326131313a323963303a336532383a3a2f34382d3438203d3e20323030303237.roa (raw, json)
Hash identifier: kTRxu30nhyb/B/qGPfeZ2EoDMgLZYdRxQz0xMpBqM04=
Subject key identifier: 1F:6E:68:DB:1A:2A:5F:D1:DD:0B:F3:71:D0:DB:8D:2B:C7:C6:8F:FD
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 0185CFEC232F445E287DC3B7974CA48F5654FD7F
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336532383a3a2f34382d3438203d3e20323030303237.roa
Signing time: Tue 28 Apr 2026 20:44:51 +0000
ROA not before: Tue 28 Apr 2026 20:39:51 +0000
ROA not after: Tue 27 Apr 2027 20:44:51 +0000
asID: 200027
IP address blocks: 2a11:29c0:3e28::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cf:ec:23:2f:44:5e:28:7d:c3:b7:97:4c:a4:8f:56:54:fd:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Apr 28 20:39:51 2026 GMT
Not After : Apr 27 20:44:51 2027 GMT
Subject: CN=1F6E68DB1A2A5FD1DD0BF371D0DB8D2BC7C68FFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0a:08:5c:55:16:e9:a5:40:1e:3b:99:dd:ce:
a2:f0:b9:54:07:af:c7:c4:e0:49:81:c0:5b:ae:6d:
dc:f2:e8:f7:28:a4:52:db:1e:bf:70:6d:43:f2:bd:
6a:7b:9d:e3:c2:b4:6f:81:79:f9:9e:63:9a:76:15:
8a:89:3c:65:6c:77:43:a5:f7:59:4e:41:c6:fb:9a:
ac:eb:83:b1:20:9d:51:39:b7:bd:07:82:ed:11:9f:
0f:55:9d:4a:a6:c9:bb:f2:b4:20:73:d8:52:5c:9e:
e8:c7:99:83:05:90:1d:60:1c:dd:b4:91:9b:f5:ed:
53:f8:01:5e:23:6f:3f:47:70:a5:4b:d9:99:a7:5e:
72:eb:55:bd:20:25:7e:93:3f:e7:ac:46:6f:20:69:
03:a4:dd:b3:5e:db:6a:ba:e4:5d:75:89:0f:42:08:
a4:33:9a:6e:53:35:cd:0f:22:f0:4a:68:91:ea:2f:
f5:1f:90:6a:99:3c:fc:e1:50:17:c7:c5:7b:4e:1b:
e7:71:8e:1b:95:ce:41:c1:f4:5d:cd:2a:80:69:48:
c4:29:bd:d5:eb:29:37:e4:62:9f:05:06:e5:be:9b:
83:91:19:e6:8b:48:49:96:b8:b5:78:7c:35:28:e5:
d4:51:5e:9e:37:8e:fb:4d:91:21:f7:20:32:50:63:
c5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6E:68:DB:1A:2A:5F:D1:DD:0B:F3:71:D0:DB:8D:2B:C7:C6:8F:FD
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336532383a3a2f34382d3438203d3e20323030303237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3e28::/48
Signature Algorithm: sha256WithRSAEncryption
3c:e7:15:99:12:d0:db:66:6f:8b:a0:61:c8:ef:01:9c:be:ce:
df:06:46:95:86:c2:d2:68:73:8f:15:24:85:f4:b8:bd:a2:aa:
99:6a:c0:e7:cc:74:77:d4:94:5b:a7:fc:1b:65:5a:57:c7:84:
98:a7:b4:40:b6:d2:10:8a:6b:ac:05:32:09:22:eb:aa:8d:ea:
7a:1b:2c:c1:9d:89:82:37:54:c2:9a:a0:11:67:32:4f:21:a9:
48:a2:90:55:0a:f2:19:af:56:3e:ee:b5:ab:e5:75:f6:16:92:
6c:62:9b:a7:f1:2d:c2:32:ab:2e:d4:81:8f:46:35:9a:9c:ae:
67:a5:b7:ff:25:18:a8:a6:31:c2:62:f0:d2:71:03:2c:8d:b7:
ef:91:30:c8:c0:eb:d1:55:d0:23:2a:7f:0d:d9:5c:3d:95:66:
10:e7:95:a9:3c:56:93:ee:f4:6c:30:71:d7:74:07:8e:b7:0d:
21:08:8c:ad:b4:41:67:d0:24:62:b1:3d:6f:71:88:05:93:c5:
8f:1c:2c:9d:8e:d5:c0:9a:cd:a7:b1:81:4f:97:7d:33:5c:d8:
e4:a0:12:ce:cc:18:2c:56:4b:25:8b:dc:9e:ec:e7:8a:7f:49:
5c:57:41:24:d0:3f:8b:48:70:6c:1b:3d:6c:9e:73:7d:f2:ed:
2e:4f:b7:eb
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUAYXP7CMvRF4ofcO3l0ykj1ZU/X8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTk2ZDg1OTk2ZTkzNTRkMTAwNWU0NGM3ODFkMzhhZGNm
MTA4Mjg3MzAeFw0yNjA0MjgyMDM5NTFaFw0yNzA0MjcyMDQ0NTFaMDMxMTAvBgNV
BAMTKDFGNkU2OERCMUEyQTVGRDFERDBCRjM3MUQwREI4RDJCQzdDNjhGRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSCghcVRbppUAeO5ndzqLwuVQH
r8fE4EmBwFuubdzy6PcopFLbHr9wbUPyvWp7nePCtG+BefmeY5p2FYqJPGVsd0Ol
91lOQcb7mqzrg7EgnVE5t70Hgu0Rnw9VnUqmybvytCBz2FJcnujHmYMFkB1gHN20
kZv17VP4AV4jbz9HcKVL2ZmnXnLrVb0gJX6TP+esRm8gaQOk3bNe22q65F11iQ9C
CKQzmm5TNc0PIvBKaJHqL/UfkGqZPPzhUBfHxXtOG+dxjhuVzkHB9F3NKoBpSMQp
vdXrKTfkYp8FBuW+m4ORGeaLSEmWuLV4fDUo5dRRXp43jvtNkSH3IDJQY8VlAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUH25o2xoqX9HdC/Nx0NuNK8fGj/0wHwYDVR0j
BBgwFoAU6W2FmW6TVNEAXkTHgdOK3PEIKHMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm
YmY1LzAvRTk2RDg1OTk2RTkzNTREMTAwNUU0NEM3ODFEMzhBRENGMTA4Mjg3My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZXMkZtVzZUVk5FQVhrVEhnZE9LM1BF
SUtITS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExMTViYzYt
MTBmNi00YWYzLWJhMDktOGI2ODdhNTZmYmY1LzAvMzI2MTMxMzEzYTMyMzk2MzMw
M2EzMzY1MzIzODNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzMDMwMzIzNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoRKcA+KDANBgkqhkiG9w0BAQsFAAOCAQEAPOcVmRLQ22Zvi6Bh
yO8BnL7O3wZGlYbC0mhzjxUkhfS4vaKqmWrA58x0d9SUW6f8G2VaV8eEmKe0QLbS
EIprrAUyCSLrqo3qehsswZ2JgjdUwpqgEWcyTyGpSKKQVQryGa9WPu61q+V19haS
bGKbp/EtwjKrLtSBj0Y1mpyuZ6W3/yUYqKYxwmLw0nEDLI2375EwyMDr0VXQIyp/
DdlcPZVmEOeVqTxWk+70bDBx13QHjrcNIQiMrbRBZ9AkYrE9b3GIBZPFjxwsnY7V
wJrNp7GBT5d9M1zY5KASzswYLFZLJYvcnuznin9JXFdBJNA/i0hwbBs9bJ5zffLt
Lk+36w==
-----END CERTIFICATE-----
Generated at Thu Apr 30 12:47:19 2026 by rpki-client