Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34363a3a2f34382d3438203d3e20313937363133.roa
File: 326131313a323963303a34363a3a2f34382d3438203d3e20313937363133.roa (raw, json)
Hash identifier: IgD6nQNzLXZfeZ8ijPAy+Ah63xTBJlaQcsf6ENXdsgg=
Subject key identifier: 2C:1D:76:71:A1:64:3A:A9:07:A5:E6:48:27:EB:5A:88:AA:1C:92:F6
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 274792E3458BA391BFB173F22AFA69716975C428
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34363a3a2f34382d3438203d3e20313937363133.roa
Signing time: Wed 13 May 2026 19:43:37 +0000
ROA not before: Wed 13 May 2026 19:38:37 +0000
ROA not after: Wed 12 May 2027 19:43:37 +0000
asID: 197613
IP address blocks: 2a11:29c0:46::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:47:92:e3:45:8b:a3:91:bf:b1:73:f2:2a:fa:69:71:69:75:c4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: May 13 19:38:37 2026 GMT
Not After : May 12 19:43:37 2027 GMT
Subject: CN=2C1D7671A1643AA907A5E64827EB5A88AA1C92F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9b:29:93:79:e8:16:32:35:26:43:32:49:7d:
eb:13:6f:9b:71:80:eb:88:3f:2d:53:d5:09:dc:fc:
70:14:bc:7f:05:5c:95:fc:62:30:d1:67:c6:79:79:
07:ba:67:c1:d3:5e:63:02:dc:cb:a8:b3:4b:aa:f4:
48:fa:72:44:fa:51:37:bb:31:7a:ab:1f:2f:22:10:
ff:93:2c:f2:02:33:16:f1:8d:a4:6d:27:9e:5e:23:
a9:c3:e7:d6:e3:37:de:6a:21:3f:51:4d:53:07:ca:
0f:e3:03:06:16:b8:4c:bd:2b:d7:ad:34:48:ac:6b:
87:29:24:0e:69:c1:ce:c0:c6:49:3a:17:90:fa:ad:
58:90:c7:5c:02:49:f2:4b:19:ab:f9:bf:09:7b:17:
12:fd:0c:78:1d:93:2f:b2:c8:ff:81:e0:52:5b:86:
c5:c4:65:8a:47:2d:b7:84:46:e6:cc:ce:54:32:b5:
aa:56:b0:41:a8:e7:ed:56:c8:1b:f0:d4:34:9c:bc:
ab:a5:c2:a3:03:7b:97:22:8c:7f:29:e5:fc:eb:e1:
38:4f:5c:6d:b2:3a:e6:d1:7d:39:f9:9f:67:f1:41:
83:a1:93:5f:e4:3a:71:de:54:bc:63:4b:19:97:7d:
e7:42:e8:2d:2b:71:63:d5:a3:2a:db:d1:8a:e4:5c:
1c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1D:76:71:A1:64:3A:A9:07:A5:E6:48:27:EB:5A:88:AA:1C:92:F6
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34363a3a2f34382d3438203d3e20313937363133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:46::/48
Signature Algorithm: sha256WithRSAEncryption
33:81:35:37:2e:1c:5b:ce:8f:35:a3:c6:55:0f:b7:bb:57:84:
aa:fc:61:52:0c:c2:fd:59:80:b8:4d:6b:2f:00:d9:d9:02:e3:
9e:f0:c9:8f:a0:47:dd:dd:40:42:ef:bf:57:df:7a:59:2f:73:
61:51:79:38:a3:21:7f:a2:d0:bd:d7:10:3c:fa:cc:b8:e2:47:
dc:7a:8f:c5:7e:fb:80:af:06:f0:0e:9c:c6:64:43:89:c3:28:
65:dd:40:5b:46:9f:60:3b:32:fe:79:41:3f:45:d2:8f:d4:05:
f4:eb:7d:54:03:b3:33:82:5a:12:5e:46:0b:64:19:83:0f:5e:
0d:ed:3f:6a:7d:6e:7b:87:a8:44:0e:41:d4:b2:64:f1:01:eb:
bb:02:8a:bf:6a:34:27:25:a3:b5:af:ae:7c:6f:a2:0e:e2:17:
1c:26:8c:5a:d9:ba:f9:12:17:13:ad:11:ec:c1:19:16:fb:ae:
e4:d0:20:b5:dd:8f:34:e0:e1:d5:db:e1:f6:22:08:5c:22:d9:
ff:a3:9f:76:18:0a:95:21:96:7d:b5:c2:a0:26:c6:57:d1:e9:
fc:7a:38:ab:c7:90:08:72:db:45:50:0e:3d:a0:fb:66:ae:76:
a6:4d:23:b3:c5:e3:9d:88:a0:0d:ad:b0:50:25:df:00:79:af:
d9:a5:16:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:01:57 2026 by rpki-client