Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34393a3a2f34382d3438203d3e203134363138.roa
File: 326131313a323963303a34393a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier: JlYLJLxLyXx8DXcSsYP2uuKIQcWH5RFLPG4196RaEI8=
Subject key identifier: 5B:D7:3F:9A:E8:C0:EA:A4:89:84:E4:A7:99:71:51:C0:AB:C1:97:06
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 6E750293156C7B0ABFF4209FDAEFBABD0D7FE753
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34393a3a2f34382d3438203d3e203134363138.roa
Signing time: Tue 05 Aug 2025 21:47:33 +0000
ROA not before: Tue 05 Aug 2025 21:42:33 +0000
ROA not after: Tue 04 Aug 2026 21:47:33 +0000
asID: 14618
IP address blocks: 2a11:29c0:49::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 11:58:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:75:02:93:15:6c:7b:0a:bf:f4:20:9f:da:ef:ba:bd:0d:7f:e7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Aug 5 21:42:33 2025 GMT
Not After : Aug 4 21:47:33 2026 GMT
Subject: CN=5BD73F9AE8C0EAA48984E4A7997151C0ABC19706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ad:e9:9c:f0:9f:05:db:a9:8e:6a:5e:58:b2:
04:51:31:5a:f5:3a:fc:ae:13:0b:50:0f:7a:9c:5f:
20:4d:0c:a7:ab:65:e7:97:46:28:61:ce:d2:93:a2:
1b:f4:d7:1b:3b:17:c8:60:8f:6c:e6:06:b4:5f:07:
5e:c4:2e:90:01:7a:29:2a:1d:ba:3c:7c:dd:36:c0:
c8:33:c1:21:0e:0e:f8:a5:38:d3:c7:6f:64:1a:a1:
08:8d:ec:f6:e3:2e:6d:ff:e5:06:da:b3:d5:c5:78:
16:26:25:37:46:59:16:23:bd:2a:d0:49:26:70:a5:
39:84:57:21:8d:2c:6e:b8:0c:52:ed:25:42:45:25:
7d:06:f3:46:88:6a:5b:c6:45:5e:65:e1:ee:80:ca:
cc:90:da:76:a4:60:fe:6f:20:28:22:65:fe:16:16:
18:8d:54:4c:b1:b5:54:ab:0a:36:56:7e:c4:7c:a9:
0a:03:a4:bb:8e:b3:a3:49:6f:b2:16:0d:7f:2c:1d:
b5:fc:61:0a:30:4d:84:23:17:ed:85:52:54:1c:d0:
12:e1:89:db:50:b1:04:4a:a6:a4:fe:92:1e:e1:fe:
79:84:07:45:83:fa:0f:4a:a3:ca:93:e4:08:c7:3e:
aa:49:1a:06:08:4f:3e:1c:39:0b:15:33:bb:dc:0d:
3e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D7:3F:9A:E8:C0:EA:A4:89:84:E4:A7:99:71:51:C0:AB:C1:97:06
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34393a3a2f34382d3438203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:49::/48
Signature Algorithm: sha256WithRSAEncryption
79:71:18:db:63:dd:d7:b0:b9:36:dd:f3:c6:81:0f:54:ba:eb:
00:e2:4d:48:c8:d8:c3:ef:7e:67:43:34:66:5c:e6:4d:9a:c3:
ae:fd:ce:10:35:ae:10:ca:fd:4f:4d:d0:25:e6:16:37:0b:f1:
0b:d9:6d:6e:0b:68:7c:a9:9f:ea:24:81:80:ab:ea:2c:89:e8:
08:d2:a8:3e:6b:25:13:68:4d:68:12:35:c0:6d:50:99:6e:83:
6e:75:98:df:50:32:e1:c9:ad:19:ce:93:61:53:e9:ee:b7:84:
25:69:67:3b:20:b0:2a:d4:34:e6:6f:97:49:7b:f5:3f:a5:99:
80:09:f7:04:ce:3f:0a:fb:e4:48:c3:df:3c:4d:81:2c:e0:a7:
97:b1:1c:65:9e:0c:5e:e6:14:5e:5b:04:76:50:8a:31:60:6f:
e4:53:ea:e9:21:b8:28:37:37:a7:00:89:0b:0c:7c:55:ba:f0:
d1:b8:f0:5c:14:5b:48:d7:45:54:54:66:61:c6:d2:a3:53:1b:
43:64:a4:cb:ee:0f:a1:ef:20:66:ad:d2:fb:67:9c:78:be:f8:
d6:76:22:80:dc:c8:68:8c:b8:51:06:17:15:99:40:31:22:72:
4d:53:d8:bf:35:16:32:07:10:11:c5:48:72:3a:cb:db:7c:d1:
19:a3:36:9d
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUbnUCkxVsewq/9CCf2u+6vQ1/51MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTk2ZDg1OTk2ZTkzNTRkMTAwNWU0NGM3ODFkMzhhZGNm
MTA4Mjg3MzAeFw0yNTA4MDUyMTQyMzNaFw0yNjA4MDQyMTQ3MzNaMDMxMTAvBgNV
BAMTKDVCRDczRjlBRThDMEVBQTQ4OTg0RTRBNzk5NzE1MUMwQUJDMTk3MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuremc8J8F26mOal5YsgRRMVr1
OvyuEwtQD3qcXyBNDKerZeeXRihhztKTohv01xs7F8hgj2zmBrRfB17ELpABeikq
Hbo8fN02wMgzwSEODvilONPHb2QaoQiN7PbjLm3/5Qbas9XFeBYmJTdGWRYjvSrQ
SSZwpTmEVyGNLG64DFLtJUJFJX0G80aIalvGRV5l4e6AysyQ2nakYP5vICgiZf4W
FhiNVEyxtVSrCjZWfsR8qQoDpLuOs6NJb7IWDX8sHbX8YQowTYQjF+2FUlQc0BLh
idtQsQRKpqT+kh7h/nmEB0WD+g9Ko8qT5AjHPqpJGgYITz4cOQsVM7vcDT5TAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUW9c/mujA6qSJhOSnmXFRwKvBlwYwHwYDVR0j
BBgwFoAU6W2FmW6TVNEAXkTHgdOK3PEIKHMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm
YmY1LzAvRTk2RDg1OTk2RTkzNTREMTAwNUU0NEM3ODFEMzhBRENGMTA4Mjg3My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZXMkZtVzZUVk5FQVhrVEhnZE9LM1BF
SUtITS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExMTViYzYt
MTBmNi00YWYzLWJhMDktOGI2ODdhNTZmYmY1LzAvMzI2MTMxMzEzYTMyMzk2MzMw
M2EzNDM5M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDM2MzEzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACoRKcAASTANBgkqhkiG9w0BAQsFAAOCAQEAeXEY22Pd17C5Nt3zxoEPVLrr
AOJNSMjYw+9+Z0M0ZlzmTZrDrv3OEDWuEMr9T03QJeYWNwvxC9ltbgtofKmf6iSB
gKvqLInoCNKoPmslE2hNaBI1wG1QmW6DbnWY31Ay4cmtGc6TYVPp7reEJWlnOyCw
KtQ05m+XSXv1P6WZgAn3BM4/CvvkSMPfPE2BLOCnl7EcZZ4MXuYUXlsEdlCKMWBv
5FPq6SG4KDc3pwCJCwx8Vbrw0bjwXBRbSNdFVFRmYcbSo1MbQ2Sky+4Poe8gZq3S
+2eceL741nYigNzIaIy4UQYXFZlAMSJyTVPYvzUWMgcQEcVIcjrL23zRGaM2nQ==
-----END CERTIFICATE-----
Generated at Thu Aug 21 18:54:05 2025 by rpki-client