Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34393a3a2f34382d3438203d3e20323134313238.roa
File: 326131313a323963303a34393a3a2f34382d3438203d3e20323134313238.roa (raw, json)
Hash identifier: z8qYc0PnF2MXZrqbAaK/3VYjMJXE6OnDIGs0ib54hm8=
Subject key identifier: 95:CB:F1:03:81:FA:80:82:28:6D:60:44:00:E0:C2:2E:EB:83:8F:85
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 5DBF336BC3AA7FC968FD839112DBC0243BB7BB15
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34393a3a2f34382d3438203d3e20323134313238.roa
Signing time: Thu 30 Jul 2026 21:22:58 +0000
ROA not before: Thu 30 Jul 2026 21:17:58 +0000
ROA not after: Thu 29 Jul 2027 21:22:58 +0000
asID: 214128
IP address blocks: 2a11:29c0:49::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:bf:33:6b:c3:aa:7f:c9:68:fd:83:91:12:db:c0:24:3b:b7:bb:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Jul 30 21:17:58 2026 GMT
Not After : Jul 29 21:22:58 2027 GMT
Subject: CN=95CBF10381FA8082286D604400E0C22EEB838F85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:40:12:ce:64:e6:d4:ea:51:83:4a:87:9a:
63:dc:53:2e:a7:54:87:29:50:38:0d:64:62:58:88:
d9:b6:be:2f:78:6e:4a:34:3b:c7:be:59:05:a0:6a:
24:4d:cd:4e:5f:5c:de:1b:3d:19:67:ec:71:75:1d:
fc:d1:af:74:22:4b:61:57:a1:4b:be:cf:1d:b1:80:
9f:87:67:ae:ec:65:15:f4:96:8d:af:44:ae:8c:b2:
98:eb:3b:ca:03:17:4a:4a:02:56:c6:62:20:b5:8a:
82:96:8a:d7:c1:8e:d6:c9:a8:12:7c:45:0b:36:22:
e6:0e:99:4c:fc:fd:2e:81:f1:d2:82:f8:51:0d:cd:
2e:25:94:6a:66:ae:0f:bb:5b:8e:0f:6f:64:13:eb:
0f:86:50:7c:fe:ed:90:6b:2c:7b:cd:80:03:de:5d:
b2:f7:e7:fd:0b:d6:d9:d7:53:a4:7a:bd:ee:1c:aa:
1b:28:24:f8:70:4a:79:6b:61:cf:66:db:83:c6:96:
32:ce:7c:b4:4e:22:2e:63:ba:83:db:ee:53:18:ff:
fb:18:74:dd:4f:a3:59:7f:12:94:94:f3:b0:2f:f4:
c8:bf:4b:b5:c1:3a:06:de:09:89:a7:6e:87:d2:f9:
bf:fd:8e:f6:1e:71:7d:dd:90:ae:02:15:d9:27:db:
b5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CB:F1:03:81:FA:80:82:28:6D:60:44:00:E0:C2:2E:EB:83:8F:85
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34393a3a2f34382d3438203d3e20323134313238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:49::/48
Signature Algorithm: sha256WithRSAEncryption
69:f9:9c:15:e4:f7:c7:88:d2:e6:ad:1e:69:1a:1a:ca:b6:c9:
af:49:97:a5:44:2c:65:9b:9a:ec:4d:f4:93:4d:50:39:f8:99:
79:f0:48:b9:2f:ff:a9:e3:1b:10:f6:db:83:e8:3c:ae:82:2b:
7c:73:67:c7:e6:0f:ff:c2:ea:bd:46:90:07:23:88:20:d3:5a:
2b:13:ca:88:36:f2:1e:fa:64:32:4a:1b:3b:eb:cd:e4:6e:23:
22:a1:76:c9:79:ab:01:03:57:1f:d5:f0:43:fa:a0:f5:02:04:
98:52:24:bb:45:27:31:52:93:d8:09:99:0e:61:61:79:ed:41:
24:d7:bf:2a:20:98:fa:54:81:f2:73:08:6e:86:d3:69:05:92:
54:a3:2d:a3:83:39:37:e4:c3:85:40:d5:56:51:1f:4b:5e:ae:
03:da:c6:3f:6d:57:86:6f:25:10:26:cb:63:50:c7:14:05:57:
3e:ed:26:de:48:f8:49:b2:7a:53:dc:da:8c:33:d2:12:6a:32:
6c:b3:90:b8:bb:81:2d:c0:e2:2a:71:eb:49:81:df:df:39:47:
7c:c8:cc:c1:94:d1:96:84:b4:f2:d6:7f:0d:4c:89:98:b5:0c:
e2:98:ff:95:b8:a3:c6:ae:c9:cb:c9:37:91:ed:9e:0b:4b:6b:
df:02:53:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:44:05 2026 by rpki-client