Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34643a3a2f34382d3438203d3e20323134313338.roa
File: 326131313a323963303a34643a3a2f34382d3438203d3e20323134313338.roa (raw, json)
Hash identifier: bx5eMEeB8oSt7bBaWYK5XDFT5qMPWiweYDV1g+3tcms=
Subject key identifier: 92:CA:A3:EF:3D:35:1F:64:A1:1B:1A:F1:B3:65:D0:A0:58:AF:BF:9D
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 072969F66C66988E682D11872DBF5E1F8C33208B
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34643a3a2f34382d3438203d3e20323134313338.roa
Signing time: Fri 16 Oct 2026 00:23:03 +0000
ROA not before: Fri 16 Oct 2026 00:18:03 +0000
ROA not after: Fri 15 Oct 2027 00:23:03 +0000
asID: 214138
IP address blocks: 2a11:29c0:4d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 03:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:29:69:f6:6c:66:98:8e:68:2d:11:87:2d:bf:5e:1f:8c:33:20:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Oct 16 00:18:03 2026 GMT
Not After : Oct 15 00:23:03 2027 GMT
Subject: CN=92CAA3EF3D351F64A11B1AF1B365D0A058AFBF9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c0:3e:83:07:59:81:bb:e7:10:74:68:c5:2a:
25:72:4a:38:59:ce:28:f5:b9:a0:69:24:ff:09:9b:
1c:32:b6:d2:eb:64:f0:a1:8b:b4:e9:82:2b:bb:35:
59:d7:fa:fd:5e:5c:43:04:9c:ac:0d:e5:25:9a:2e:
49:ab:0f:ab:d8:21:2b:e1:25:74:31:d2:6b:eb:dd:
fd:9a:dc:84:79:64:c0:37:9a:af:91:d9:f1:de:3f:
9e:d6:0d:8d:80:8d:7e:46:4e:0b:31:69:b3:a9:88:
55:ca:99:98:2a:fd:53:4f:70:47:e4:24:a2:b7:4f:
f2:7c:a7:39:90:6a:71:ab:7d:ca:68:00:e4:97:3d:
2c:a7:19:bb:a0:0c:9d:e9:44:40:ec:70:68:52:69:
e0:5a:15:74:fc:fa:48:f6:6b:15:df:32:16:ad:8a:
42:8a:19:f4:e5:3a:09:f0:ff:08:2d:92:8f:28:cd:
c8:6f:e2:de:7b:d9:39:bc:a1:0a:ab:91:6d:98:dc:
00:ca:3b:d1:02:c9:67:58:35:80:88:ad:02:c9:dd:
d4:c2:f0:11:ca:47:ff:85:9f:15:cb:f3:6d:12:54:
5a:68:9f:fc:eb:7d:74:02:70:50:80:44:e9:bf:54:
98:3e:5e:32:40:a8:0f:84:2b:e8:97:bc:3e:45:fb:
d6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CA:A3:EF:3D:35:1F:64:A1:1B:1A:F1:B3:65:D0:A0:58:AF:BF:9D
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34643a3a2f34382d3438203d3e20323134313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:4d::/48
Signature Algorithm: sha256WithRSAEncryption
85:c5:6a:09:88:ce:42:05:36:75:2a:6e:e3:cd:02:e9:3b:b3:
0f:72:2a:e5:09:9a:76:6d:f3:a0:fc:1b:2d:bd:f0:da:9d:9a:
ad:29:72:b6:6c:09:e9:9f:40:bf:7d:d4:77:ef:ce:f5:4c:28:
9e:02:cc:53:98:2c:0b:bd:83:67:08:dd:de:29:8d:88:d3:33:
80:1f:7d:f5:d6:95:8b:c4:69:ce:5f:82:6c:20:3b:87:ca:aa:
e6:9a:3f:2a:bc:16:09:ae:8c:08:a8:84:a6:77:35:ec:b9:ed:
b9:64:99:7a:36:84:a8:79:2d:a5:9d:21:05:f0:69:34:9a:49:
74:01:c1:9f:15:90:c4:bd:98:80:f4:23:d3:c8:f2:54:2a:d5:
91:65:65:37:f0:6b:6a:41:6b:8c:a7:5d:74:de:24:d8:4d:c7:
ba:b8:e5:30:32:27:45:be:d8:e7:a4:34:49:8a:ea:da:4f:eb:
d5:64:04:2b:e1:a3:92:b4:2f:6b:e8:8e:15:75:ea:87:ff:43:
ac:2f:37:4d:3d:c9:55:fa:45:51:aa:ad:eb:00:e2:fb:fc:9d:
87:3d:45:50:70:77:21:4e:ac:3e:ca:5a:1d:0a:18:ce:82:5e:
fd:4f:16:86:73:b7:aa:aa:69:f9:7a:d1:6c:51:94:ca:32:d9:
cd:30:ed:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 12:57:52 2026 by rpki-client