Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a346530303a3a2f34342d3438203d3e20313937363133.roa
File: 326131313a323963303a346530303a3a2f34342d3438203d3e20313937363133.roa (raw, json)
Hash identifier: hpc/xIFEjuug+2bNIl4TRZwQPMXe064FPQjrgOHtlHQ=
Subject key identifier: 65:31:54:10:F1:39:D8:AB:3A:C2:08:F1:26:B3:5E:D5:C3:D9:3F:ED
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 3BBB2EF9873A9AC5A4B8AED9DC7C93681B83FFEE
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a346530303a3a2f34342d3438203d3e20313937363133.roa
Signing time: Wed 13 May 2026 19:43:17 +0000
ROA not before: Wed 13 May 2026 19:38:17 +0000
ROA not after: Wed 12 May 2027 19:43:17 +0000
asID: 197613
IP address blocks: 2a11:29c0:4e00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:bb:2e:f9:87:3a:9a:c5:a4:b8:ae:d9:dc:7c:93:68:1b:83:ff:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: May 13 19:38:17 2026 GMT
Not After : May 12 19:43:17 2027 GMT
Subject: CN=65315410F139D8AB3AC208F126B35ED5C3D93FED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:03:36:40:fc:d2:16:6b:71:69:9d:1a:48:0b:
0a:0a:91:b5:03:a3:f0:13:24:1c:d0:a3:8c:b4:f3:
39:4c:ed:2f:f2:c0:16:03:36:ce:99:e8:a7:62:b6:
92:0a:41:1d:42:2f:b3:d9:a9:79:2b:ed:57:08:86:
f1:8c:8f:b1:9a:2a:84:aa:43:7d:36:18:57:da:e0:
77:a5:a4:4a:d1:8e:b5:da:f5:64:df:bb:47:b1:24:
b9:a1:d4:9c:12:63:9b:e1:46:74:cc:55:92:cc:74:
71:37:63:66:41:da:56:da:83:f1:55:2e:03:2c:fe:
07:6c:ef:ae:47:76:0d:24:f7:77:e4:2d:72:5b:ed:
ab:a7:75:ff:ed:57:b5:82:ae:04:9f:1e:fc:c1:ed:
6f:9d:22:59:2e:9f:23:e1:f7:14:9e:72:f7:85:03:
31:8b:0b:aa:b5:fc:bf:10:a1:2f:2f:ef:35:c1:1b:
5f:e7:e8:2a:df:35:ab:f5:36:a9:47:7b:99:3f:d2:
aa:63:22:8c:3d:4c:da:4d:d0:8d:6c:32:86:01:69:
de:49:4b:91:4f:ab:1b:66:5f:53:aa:fb:b9:19:7c:
16:be:8e:a9:92:6a:72:cd:0a:d0:8e:29:d1:40:24:
0a:68:6b:ad:94:60:cc:a5:e9:68:9a:38:07:26:55:
cc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:31:54:10:F1:39:D8:AB:3A:C2:08:F1:26:B3:5E:D5:C3:D9:3F:ED
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a346530303a3a2f34342d3438203d3e20313937363133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:4e00::/44
Signature Algorithm: sha256WithRSAEncryption
5a:46:b8:7c:fc:7b:a1:ec:59:7d:06:fe:4a:ac:aa:5a:e1:94:
06:ee:44:82:1a:41:00:70:2c:94:6a:b0:94:02:dc:ce:21:b1:
91:0a:33:7a:41:29:3f:38:7a:a6:f1:2d:82:0a:37:3e:6d:c5:
24:f1:3a:71:ab:87:32:d7:7f:2c:e8:a8:40:d9:bc:8a:55:12:
9f:61:dd:74:e3:2e:ca:17:7c:c7:f3:7f:61:fd:91:07:04:90:
e2:bd:76:58:75:e0:9e:a2:53:61:61:32:01:03:8a:e3:0c:6d:
c5:77:6f:6e:0c:5b:fd:16:0e:e9:eb:09:c1:a3:2d:a2:4b:3c:
14:7b:6c:37:98:cb:40:b9:07:c7:2e:96:9b:92:5b:2e:4f:af:
f2:0f:f7:80:db:48:07:63:51:51:24:a8:bd:e1:d4:dd:6e:9b:
79:8a:b6:f8:3e:ab:e5:50:19:18:c2:24:b0:b8:b3:b2:b4:d9:
a9:50:01:86:76:d9:1d:0a:bb:df:73:58:ee:f9:15:25:da:29:
75:87:26:8a:08:ef:d2:65:a8:6a:d9:fc:b4:69:ce:8d:41:d2:
11:f3:18:32:11:26:99:2a:54:ef:07:09:80:cb:49:5e:f3:77:
0d:2d:8a:79:16:58:f0:ec:44:0a:cb:a6:c8:f6:4a:5c:1a:4c:
d4:ea:db:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:02:37 2026 by rpki-client