Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a35303a3a2f34382d3438203d3e203134363138.roa
File: 326131313a323963303a35303a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier: DwuTfoeJSwxv50gnlvgqt0TcEPv2tBFhCDebrKUiJEo=
Subject key identifier: BE:0E:74:09:65:B4:D4:B8:03:92:A3:28:28:C0:A7:01:03:57:81:D9
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 597DB94C74F39E1AC02A6BEA6049C88355A7953D
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a35303a3a2f34382d3438203d3e203134363138.roa
Signing time: Thu 13 Aug 2026 02:22:59 +0000
ROA not before: Thu 13 Aug 2026 02:17:59 +0000
ROA not after: Thu 12 Aug 2027 02:22:59 +0000
asID: 14618
IP address blocks: 2a11:29c0:50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:7d:b9:4c:74:f3:9e:1a:c0:2a:6b:ea:60:49:c8:83:55:a7:95:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Aug 13 02:17:59 2026 GMT
Not After : Aug 12 02:22:59 2027 GMT
Subject: CN=BE0E740965B4D4B80392A32828C0A701035781D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bd:3d:db:1e:3d:4f:52:e3:e2:92:83:7e:6e:
e3:6e:3f:19:ed:bf:0c:93:4f:7c:11:09:28:39:2b:
02:8d:d2:97:69:02:28:d3:09:39:e1:21:14:fa:f0:
7d:26:14:81:ed:aa:4c:cf:46:b6:9c:77:3d:4c:29:
ea:b9:3f:61:44:47:d1:b7:9a:7a:c8:c6:7b:95:20:
a1:b1:60:63:91:2c:34:e5:1d:d8:76:1c:4f:0f:14:
85:96:de:a6:b3:35:2f:08:6c:5a:05:c9:b7:ca:d5:
2d:36:48:c1:13:47:ec:09:85:0e:7f:84:8f:66:e8:
66:7e:f3:dc:a4:4d:39:50:2b:f4:3f:30:90:62:1a:
c3:be:54:7d:20:28:17:c8:49:6d:ca:e3:8e:97:b4:
95:a1:b3:22:c7:a0:68:5f:2e:d0:b8:cc:7e:19:90:
1c:9b:34:70:d9:71:b4:52:85:db:5d:0f:73:c0:53:
15:98:f1:2f:02:77:31:eb:8a:5e:ca:8c:ac:df:3a:
85:bf:0e:4b:fb:d0:47:9e:45:10:06:9f:02:e4:61:
48:f4:6f:15:bf:ac:47:d9:2b:52:03:d0:1e:51:34:
c6:cd:3f:02:69:59:c2:91:f0:ce:68:65:96:db:3b:
5b:26:29:ce:bd:15:30:cc:2e:1e:58:95:34:10:de:
d0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0E:74:09:65:B4:D4:B8:03:92:A3:28:28:C0:A7:01:03:57:81:D9
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a35303a3a2f34382d3438203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:50::/48
Signature Algorithm: sha256WithRSAEncryption
4c:7d:bb:6a:a0:76:7e:4e:30:5f:1c:e1:6e:c4:ff:73:08:5d:
a1:31:3d:44:2e:59:75:76:df:7c:af:04:21:0c:78:72:2f:92:
a7:b0:f5:14:63:e3:3b:b8:c0:ec:3c:53:95:0a:c7:bf:7d:55:
cc:93:a4:54:b3:9b:e3:75:45:53:13:4e:67:9e:22:af:62:4f:
73:dd:43:07:28:57:ef:f2:b2:bd:d8:d2:d6:98:0c:8e:d3:89:
75:7b:69:ff:e4:a2:46:e8:92:d8:72:af:aa:f2:cb:8d:2e:2b:
fc:0d:9c:5e:54:4b:89:1d:a7:aa:54:59:45:7f:1f:66:68:47:
f8:fa:b1:fe:df:c8:90:d5:63:ef:5d:65:18:09:68:52:5f:3c:
4e:1d:b7:df:fa:22:88:00:18:ca:17:91:56:6d:19:9f:c3:00:
05:4c:e1:4a:50:46:2f:7c:7d:35:0d:12:73:b6:00:2a:92:a6:
23:ff:b9:b5:fc:44:9b:dd:1d:1e:c1:94:03:c3:29:ba:1d:0d:
58:07:05:3f:c9:dd:07:40:ec:6f:c3:cb:d7:65:c3:5b:7a:91:
70:39:ce:f8:a9:23:79:ba:07:fd:a6:47:0e:89:14:f1:1a:79:
25:34:12:34:43:c8:71:76:1a:53:52:b2:df:43:06:1c:83:e5:
f3:41:4b:f0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:44:48 2026 by rpki-client