Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a35303a3a2f34382d3438203d3e203136353039.roa
File: 326131313a323963303a35303a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier: r8y8jh5duyR070VUIMbSQ1v0A1oeVMP/ZQkMyEtgX24=
Subject key identifier: 15:69:1C:36:0B:6C:53:B2:0D:BF:61:10:8F:62:CE:03:E5:00:75:B9
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 71B7751217339A0532DE1456D4431223FAEAD103
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a35303a3a2f34382d3438203d3e203136353039.roa
Signing time: Thu 13 Aug 2026 02:22:59 +0000
ROA not before: Thu 13 Aug 2026 02:17:59 +0000
ROA not after: Thu 12 Aug 2027 02:22:59 +0000
asID: 16509
IP address blocks: 2a11:29c0:50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:b7:75:12:17:33:9a:05:32:de:14:56:d4:43:12:23:fa:ea:d1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Aug 13 02:17:59 2026 GMT
Not After : Aug 12 02:22:59 2027 GMT
Subject: CN=15691C360B6C53B20DBF61108F62CE03E50075B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c6:c0:1d:67:1f:a1:47:ac:16:7a:46:32:77:
bd:88:d5:3e:eb:5e:0f:30:45:72:ed:80:7e:64:27:
e3:ce:d7:c1:09:37:0d:99:eb:b7:4e:5f:30:6d:ec:
ef:e6:b5:97:c9:dd:65:d8:e4:71:67:bd:6c:6b:96:
eb:57:7a:59:fe:3e:38:d9:22:a4:b8:90:23:fd:07:
a1:14:13:ef:5f:6b:25:45:1a:19:b9:4b:35:31:27:
62:5c:b9:d9:07:40:79:97:f5:b0:27:50:d9:e2:11:
5a:34:99:68:d7:e5:1c:93:4c:86:04:7d:c7:da:b8:
19:ae:b3:08:21:82:13:87:43:fe:9e:18:85:d1:32:
8f:1e:65:5f:a6:c4:86:a4:52:43:5d:12:f3:f1:1d:
39:4d:64:d2:40:cd:71:be:c8:99:8b:d9:90:00:2e:
e2:e0:2f:3a:e7:16:64:c3:db:82:14:ea:f2:0b:50:
3b:47:4f:94:2c:c2:1f:5e:9d:b7:11:c1:b1:30:25:
10:32:f7:36:e1:cc:12:d5:ec:d3:07:9b:34:fd:52:
30:5e:37:19:f6:16:2c:4d:3f:ea:23:04:b8:cb:6a:
81:7a:37:05:85:2f:ce:f0:ad:92:86:7b:7c:8d:ee:
1d:9b:64:7f:b5:dc:13:48:72:f6:b5:d0:19:98:2f:
34:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:69:1C:36:0B:6C:53:B2:0D:BF:61:10:8F:62:CE:03:E5:00:75:B9
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a35303a3a2f34382d3438203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:50::/48
Signature Algorithm: sha256WithRSAEncryption
65:7f:17:2e:53:59:19:4b:da:51:f2:52:ed:1a:38:bd:bd:51:
83:9b:59:e0:b4:26:4e:d6:51:b8:de:92:ca:c9:f7:c5:3c:44:
90:5f:47:e0:dc:cc:4c:f4:5b:6a:fd:fa:73:32:a0:bd:bb:b3:
5c:dd:8e:6c:f5:98:97:ab:46:1e:17:8d:b6:a2:24:8b:4b:42:
47:62:b1:ab:ba:76:2f:f7:9e:da:2f:92:75:18:1b:3e:bb:09:
c4:3f:43:ec:15:d0:92:bd:da:f4:80:68:35:0a:d2:23:d8:0d:
ec:b7:df:05:e6:b9:e6:73:5f:92:de:d5:21:09:89:cd:dc:cd:
5e:14:49:72:17:76:dd:00:83:9d:d5:59:af:89:bb:2c:fc:6d:
83:68:1a:3d:27:b7:73:e9:db:21:e2:8c:51:59:31:3f:1f:3b:
dd:1b:f6:dc:30:2e:c2:8c:26:96:ab:9b:0a:22:fe:4a:10:c7:
33:8a:42:7e:e3:60:52:23:c2:e4:e5:af:25:21:c5:ea:a6:29:
da:21:11:49:5c:7c:59:66:82:e9:6b:ae:6a:3c:13:1c:c4:05:
96:b9:60:f1:50:af:a0:25:d0:d8:1c:4a:fa:a4:c3:e5:d3:ae:
b6:7f:bf:85:00:96:3f:2d:f5:c1:c5:1e:d1:63:db:2f:45:a2:
20:4a:bc:1f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:42:33 2026 by rpki-client