Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a35313a3a2f34382d3438203d3e20323134313839.roa
File: 326131313a323963303a35313a3a2f34382d3438203d3e20323134313839.roa (raw, json)
Hash identifier: 3DQIHXfTnLtK/PfTYpYS7vWTG16DhPL2cjS1XX740dw=
Subject key identifier: 5F:FC:CE:12:43:B8:B8:C1:CA:A1:28:19:4D:01:C7:43:9F:8A:0C:78
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 3A0926A44A9E579CDCEAA5144E31236D2DC0C540
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a35313a3a2f34382d3438203d3e20323134313839.roa
Signing time: Wed 29 Jul 2026 23:22:58 +0000
ROA not before: Wed 29 Jul 2026 23:17:58 +0000
ROA not after: Wed 28 Jul 2027 23:22:58 +0000
asID: 214189
IP address blocks: 2a11:29c0:51::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 22:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:09:26:a4:4a:9e:57:9c:dc:ea:a5:14:4e:31:23:6d:2d:c0:c5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Jul 29 23:17:58 2026 GMT
Not After : Jul 28 23:22:58 2027 GMT
Subject: CN=5FFCCE1243B8B8C1CAA128194D01C7439F8A0C78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:60:9e:4a:86:f8:f4:ed:78:ac:a9:6a:fb:
0a:7e:82:24:3f:c4:90:ce:4a:e8:66:59:a0:ae:83:
19:f9:d2:b2:be:78:7b:96:35:55:cd:04:29:14:f4:
6f:c2:a1:00:4b:09:13:ac:0d:32:5e:c6:66:dc:23:
8d:5e:24:07:21:5c:69:8d:f4:85:c6:0b:cb:b1:0b:
9d:b9:9e:ca:8f:a9:5a:3c:93:c9:1b:fc:2c:2b:93:
b4:b6:30:bd:48:59:e0:46:56:17:8e:5e:a0:8d:92:
e8:77:65:65:84:ac:fc:ab:af:5d:37:57:e9:ea:0e:
1b:49:5b:09:f5:b2:0a:de:91:1a:a3:0f:3f:6f:49:
4f:3c:2c:9b:c7:b5:bd:b4:8a:a4:8c:33:8a:5e:ff:
c8:6e:66:e9:54:a2:9f:2c:34:67:a1:21:e6:e2:9b:
cc:e2:0e:b4:e7:db:b2:0d:22:ad:d5:b1:cc:37:53:
53:57:73:5f:a5:7e:ac:49:3e:03:3b:be:a7:e4:32:
70:e6:47:d0:ca:41:2d:23:0c:71:ad:f3:f5:6c:f4:
0e:88:58:3b:3a:81:93:12:d6:b2:23:d4:84:64:f9:
84:d2:ee:78:1e:9a:0e:c8:5b:eb:28:5b:73:b0:af:
9a:45:7d:35:6a:3b:8d:4a:64:b1:00:73:f4:b3:dc:
53:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FC:CE:12:43:B8:B8:C1:CA:A1:28:19:4D:01:C7:43:9F:8A:0C:78
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a35313a3a2f34382d3438203d3e20323134313839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:51::/48
Signature Algorithm: sha256WithRSAEncryption
a9:08:81:22:2e:19:0c:db:f7:fc:6e:94:aa:83:8f:8c:be:3d:
f4:92:29:63:7b:6e:fb:22:9b:f4:d5:49:c8:98:89:ab:7a:c1:
2f:48:47:84:7a:ec:2f:a5:54:98:6b:a9:25:2b:e9:67:ad:66:
53:10:84:b5:0a:44:7a:0a:81:a3:1b:1a:ef:7f:93:50:26:6b:
ac:f3:5a:e1:6b:1e:76:0e:14:f4:5f:3b:4d:0e:cc:06:49:9c:
e4:cd:9f:57:80:57:73:92:3d:59:85:81:b3:d3:a8:29:be:b7:
f7:80:32:98:b6:6d:eb:40:ff:96:2f:99:0b:88:c4:7d:71:43:
10:06:3e:57:0d:64:df:ca:23:20:5f:d9:fd:2a:b8:3c:f4:9f:
51:f4:6c:cc:08:60:75:76:e3:14:93:bb:2f:54:f2:68:f9:b2:
04:d2:02:49:a1:2b:42:9f:65:b5:07:29:75:df:f1:7f:10:8b:
27:ec:e5:98:c1:fd:50:a7:14:2d:05:a7:12:ae:16:0b:4b:10:
6e:81:bf:e0:95:c4:c2:97:89:72:1f:66:b8:11:41:95:51:98:
7e:7f:8f:2b:42:6e:1d:76:67:1d:f8:be:fd:5d:0c:84:38:3a:
98:df:8c:df:8d:a3:a7:f5:86:43:b8:50:e2:d7:3b:06:ec:9c:
09:a2:03:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:03:12 2026 by rpki-client