Route Origin Authorization
$ rpki-client -vvvf rsync.rp.ki/repo/clonoth/1/326131333a376134303a3a2f32392d3438203d3e203537313936.roa
File: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (raw, json)
Hash identifier: pCMHWmlm59Yf5FQRj1kvt0zyb8v3ni3IkDYoXYWJcK8=
Subject key identifier: 96:23:2C:00:F8:0B:85:6F:CF:4F:DF:2B:BD:37:2A:D9:15:85:8F:F6
Certificate issuer: /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Certificate serial: 61334CE0B3C8F0444D561140A833C533811AFB68
Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject info access: rsync://rsync.rp.ki/repo/clonoth/1/326131333a376134303a3a2f32392d3438203d3e203537313936.roa
Signing time: Sun 06 Sep 2026 22:47:48 +0000
ROA not before: Sun 06 Sep 2026 22:42:48 +0000
ROA not after: Sun 05 Sep 2027 22:47:48 +0000
asID: 57196
IP address blocks: 2a13:7a40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 03:43:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:33:4c:e0:b3:c8:f0:44:4d:56:11:40:a8:33:c5:33:81:1a:fb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Validity
Not Before: Sep 6 22:42:48 2026 GMT
Not After : Sep 5 22:47:48 2027 GMT
Subject: CN=96232C00F80B856FCF4FDF2BBD372AD915858FF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9e:91:a1:6d:1f:08:34:37:f4:1d:21:93:f2:
52:61:7b:e7:e1:04:da:f2:2a:b1:8d:ea:ab:c9:a9:
89:a2:3b:e6:fc:90:8a:bb:96:7a:fc:21:cc:4e:a4:
07:d5:87:73:87:bf:17:72:04:5d:1d:2a:5a:4c:88:
f3:07:8f:da:9a:42:07:02:49:e5:b9:91:48:dd:d3:
bd:80:da:20:82:3e:ad:71:e4:d8:77:08:2c:01:cf:
2a:44:ab:04:35:e1:eb:28:22:ad:ad:18:97:4a:d6:
43:1a:ff:ce:c0:7d:fc:19:83:13:81:ee:2a:4b:94:
9d:70:be:50:3b:97:da:f3:ed:ab:b5:9b:24:82:f8:
e4:5a:7f:4d:13:1e:35:fa:5b:e1:59:8a:d9:7c:7a:
af:a3:0b:7b:24:bd:c0:5a:8c:3c:96:8e:e5:69:6a:
d1:8f:39:74:e8:d9:a5:be:98:ae:82:9a:30:06:6d:
ec:8d:d7:d2:93:8a:b7:81:97:cc:1d:a2:82:66:a9:
65:6a:f8:c8:17:ce:a4:48:4a:38:ec:d6:8f:83:7e:
41:94:99:b8:b2:34:31:40:3e:af:4a:45:26:d0:05:
e8:21:a1:88:e9:57:6d:b2:67:14:47:aa:51:72:eb:
df:f6:9a:3d:86:f4:ae:17:9a:99:e3:14:01:12:81:
02:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:23:2C:00:F8:0B:85:6F:CF:4F:DF:2B:BD:37:2A:D9:15:85:8F:F6
X509v3 Authority Key Identifier:
keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/326131333a376134303a3a2f32392d3438203d3e203537313936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7a40::/29
Signature Algorithm: sha256WithRSAEncryption
48:22:61:a0:09:95:46:fa:b3:4d:1a:b8:76:ff:f3:a3:f0:7b:
ff:e1:5c:5d:38:68:45:f9:1f:d0:70:06:f0:76:ac:08:63:d0:
af:31:6a:37:a4:88:de:29:d0:45:33:24:22:56:e8:4b:f7:0b:
08:4b:81:87:fc:3b:05:4a:41:28:6e:b4:56:a1:35:e5:6e:78:
ef:ca:c0:3b:10:cd:42:8b:a5:b7:4a:bb:46:d8:d0:38:1d:16:
20:f0:f2:92:ee:d7:29:2c:7e:df:51:fe:b3:38:55:9a:01:4f:
de:39:ea:ec:73:da:99:4e:84:7b:a8:d6:3b:0a:4c:03:c7:30:
cc:ee:6a:f1:8a:53:28:48:64:99:aa:9f:3f:e4:e9:ff:e6:b2:
18:6c:ab:77:db:d6:e9:01:24:cd:47:43:82:82:bc:c7:96:22:
b4:ad:02:16:64:4c:3c:0b:00:cf:41:d9:0b:54:e9:2e:8d:b8:
99:23:7c:0b:1c:f9:4e:d0:7a:b5:32:0f:19:c7:18:11:c9:63:
2a:66:9d:b5:8f:97:eb:cd:a6:98:f3:31:e6:68:cb:9c:f6:d7:
00:ba:ec:ce:6b:51:e9:2d:17:35:b0:8e:5b:8c:a5:30:9f:1a:
96:b0:69:56:2b:59:ee:62:73:52:25:a7:1a:57:fe:a7:49:2a:
65:a7:1b:01
-----BEGIN CERTIFICATE-----
MIIExzCCA6+gAwIBAgIUYTNM4LPI8ERNVhFAqDPFM4Ea+2gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzYTcxNjlmNjQ5OWRkMjgxNWM5MTc4YTg5MGJjNGMw
NTE0ZGRmOTAeFw0yNjA5MDYyMjQyNDhaFw0yNzA5MDUyMjQ3NDhaMDMxMTAvBgNV
BAMTKDk2MjMyQzAwRjgwQjg1NkZDRjRGREYyQkJEMzcyQUQ5MTU4NThGRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2npGhbR8INDf0HSGT8lJhe+fh
BNryKrGN6qvJqYmiO+b8kIq7lnr8IcxOpAfVh3OHvxdyBF0dKlpMiPMHj9qaQgcC
SeW5kUjd072A2iCCPq1x5Nh3CCwBzypEqwQ14esoIq2tGJdK1kMa/87AffwZgxOB
7ipLlJ1wvlA7l9rz7au1mySC+ORaf00THjX6W+FZitl8eq+jC3skvcBajDyWjuVp
atGPOXTo2aW+mK6CmjAGbeyN19KTireBl8wdooJmqWVq+MgXzqRISjjs1o+DfkGU
mbiyNDFAPq9KRSbQBeghoYjpV22yZxRHqlFy69/2mj2G9K4XmpnjFAESgQJPAgMB
AAGjggHRMIIBzTAdBgNVHQ4EFgQUliMsAPgLhW/PT98rvTcq2RWFj/YwHwYDVR0j
BBgwFoAUwjpxafZJndKBXJF4qJC8TAUU3fkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnN5bmMucnAua2kvcmVwby9jbG9ub3RoLzEv
QzIzQTcxNjlGNjQ5OUREMjgxNUM5MTc4QTg5MEJDNEMwNTE0RERGOS5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL3dqcHhhZlpKbmRLQlhKRjRxSkM4VEFVVTNmay5j
ZXIwdwYIKwYBBQUHAQsEazBpMGcGCCsGAQUFBzALhltyc3luYzovL3JzeW5jLnJw
LmtpL3JlcG8vY2xvbm90aC8xLzMyNjEzMTMzM2EzNzYxMzQzMDNhM2EyZjMyMzky
ZDM0MzgyMDNkM2UyMDM1MzczMTM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQMqE3pAMA0GCSqGSIb3
DQEBCwUAA4IBAQBIImGgCZVG+rNNGrh2//Oj8Hv/4VxdOGhF+R/QcAbwdqwIY9Cv
MWo3pIjeKdBFMyQiVuhL9wsIS4GH/DsFSkEobrRWoTXlbnjvysA7EM1Ci6W3SrtG
2NA4HRYg8PKS7tcpLH7fUf6zOFWaAU/eOersc9qZToR7qNY7CkwDxzDM7mrxilMo
SGSZqp8/5On/5rIYbKt329bpASTNR0OCgrzHliK0rQIWZEw8CwDPQdkLVOkujbiZ
I3wLHPlO0Hq1Mg8ZxxgRyWMqZp21j5frzaaY8zHmaMuc9tcAuuzOa1HpLRc1sI5b
jKUwnxqWsGlWK1nuYnNSJacaV/6nSSplpxsB
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:19:32 2026 by rpki-client