Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32303a3a2f34382d3438203d3e20323130393835.roa
File: 326131313a323963303a32303a3a2f34382d3438203d3e20323130393835.roa (raw, json)
Hash identifier: tvuTZMloNLeqAIoXnHhw128GrXUk5KMamvDIq0xFzAs=
Subject key identifier: 79:EB:DC:E2:E7:3D:5F:F0:4D:7E:B5:05:08:B5:26:2F:D5:AB:56:87
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 6D5DCE5E79C18464B9F7CA28B7944F086B39BA06
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32303a3a2f34382d3438203d3e20323130393835.roa
Signing time: Wed 21 May 2025 14:05:54 +0000
ROA not before: Wed 21 May 2025 14:00:54 +0000
ROA not after: Wed 20 May 2026 14:05:54 +0000
asID: 210985
IP address blocks: 2a11:29c0:20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:52:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:5d:ce:5e:79:c1:84:64:b9:f7:ca:28:b7:94:4f:08:6b:39:ba:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: May 21 14:00:54 2025 GMT
Not After : May 20 14:05:54 2026 GMT
Subject: CN=79EBDCE2E73D5FF04D7EB50508B5262FD5AB5687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:23:53:1c:eb:7c:c9:4c:41:69:3c:56:0d:bd:
2e:c1:00:3f:71:fb:32:78:c7:d1:f2:80:6f:71:4a:
cf:ca:fe:5a:7f:6b:58:ff:11:0b:d1:9d:55:57:9c:
02:57:9a:b8:7f:43:dd:2f:cb:bb:44:c4:6d:5b:0d:
e6:41:bb:3d:c4:b7:50:23:64:9a:d5:cd:c0:f5:19:
27:2d:8c:d7:ff:cf:3e:a0:f1:dd:5b:db:be:ce:40:
67:e5:39:53:5b:16:bb:6b:c1:d9:60:54:58:9e:44:
fe:3c:8c:ef:eb:f1:56:39:ec:da:8e:1a:5a:4e:4e:
e1:12:dc:8f:be:a4:e4:4d:24:64:e2:c4:93:d3:24:
76:15:b1:93:ec:a9:d1:79:7e:19:e5:a6:03:ad:81:
a3:46:d6:62:75:d7:69:b1:01:2e:7d:78:68:2e:a7:
9b:8c:5b:3b:31:c2:a0:df:c5:d2:c4:dd:0b:8c:42:
73:05:9e:6d:d3:5a:6d:c8:dd:c7:61:89:7c:ab:1b:
b7:b7:3f:d3:18:e0:30:ec:ea:88:a2:4f:e4:fb:18:
88:81:f8:4f:5a:3e:9c:02:9c:87:0d:a9:8c:29:9d:
b0:53:32:3d:b2:68:1f:cb:1d:b1:15:3f:28:52:dc:
79:6e:85:75:33:95:a1:37:86:e5:2f:20:19:99:31:
59:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EB:DC:E2:E7:3D:5F:F0:4D:7E:B5:05:08:B5:26:2F:D5:AB:56:87
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32303a3a2f34382d3438203d3e20323130393835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:20::/48
Signature Algorithm: sha256WithRSAEncryption
2a:07:15:cb:2f:d6:57:93:fc:82:4d:2c:dc:e8:f7:5b:f7:2a:
4a:e6:4a:49:16:d2:48:dc:a4:5f:12:d6:c0:7d:37:31:0e:2e:
4e:df:7e:d2:fe:32:dc:65:c9:be:92:ac:f2:9c:03:88:94:d3:
22:47:e2:ae:ab:ad:8b:37:1c:ad:00:17:04:16:5c:81:5e:09:
c3:f7:5e:46:d4:83:c3:b1:29:53:23:51:ef:39:1d:45:bd:a1:
1b:d5:9a:b0:c2:93:f6:af:44:54:1b:04:4f:ca:59:63:ad:b4:
b0:11:13:7f:b7:0d:47:c3:a5:de:3a:55:42:0b:23:45:af:5b:
1f:80:bf:b1:2c:ec:04:1b:fc:e2:60:5b:d8:0c:e1:7a:bc:96:
ed:be:b2:6f:c9:78:a2:ad:33:56:e7:44:75:a1:89:a4:4d:6e:
df:05:04:64:3b:5d:1e:c3:fa:4d:af:8b:34:74:14:ea:56:6c:
77:63:62:7a:8d:c3:6a:94:53:8b:8f:d1:cc:4b:92:51:5c:40:
9e:61:d0:30:86:f6:82:f3:81:bf:f2:0c:98:96:24:9f:04:fb:
b3:65:08:ef:36:9e:96:47:d1:f3:a9:7e:69:cd:3b:ae:16:c1:
b6:60:ac:87:cc:2d:f5:51:ad:c4:fe:58:17:c6:db:9a:6d:77:
0a:65:d4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:05:46 2025 by rpki-client