Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32333a3a2f34382d3438203d3e20323133313236.roa
File: 326131313a323963303a32333a3a2f34382d3438203d3e20323133313236.roa (raw, json)
Hash identifier: 7bln8YdK4lNVUnPX+UN3Sl1NS4l9wKfZbOTE3hnVJq8=
Subject key identifier: 44:FD:58:1D:93:1F:86:4C:8C:EE:E1:5B:BD:22:7C:B7:F3:61:D0:05
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 5EA40C568350687E11850720EF0DBE7497D6F1D4
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32333a3a2f34382d3438203d3e20323133313236.roa
Signing time: Wed 21 Jan 2026 16:22:45 +0000
ROA not before: Wed 21 Jan 2026 16:17:45 +0000
ROA not after: Wed 20 Jan 2027 16:22:45 +0000
asID: 213126
IP address blocks: 2a11:29c0:23::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:a4:0c:56:83:50:68:7e:11:85:07:20:ef:0d:be:74:97:d6:f1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Jan 21 16:17:45 2026 GMT
Not After : Jan 20 16:22:45 2027 GMT
Subject: CN=44FD581D931F864C8CEEE15BBD227CB7F361D005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:c5:ae:7c:b8:fc:41:d0:0e:17:f3:3b:79:
89:5b:2f:e9:39:8a:aa:cd:9b:3e:12:ca:a2:13:61:
89:fe:ec:02:c2:29:db:0a:13:4a:45:a9:4e:a3:ee:
df:6a:8e:e2:b4:76:7c:46:d5:62:fc:b5:f7:d8:42:
1b:19:19:c5:e5:19:2c:2f:4f:af:f8:11:78:ee:16:
e5:23:8b:89:e9:a0:18:c0:ab:d6:1c:b2:5f:e5:3c:
a6:18:88:d9:62:7a:61:bb:bc:f9:64:22:56:1e:a1:
d9:1d:d4:2a:94:80:86:f1:20:38:86:da:9f:b4:15:
9f:e8:57:ab:c8:8c:74:bf:03:21:23:2b:7d:ec:b4:
e6:a3:f5:f0:fb:79:75:53:cd:cf:0b:3c:5f:40:5b:
f2:3d:77:3b:65:dc:e5:b5:71:f7:bd:81:cc:64:ed:
c5:18:7c:cc:30:2b:11:6e:6b:15:65:be:72:0d:23:
cb:f0:74:dc:ff:5b:d5:d3:4a:b0:49:64:51:51:34:
cd:17:c0:44:da:8f:13:a8:49:1d:4f:92:ac:f4:71:
d5:26:ca:1c:93:34:f0:5f:57:d9:b8:97:1c:c4:0a:
c9:f9:de:5f:52:06:b8:b7:4d:50:4d:e2:4f:66:a4:
b9:dc:44:ed:93:cf:81:a4:89:7e:44:73:95:43:f2:
9b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FD:58:1D:93:1F:86:4C:8C:EE:E1:5B:BD:22:7C:B7:F3:61:D0:05
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32333a3a2f34382d3438203d3e20323133313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:23::/48
Signature Algorithm: sha256WithRSAEncryption
56:43:1f:92:e0:45:a2:bd:ef:c6:ac:e2:00:e8:70:eb:e7:50:
a7:60:16:6c:a4:91:2c:92:be:b1:73:12:44:ae:cb:8e:9c:cd:
c9:f0:b8:c7:5c:9d:79:ba:92:bf:67:41:f5:3f:54:20:d3:6b:
bd:60:9b:0f:b3:23:fb:78:9a:f6:e1:f5:40:2e:0e:02:15:ec:
b1:e0:df:c6:fc:4b:2f:97:05:23:6a:02:42:55:5c:7c:89:17:
56:cb:59:14:f8:ce:16:97:43:41:4c:b7:96:93:20:2e:54:e0:
7b:5f:4a:92:2e:8b:58:de:c4:91:a7:35:83:1d:fa:c0:84:47:
0d:fc:eb:95:ed:0d:16:f1:62:44:0b:a5:a2:54:fc:1b:17:aa:
d4:0b:04:09:25:d5:1a:3d:70:3e:fe:88:08:4f:b1:4c:33:50:
d9:f4:0b:76:91:6c:8c:a1:46:b0:e8:0f:d0:e1:6b:1b:cb:f2:
5c:9a:ae:c4:48:5b:d5:43:b9:6a:5a:34:53:ae:91:b6:c3:d3:
9f:29:3e:51:e7:44:c4:12:89:6e:2f:a3:ac:fb:e6:3c:45:d0:
bf:b1:14:33:57:3c:bd:62:12:56:50:c9:15:d5:e2:cd:70:2d:
9c:f6:da:3a:df:4a:a9:02:da:43:3b:9d:26:42:16:17:21:a2:
3e:35:71:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:11:29 2026 by rpki-client