Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336462303a3a2f34342d3438203d3e20323133313236.roa
File: 326131313a323963303a336462303a3a2f34342d3438203d3e20323133313236.roa (raw, json)
Hash identifier: pVbt9YdrZDsjSTI68p4vVJ2Uo36MdA89xaNjR46ODlo=
Subject key identifier: 51:A5:F3:99:6F:36:27:E2:34:DE:F8:18:22:D2:8E:EA:04:9B:92:FA
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 59DC7B3A1E7855D8246BF2541134EF2C28DB142C
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336462303a3a2f34342d3438203d3e20323133313236.roa
Signing time: Fri 30 Jan 2026 00:22:45 +0000
ROA not before: Fri 30 Jan 2026 00:17:45 +0000
ROA not after: Fri 29 Jan 2027 00:22:45 +0000
asID: 213126
IP address blocks: 2a11:29c0:3db0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:32:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:dc:7b:3a:1e:78:55:d8:24:6b:f2:54:11:34:ef:2c:28:db:14:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Jan 30 00:17:45 2026 GMT
Not After : Jan 29 00:22:45 2027 GMT
Subject: CN=51A5F3996F3627E234DEF81822D28EEA049B92FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c9:c7:49:57:90:55:0b:70:3c:57:47:d8:4e:
98:9a:8d:21:33:c1:ca:18:ce:9e:f0:4f:4e:a7:18:
f6:24:0e:15:70:6c:7f:52:55:c8:bf:d8:86:1b:36:
f2:e3:71:07:c2:9e:59:6c:5f:26:82:29:13:41:c5:
42:df:c6:3b:32:b8:01:93:7c:ab:4d:74:d8:ac:da:
44:c9:c3:63:da:6a:b1:32:27:51:75:f6:bb:42:75:
9c:d4:e6:49:46:83:b3:85:fe:85:13:26:ce:b7:2c:
6f:bf:85:13:36:4a:8f:a0:f4:16:c7:b4:9e:a8:d1:
6f:85:44:1d:5d:25:9b:e7:c5:38:7c:0c:fd:f5:7b:
95:19:37:d7:6e:85:2f:35:aa:80:f3:1a:62:b7:d8:
d8:73:b5:90:c4:68:f5:81:a9:89:95:b7:4c:70:4f:
eb:77:8a:45:4f:d4:5b:f1:6e:16:47:07:22:68:01:
bb:e4:f4:1f:1a:82:17:65:ce:4f:7d:3b:ef:4b:7c:
66:36:c8:d9:99:bd:15:d6:da:56:93:5f:02:a1:89:
4d:8c:2d:a8:a8:be:a2:7f:3c:d6:95:58:b3:ec:fa:
7f:f3:8c:d3:84:eb:14:83:f4:ef:5e:c1:fc:89:dd:
c4:ba:fe:77:15:7a:93:c8:cc:57:ed:66:d5:e9:b4:
d9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A5:F3:99:6F:36:27:E2:34:DE:F8:18:22:D2:8E:EA:04:9B:92:FA
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336462303a3a2f34342d3438203d3e20323133313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3db0::/44
Signature Algorithm: sha256WithRSAEncryption
4d:30:c4:5c:da:c2:17:d4:a5:48:ba:ad:dd:01:4d:66:c8:8e:
cd:de:8d:57:99:ad:6b:b3:89:2d:fb:0f:84:20:50:d3:51:35:
62:6d:41:c0:72:bb:73:90:3b:35:a2:71:a7:24:98:5e:d2:3f:
9c:a7:af:79:22:b5:54:71:fc:62:4d:34:f1:20:fb:ea:ec:b5:
07:71:25:4e:31:49:e4:92:c6:89:61:98:0d:6d:d1:de:2f:11:
70:01:ba:6c:d7:c2:f8:7c:10:5d:c0:62:56:1e:19:68:f7:42:
e7:a8:ec:a0:12:55:a6:f2:f3:36:16:5d:24:cb:fc:4d:f7:42:
0d:10:7a:3b:f8:e5:55:eb:19:9c:bd:cc:d4:19:7e:44:57:2c:
93:c7:83:53:1f:00:81:2d:17:1b:a7:28:93:5c:07:b7:6c:25:
12:ac:b1:94:c0:11:ec:a5:19:64:39:3e:a7:1a:5f:a9:f1:24:
87:94:f3:84:af:d1:06:ac:96:c5:cd:4d:62:19:5e:0e:04:fc:
8b:19:b5:64:c8:c7:a6:9d:9d:a3:4a:4d:95:86:68:68:19:5c:
1f:42:e2:33:42:b0:17:86:11:b3:31:71:e2:ca:3a:40:fa:c9:
e1:6b:d6:de:ba:cf:ab:68:ce:cd:b3:df:4f:a4:20:16:57:24:
28:56:9e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:39:22 2026 by rpki-client