Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336463303a3a2f34342d3438203d3e20323039363030.roa
File: 326131313a323963303a336463303a3a2f34342d3438203d3e20323039363030.roa (raw, json)
Hash identifier: /5a6c1cTVxuK2PLYHg/K7dBb5qeMNgCH3/wt2e/WoiI=
Subject key identifier: 7E:DC:92:CE:5F:C0:40:03:B6:31:E7:D1:CA:43:D0:BB:CA:EC:5F:44
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 340EBE3B4B1C92D3553B19869505833DE5292DB0
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336463303a3a2f34342d3438203d3e20323039363030.roa
Signing time: Thu 12 Jun 2025 15:29:26 +0000
ROA not before: Thu 12 Jun 2025 15:24:26 +0000
ROA not after: Thu 11 Jun 2026 15:29:26 +0000
asID: 209600
IP address blocks: 2a11:29c0:3dc0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:0e:be:3b:4b:1c:92:d3:55:3b:19:86:95:05:83:3d:e5:29:2d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Jun 12 15:24:26 2025 GMT
Not After : Jun 11 15:29:26 2026 GMT
Subject: CN=7EDC92CE5FC04003B631E7D1CA43D0BBCAEC5F44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:01:12:50:8e:23:93:ad:7e:46:3c:bd:3c:
7e:be:fc:11:66:36:c9:75:9e:85:bd:cd:5d:0b:56:
0b:18:79:dc:75:e7:e3:17:a2:35:59:44:50:88:58:
0f:71:67:e5:c4:3e:3d:2d:01:c9:6e:18:6a:02:ca:
74:d7:0b:31:52:58:e1:36:d5:ae:fd:23:7c:99:3a:
94:a5:fa:56:f7:d6:56:52:d1:30:c2:43:2b:bb:39:
28:e2:eb:f7:46:8a:c7:39:78:c0:a1:62:5c:21:97:
c3:46:d2:1a:8a:a3:8c:61:4a:0a:bf:43:64:1e:4e:
ff:ae:f0:1b:05:1b:98:01:84:df:a8:70:87:d8:5e:
d9:9b:3a:2c:83:20:a4:04:02:90:4f:7f:e5:2e:dc:
c8:76:8e:6b:a9:6a:ef:f9:59:37:c7:65:44:20:38:
cd:f6:f3:ff:55:d1:4f:78:06:35:0c:9e:11:08:55:
90:40:45:f5:59:3a:b4:c2:2f:53:c1:47:3e:23:96:
eb:c6:8d:89:57:bd:26:af:b1:29:39:a0:27:4e:67:
7b:14:a5:74:a6:e5:8f:82:1a:4d:48:39:9d:02:fe:
6e:11:72:3a:ad:d5:76:b7:53:e7:8d:76:cd:66:64:
2b:80:7f:89:16:51:c3:0d:e1:ec:4f:3a:d0:d4:a0:
b2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DC:92:CE:5F:C0:40:03:B6:31:E7:D1:CA:43:D0:BB:CA:EC:5F:44
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336463303a3a2f34342d3438203d3e20323039363030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3dc0::/44
Signature Algorithm: sha256WithRSAEncryption
58:7e:cf:5b:c6:7d:45:33:56:60:33:a9:53:d3:41:52:39:35:
dc:3b:1c:4d:6c:cb:b3:d9:5e:c3:08:b6:77:dd:f9:f8:5c:94:
2a:da:c5:a4:13:6f:a3:b7:ee:71:51:ac:a8:4f:71:32:26:93:
98:ed:e9:23:12:ef:a9:67:4b:5b:cb:17:c0:d3:12:3e:98:e7:
1c:11:88:e1:eb:6e:92:b2:58:24:42:0c:bb:51:fc:7e:ce:bd:
ed:38:0a:f7:4e:be:66:cd:76:c7:28:cc:3f:84:f5:e3:60:73:
9e:02:9a:f3:8c:27:ad:d6:1c:a6:bc:ec:34:88:d8:8a:e1:da:
c8:23:b1:97:e4:3a:c9:e0:e3:aa:a5:d9:f7:fa:67:c7:d6:ea:
82:9d:d1:7f:da:3d:0e:f3:e2:8e:14:f9:ae:c0:88:ae:7f:6a:
d8:02:4f:91:e4:3b:5b:f9:ca:f3:ab:ac:04:11:dc:52:ad:c7:
05:73:b2:18:3e:9f:6f:2f:87:b3:d6:57:96:91:2d:9f:bc:58:
0c:e5:f3:50:c8:fc:50:55:08:1e:95:4a:1f:2f:20:b6:58:35:
06:8e:63:97:a3:fa:b7:7d:da:a0:f0:14:26:4f:07:89:2d:5a:
09:89:b5:e5:f1:6f:33:da:70:3e:4e:f2:ce:d1:90:39:5e:59:
18:bc:1c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:57:19 2025 by rpki-client