Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336466383a3a2f34382d3438203d3e20323038373439.roa
File: 326131313a323963303a336466383a3a2f34382d3438203d3e20323038373439.roa (raw, json)
Hash identifier: ioiGHpUPKXcVY0jybO7c2xeVvrN/CLm6hollS0GukJw=
Subject key identifier: DE:C1:AB:4B:DF:9D:91:9C:66:EA:01:DF:A3:24:F3:20:61:F3:51:73
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 43174162A3F09D4D2349875D6059DF3BDFE7B4EE
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336466383a3a2f34382d3438203d3e20323038373439.roa
Signing time: Wed 21 May 2025 14:05:52 +0000
ROA not before: Wed 21 May 2025 14:00:52 +0000
ROA not after: Wed 20 May 2026 14:05:52 +0000
asID: 208749
IP address blocks: 2a11:29c0:3df8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:52:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:17:41:62:a3:f0:9d:4d:23:49:87:5d:60:59:df:3b:df:e7:b4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: May 21 14:00:52 2025 GMT
Not After : May 20 14:05:52 2026 GMT
Subject: CN=DEC1AB4BDF9D919C66EA01DFA324F32061F35173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:16:62:f1:ee:db:6e:a8:4d:11:4b:94:91:21:
2c:58:67:0b:34:28:47:fc:4f:c8:42:40:e8:3c:26:
69:d6:ba:41:67:1b:ce:7a:bb:3e:e0:ca:cb:cb:64:
b3:67:70:d2:47:df:6c:cf:a2:9d:e4:91:d1:11:00:
17:db:d2:37:00:9e:32:3b:53:12:8a:8a:69:f2:45:
f5:80:85:e7:b1:d3:56:eb:02:a8:26:73:1f:71:fc:
10:d1:13:47:69:16:56:ab:1d:2f:a1:a2:c7:94:3e:
c1:51:77:83:86:c0:d5:b9:57:93:cb:a6:8a:68:d4:
94:90:56:c9:33:58:e7:f1:a5:e6:6a:52:9e:be:08:
15:fc:bf:94:ee:4a:e8:5a:26:3b:a4:2c:c5:5c:8c:
cc:34:14:7c:35:37:58:53:26:31:82:38:ee:b9:c7:
91:93:78:f9:57:f9:0b:4f:96:8b:bb:e7:0c:7b:e5:
d9:ed:ca:7c:79:66:f2:6e:07:cd:06:34:ef:9d:9d:
8c:78:df:fa:10:26:0a:c2:1b:85:a5:26:56:b5:f4:
09:8a:29:be:ac:e7:62:23:d1:f5:19:ef:5b:f5:e2:
4a:86:d2:03:79:a8:79:99:53:e7:1d:a3:af:a1:43:
f2:49:5d:51:df:b8:2b:4b:6b:13:16:42:0a:5c:31:
01:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C1:AB:4B:DF:9D:91:9C:66:EA:01:DF:A3:24:F3:20:61:F3:51:73
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336466383a3a2f34382d3438203d3e20323038373439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3df8::/48
Signature Algorithm: sha256WithRSAEncryption
04:66:ac:3b:7f:b9:1d:ae:d9:85:5c:5d:f7:4a:02:c6:6e:c9:
0f:5d:c8:fb:92:7c:80:a7:dc:8c:88:77:fd:b0:37:1c:ff:44:
72:89:d8:e4:cd:2a:4b:2e:ff:20:5b:0e:ad:74:1c:c6:61:1e:
ab:1f:9b:67:8d:72:2e:48:ba:09:0d:43:5f:81:9b:46:b8:a0:
93:7f:fe:30:f5:4d:e1:bd:c4:44:03:28:d2:88:98:fa:bc:79:
9b:ba:b2:5e:13:9f:35:2a:1d:d5:bc:b2:91:34:be:d0:a7:3c:
16:09:20:39:19:56:b7:b6:67:96:d1:84:a7:cc:21:94:1f:10:
c7:3f:28:0e:d4:5a:f2:a5:8c:2e:40:20:8a:ed:58:67:82:eb:
91:ca:f1:9b:03:22:c8:ef:32:58:98:89:c5:38:bf:bb:92:1e:
dc:28:cc:0f:22:ef:77:13:be:a6:6d:93:74:d7:4a:5c:5c:1b:
1a:33:8d:34:ca:e7:62:02:5c:c8:13:5a:8b:26:ed:d7:d6:9d:
2d:86:3e:76:2b:a1:37:4c:db:06:34:29:60:cd:a4:6d:5a:b2:
33:8f:31:1c:ec:3e:54:57:7d:89:be:4b:00:b3:45:db:4a:c1:
af:22:66:bd:80:86:1a:7f:8c:b9:20:0a:b3:36:3c:78:9e:d8:
28:04:39:01
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUQxdBYqPwnU0jSYddYFnfO9/ntO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTk2ZDg1OTk2ZTkzNTRkMTAwNWU0NGM3ODFkMzhhZGNm
MTA4Mjg3MzAeFw0yNTA1MjExNDAwNTJaFw0yNjA1MjAxNDA1NTJaMDMxMTAvBgNV
BAMTKERFQzFBQjRCREY5RDkxOUM2NkVBMDFERkEzMjRGMzIwNjFGMzUxNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1FmLx7ttuqE0RS5SRISxYZws0
KEf8T8hCQOg8JmnWukFnG856uz7gysvLZLNncNJH32zPop3kkdERABfb0jcAnjI7
UxKKimnyRfWAheex01brAqgmcx9x/BDRE0dpFlarHS+hoseUPsFRd4OGwNW5V5PL
popo1JSQVskzWOfxpeZqUp6+CBX8v5TuSuhaJjukLMVcjMw0FHw1N1hTJjGCOO65
x5GTePlX+QtPlou75wx75dntynx5ZvJuB80GNO+dnYx43/oQJgrCG4WlJla19AmK
Kb6s52Ij0fUZ71v14kqG0gN5qHmZU+cdo6+hQ/JJXVHfuCtLaxMWQgpcMQE5AgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQU3sGrS9+dkZxm6gHfoyTzIGHzUXMwHwYDVR0j
BBgwFoAU6W2FmW6TVNEAXkTHgdOK3PEIKHMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm
YmY1LzAvRTk2RDg1OTk2RTkzNTREMTAwNUU0NEM3ODFEMzhBRENGMTA4Mjg3My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZXMkZtVzZUVk5FQVhrVEhnZE9LM1BF
SUtITS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExMTViYzYt
MTBmNi00YWYzLWJhMDktOGI2ODdhNTZmYmY1LzAvMzI2MTMxMzEzYTMyMzk2MzMw
M2EzMzY0NjYzODNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzODM3MzQzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoRKcA9+DANBgkqhkiG9w0BAQsFAAOCAQEABGasO3+5Ha7ZhVxd
90oCxm7JD13I+5J8gKfcjIh3/bA3HP9EconY5M0qSy7/IFsOrXQcxmEeqx+bZ41y
Lki6CQ1DX4GbRrigk3/+MPVN4b3ERAMo0oiY+rx5m7qyXhOfNSod1byykTS+0Kc8
FgkgORlWt7ZnltGEp8whlB8Qxz8oDtRa8qWMLkAgiu1YZ4LrkcrxmwMiyO8yWJiJ
xTi/u5Ie3CjMDyLvdxO+pm2TdNdKXFwbGjONNMrnYgJcyBNaiybt19adLYY+diuh
N0zbBjQpYM2kbVqyM48xHOw+VFd9ib5LALNF20rBryJmvYCGGn+MuSAKszY8eJ7Y
KAQ5AQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:03:04 2025 by rpki-client