Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336466393a3a2f34382d3438203d3e20323038373731.roa
File: 326131313a323963303a336466393a3a2f34382d3438203d3e20323038373731.roa (raw, json)
Hash identifier: 5B99njDGxyEVl8oi1qZ+w1j0U5cv7RNRSHrLDQ50uRE=
Subject key identifier: F5:37:BD:6B:EC:37:C3:E8:2A:F3:5F:07:99:68:F4:20:B6:A1:D1:00
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 6D8DBD7CF60B05A8F30B6A11B513F3AE71B0BEAB
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336466393a3a2f34382d3438203d3e20323038373731.roa
Signing time: Wed 21 May 2025 14:05:52 +0000
ROA not before: Wed 21 May 2025 14:00:52 +0000
ROA not after: Wed 20 May 2026 14:05:52 +0000
asID: 208771
IP address blocks: 2a11:29c0:3df9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:52:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:8d:bd:7c:f6:0b:05:a8:f3:0b:6a:11:b5:13:f3:ae:71:b0:be:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: May 21 14:00:52 2025 GMT
Not After : May 20 14:05:52 2026 GMT
Subject: CN=F537BD6BEC37C3E82AF35F079968F420B6A1D100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0a:f7:85:ca:81:00:48:35:47:ab:07:d2:cd:
67:11:ed:d0:31:64:1a:f1:35:09:a2:e3:2a:4f:69:
7e:78:33:04:49:62:95:ef:1e:8a:44:20:df:ab:71:
96:09:6f:29:71:b4:08:a5:e7:89:2b:04:51:56:a8:
81:13:ce:2d:45:de:f9:85:5e:40:0b:85:78:53:08:
e5:cf:8a:9b:67:5c:af:05:2b:ac:16:c5:48:93:26:
35:29:97:43:df:7c:b5:90:64:62:a4:6e:c5:4c:60:
7c:a6:de:80:86:94:5b:6e:35:21:d8:8a:55:53:04:
46:91:ca:c5:5c:30:2e:5f:ea:d5:f2:ec:4b:f0:14:
a7:36:87:e5:ae:db:d8:2d:24:85:17:6c:81:65:3f:
6d:1d:eb:96:af:2d:a6:8b:94:5e:d3:05:45:c7:17:
1f:72:a8:b6:98:f2:eb:74:06:19:aa:da:9e:bf:2e:
98:c4:86:ae:37:fa:f5:ca:b8:6b:3f:f0:da:1e:a3:
df:93:ca:41:04:9b:ec:bf:55:63:ac:c9:a3:f5:8c:
91:76:c8:9e:00:59:0f:f4:ed:35:f7:4a:00:aa:7c:
cb:fb:7d:99:62:04:60:52:ad:02:9d:04:7b:74:1e:
f8:39:9d:17:34:2a:fa:18:0e:a1:b8:91:4c:66:56:
1a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:37:BD:6B:EC:37:C3:E8:2A:F3:5F:07:99:68:F4:20:B6:A1:D1:00
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336466393a3a2f34382d3438203d3e20323038373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3df9::/48
Signature Algorithm: sha256WithRSAEncryption
64:17:42:8c:04:de:37:55:e3:9a:b0:a6:88:ed:72:3d:f3:dd:
76:d8:30:99:38:a6:c4:01:eb:cf:f7:7b:f8:70:f2:c7:c9:5a:
81:4a:d1:ce:ee:7a:4d:a3:f9:a4:f2:cb:06:cd:0f:ee:72:51:
df:5c:7f:13:9b:47:ce:d2:22:8a:1c:d9:20:7a:86:cc:e5:b3:
72:42:8e:7a:a9:3f:37:84:17:91:e2:f3:f0:1a:65:81:f4:50:
44:7c:b8:bb:69:79:9e:2d:0a:37:b1:96:35:d0:7b:65:c7:5e:
d4:67:78:22:05:21:a8:8a:1f:de:76:65:0c:3f:fa:64:e3:bf:
ea:0f:d5:92:de:79:16:a6:f3:59:e1:75:c1:33:89:d6:2d:1c:
9a:8b:0e:e5:5c:98:5e:b8:8f:db:4f:ea:3c:0f:73:7d:e6:dc:
96:0c:cc:4e:f5:bd:aa:f6:24:07:58:47:47:d9:a8:8d:ea:9c:
28:b4:2b:43:9c:d9:b5:23:e3:ef:da:0c:c5:aa:6e:49:0b:5e:
62:f9:14:71:4a:e7:7f:5c:c1:9a:98:51:a1:79:f6:6d:02:4f:
d9:5d:1d:5a:df:cb:95:33:8b:bc:db:e4:60:2c:18:97:d1:ea:
4b:5b:e0:7c:f5:18:e1:5f:80:cf:95:0b:91:cf:38:27:a8:16:
1a:a6:b8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:02:01 2025 by rpki-client