Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33653a3a2f34382d3438203d3e20323135343031.roa
File: 326131313a323963303a33653a3a2f34382d3438203d3e20323135343031.roa (raw, json)
Hash identifier: aBpKnoXX+adM2e0w3j5N+3wMNyhCCmVi/CKde3D/GtU=
Subject key identifier: 75:5C:E9:F0:05:40:9D:55:28:EB:E4:7D:9B:C6:C8:3C:99:76:1E:74
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 05C48254E6E79EC242DAB150C59B52B12B7242DA
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33653a3a2f34382d3438203d3e20323135343031.roa
Signing time: Thu 01 Jan 2026 15:22:44 +0000
ROA not before: Thu 01 Jan 2026 15:17:44 +0000
ROA not after: Thu 31 Dec 2026 15:22:44 +0000
asID: 215401
IP address blocks: 2a11:29c0:3e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:32:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:c4:82:54:e6:e7:9e:c2:42:da:b1:50:c5:9b:52:b1:2b:72:42:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Jan 1 15:17:44 2026 GMT
Not After : Dec 31 15:22:44 2026 GMT
Subject: CN=755CE9F005409D5528EBE47D9BC6C83C99761E74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:94:55:fd:b9:53:e7:e3:64:e2:22:ed:e6:
16:dd:a5:ce:80:29:a9:67:a5:60:0a:7c:10:33:cc:
cd:a9:87:44:d7:17:06:cc:6e:9e:04:7f:97:cc:8d:
e8:ad:71:c4:86:a1:36:f0:3c:e6:95:53:99:33:14:
94:3f:9f:6e:70:79:95:9a:c4:39:44:77:bf:2b:ad:
24:64:c0:09:a8:90:e3:1d:8e:87:52:f5:0f:64:14:
31:63:fb:5f:a4:f6:73:15:a6:e6:ad:f8:c5:98:8e:
bd:37:23:2e:b6:37:70:6d:3d:6b:e9:c3:ca:ef:03:
65:29:16:83:67:f8:61:90:78:ea:81:c3:eb:4d:e1:
98:e0:e6:9e:45:ca:ea:e3:d0:19:3c:82:80:d5:e7:
12:19:62:94:9d:95:0a:61:59:9c:82:3b:34:80:34:
a8:9a:07:9f:4f:39:4b:33:fa:47:d9:b2:30:94:5b:
40:bd:ff:db:69:4b:00:51:d4:d5:43:f2:6a:1a:6d:
d4:f2:08:49:70:e6:dd:21:21:43:91:73:af:f5:6a:
04:62:7d:14:46:eb:ae:f7:fa:7c:ed:66:38:1d:f8:
11:ce:16:8c:5b:86:1b:32:08:fb:82:e5:e3:7f:99:
c7:d5:3d:dc:83:fd:02:62:a2:85:88:3f:ee:05:8d:
95:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5C:E9:F0:05:40:9D:55:28:EB:E4:7D:9B:C6:C8:3C:99:76:1E:74
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33653a3a2f34382d3438203d3e20323135343031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3e::/48
Signature Algorithm: sha256WithRSAEncryption
48:9e:d1:6c:95:59:ce:06:2f:0c:17:04:c3:93:59:83:d5:bd:
01:53:67:75:d0:ed:d2:5e:8b:ed:75:cd:60:f7:94:3b:c1:ce:
92:79:f5:1b:aa:71:bf:8e:d9:70:1c:9a:54:ee:8b:bc:f9:93:
14:44:08:09:ae:41:8a:7c:26:f2:9c:48:67:d6:1f:4e:95:d4:
5b:77:f2:9c:d7:8e:f3:d5:9a:3f:94:8e:53:6b:bb:2d:03:37:
33:67:d3:d1:64:ea:87:cf:e4:3a:72:93:7b:65:e4:8e:e1:d8:
9a:9a:d8:5b:ee:7c:6e:9a:a2:bf:95:78:76:15:b5:fc:cc:8b:
06:2d:db:5a:7c:a9:56:72:44:4f:82:cf:1f:15:65:b6:ef:78:
b6:78:54:c6:91:f9:6b:49:ea:2c:55:ce:72:b8:21:17:e0:d7:
40:8a:7c:bd:a3:7e:e1:93:fa:ac:a3:1d:0e:00:d4:a5:e4:f2:
c0:21:fe:11:f6:25:54:42:10:4e:f2:24:90:98:00:ed:8a:fd:
52:30:93:53:e6:23:db:b3:99:78:d6:bc:2d:15:95:87:d7:16:
fa:c9:7e:7d:b5:5c:48:39:a7:4a:60:fd:a3:79:24:a2:95:fb:
6b:6c:bf:ca:a7:dd:02:28:27:3e:29:a2:6a:89:43:66:ed:15:
d0:78:fa:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:35:57 2026 by rpki-client