Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34333a3a2f34382d3438203d3e20323138363434.roa
File: 326131313a323963303a34333a3a2f34382d3438203d3e20323138363434.roa (raw, json)
Hash identifier: bY1urvszcodCIs1dVVVR3AnXL0IEZ9RQsFPCc1gIK/E=
Subject key identifier: 90:F5:9D:C0:13:B7:D6:6C:E3:8D:0A:D5:F3:99:4B:91:92:1B:1D:72
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 1753D7568C6A9B6BF2B7E165BA2662879290DDDE
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34333a3a2f34382d3438203d3e20323138363434.roa
Signing time: Sat 19 Sep 2026 10:22:03 +0000
ROA not before: Sat 19 Sep 2026 10:17:03 +0000
ROA not after: Sat 18 Sep 2027 10:22:03 +0000
asID: 218644
IP address blocks: 2a11:29c0:43::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 12:45:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:53:d7:56:8c:6a:9b:6b:f2:b7:e1:65:ba:26:62:87:92:90:dd:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Sep 19 10:17:03 2026 GMT
Not After : Sep 18 10:22:03 2027 GMT
Subject: CN=90F59DC013B7D66CE38D0AD5F3994B91921B1D72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:30:03:f5:c7:62:0b:e3:dc:9d:ae:1d:c6:f4:
db:f4:8f:41:a2:b3:c1:2d:2c:14:60:37:a4:c7:ea:
22:f3:ab:4a:75:97:9d:93:92:9a:c8:30:49:dd:18:
6c:38:12:8a:f3:08:fb:dc:e6:b0:58:84:89:b6:84:
72:ce:e0:4b:85:85:00:26:bc:b0:30:f8:53:6f:3e:
2a:2c:6f:ac:bb:57:85:96:91:9d:9a:d2:31:14:d2:
e7:3e:95:87:40:f7:93:bc:30:3b:ea:07:a6:6b:ad:
db:81:c5:fd:1c:2d:d5:34:c2:3b:55:38:fd:56:90:
4b:d3:88:a2:41:21:8d:c3:a7:eb:91:20:ab:22:b5:
aa:0d:8b:23:c7:a2:88:a5:7c:61:fb:c6:82:4b:76:
b9:69:f5:45:57:73:34:51:bb:2c:42:ce:54:29:53:
75:cd:1a:25:3a:d9:15:be:99:cd:99:5a:f3:60:78:
7f:06:1c:ec:6f:56:6d:42:a7:b3:71:bb:4c:1f:61:
8b:21:93:81:23:98:13:bf:53:6e:8f:0e:9c:d6:db:
b9:78:07:3d:d3:b2:72:88:18:da:9c:cf:07:e7:8f:
65:1e:a5:b0:82:83:2c:f7:90:c9:11:65:dd:02:db:
43:ec:73:59:8b:84:96:2e:c8:3e:df:76:c0:28:8d:
6e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F5:9D:C0:13:B7:D6:6C:E3:8D:0A:D5:F3:99:4B:91:92:1B:1D:72
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34333a3a2f34382d3438203d3e20323138363434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:43::/48
Signature Algorithm: sha256WithRSAEncryption
89:bc:fe:e8:26:22:ac:32:06:d7:d7:f3:7a:b7:d7:09:13:a9:
78:7a:e9:e9:d1:b2:9d:ce:07:a0:ca:ac:48:0e:24:ff:c9:54:
ad:54:62:83:a7:c6:a0:b9:4c:ae:92:4a:43:43:8c:cd:6d:ea:
0e:44:c1:21:32:8f:dc:3d:93:ac:f1:2e:74:10:26:c1:66:4b:
21:2f:69:08:01:6c:64:f9:00:d5:52:a4:ed:6e:c1:5d:57:0e:
49:33:58:87:40:e2:20:ab:42:c2:09:e1:5c:a9:b5:67:51:52:
5b:b8:a7:4d:bc:bf:0d:0d:9c:74:3c:eb:1d:3f:91:c4:65:57:
71:de:2b:ec:24:c4:92:8f:f3:fe:44:ef:6d:b1:fa:9e:c5:8e:
8f:19:2d:31:bb:1b:ce:5d:bd:06:79:9b:76:5a:41:b5:27:d3:
d4:8c:49:a2:7b:e6:4f:72:a3:e7:e2:b1:96:0b:0c:b0:ee:53:
b3:a8:ce:87:54:4a:81:07:bb:d2:ec:c2:1d:22:6d:51:f6:9c:
39:b3:c9:cf:ad:eb:0e:90:43:ea:c2:65:e9:3f:0d:93:fa:30:
9d:30:bf:f5:bf:8c:fc:20:6e:e9:b4:c4:ae:1a:0f:f5:8d:db:
54:97:cf:58:e8:31:b9:d6:5d:94:ef:a2:46:a0:4b:07:6a:1b:
8e:0b:35:f7
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUF1PXVoxqm2vyt+FluiZih5KQ3d4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTk2ZDg1OTk2ZTkzNTRkMTAwNWU0NGM3ODFkMzhhZGNm
MTA4Mjg3MzAeFw0yNjA5MTkxMDE3MDNaFw0yNzA5MTgxMDIyMDNaMDMxMTAvBgNV
BAMTKDkwRjU5REMwMTNCN0Q2NkNFMzhEMEFENUYzOTk0QjkxOTIxQjFENzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQMAP1x2IL49ydrh3G9Nv0j0Gi
s8EtLBRgN6TH6iLzq0p1l52TkprIMEndGGw4EorzCPvc5rBYhIm2hHLO4EuFhQAm
vLAw+FNvPiosb6y7V4WWkZ2a0jEU0uc+lYdA95O8MDvqB6ZrrduBxf0cLdU0wjtV
OP1WkEvTiKJBIY3Dp+uRIKsitaoNiyPHooilfGH7xoJLdrlp9UVXczRRuyxCzlQp
U3XNGiU62RW+mc2ZWvNgeH8GHOxvVm1Cp7Nxu0wfYYshk4EjmBO/U26PDpzW27l4
Bz3TsnKIGNqczwfnj2UepbCCgyz3kMkRZd0C20Psc1mLhJYuyD7fdsAojW61AgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUkPWdwBO31mzjjQrV85lLkZIbHXIwHwYDVR0j
BBgwFoAU6W2FmW6TVNEAXkTHgdOK3PEIKHMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm
YmY1LzAvRTk2RDg1OTk2RTkzNTREMTAwNUU0NEM3ODFEMzhBRENGMTA4Mjg3My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZXMkZtVzZUVk5FQVhrVEhnZE9LM1BF
SUtITS5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExMTViYzYt
MTBmNi00YWYzLWJhMDktOGI2ODdhNTZmYmY1LzAvMzI2MTMxMzEzYTMyMzk2MzMw
M2EzNDMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMTM4MzYzNDM0LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKhEpwABDMA0GCSqGSIb3DQEBCwUAA4IBAQCJvP7oJiKsMgbX1/N6t9cJ
E6l4eunp0bKdzgegyqxIDiT/yVStVGKDp8aguUyukkpDQ4zNbeoORMEhMo/cPZOs
8S50ECbBZkshL2kIAWxk+QDVUqTtbsFdVw5JM1iHQOIgq0LCCeFcqbVnUVJbuKdN
vL8NDZx0POsdP5HEZVdx3ivsJMSSj/P+RO9tsfqexY6PGS0xuxvOXb0GeZt2WkG1
J9PUjEmie+ZPcqPn4rGWCwyw7lOzqM6HVEqBB7vS7MIdIm1R9pw5s8nPresOkEPq
wmXpPw2T+jCdML/1v4z8IG7ptMSuGg/1jdtUl89Y6DG51l2U76JGoEsHahuOCzX3
-----END CERTIFICATE-----
Generated at Mon Sep 28 05:54:19 2026 by rpki-client