Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a346630303a3a2f34302d3438203d3e20323131373437.roa
File: 326131313a323963303a346630303a3a2f34302d3438203d3e20323131373437.roa (raw, json)
Hash identifier: fDjMjkpFAoMSDFkVE0PO7E/t2dAV7XsWg9tZtOU2lcU=
Subject key identifier: 3F:FD:7C:F9:C9:88:A7:5C:EB:DA:0D:8A:38:AE:EB:EC:A6:FF:D7:6D
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 25087D4C76591A8517DD4929B4DDBEF48616CE79
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a346630303a3a2f34302d3438203d3e20323131373437.roa
Signing time: Thu 12 Jun 2025 14:52:41 +0000
ROA not before: Thu 12 Jun 2025 14:47:41 +0000
ROA not after: Thu 11 Jun 2026 14:52:41 +0000
asID: 211747
IP address blocks: 2a11:29c0:4f00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:52:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:08:7d:4c:76:59:1a:85:17:dd:49:29:b4:dd:be:f4:86:16:ce:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Jun 12 14:47:41 2025 GMT
Not After : Jun 11 14:52:41 2026 GMT
Subject: CN=3FFD7CF9C988A75CEBDA0D8A38AEEBECA6FFD76D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:12:60:67:d8:e1:8c:bc:3b:62:d2:5f:2b:
f5:9d:cf:c2:c6:06:19:4e:a9:cb:6c:cf:65:c7:01:
bc:f8:c8:4d:47:ad:53:05:8a:2a:dc:58:d8:fd:18:
64:ea:67:93:16:5e:e5:0a:0c:42:62:ef:37:0c:32:
cf:4d:ab:ba:96:cc:42:9a:f6:7d:04:a5:d4:aa:5a:
eb:d3:83:74:24:9e:7e:f1:46:05:1b:d9:61:ab:f3:
a6:40:9b:ab:77:b3:d9:96:3b:a4:de:5d:b3:25:cc:
1c:7f:f1:75:35:f2:5e:8d:b5:57:62:78:68:9c:34:
2c:1e:30:ce:01:96:c3:8d:51:10:86:15:1f:ec:7c:
68:61:76:02:6c:37:d3:0b:d5:7a:ec:31:d5:ff:cc:
82:44:b5:21:d2:17:35:e8:f5:f2:8b:c2:e3:ae:4b:
00:c7:4e:c4:c2:61:90:29:0b:9f:b2:c2:ff:3f:2c:
0c:f5:0d:90:48:0d:8a:8f:84:6c:bb:48:b1:34:58:
a5:55:b4:de:fe:f4:24:98:5b:96:4f:a8:cc:7b:57:
a5:bc:f3:f1:46:00:fc:a7:56:5a:76:5c:b2:46:f6:
f3:93:07:53:53:35:c4:7a:31:c6:ab:08:7f:fc:b5:
1b:c1:99:40:87:63:b5:82:ac:02:63:a6:d0:cf:65:
f5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FD:7C:F9:C9:88:A7:5C:EB:DA:0D:8A:38:AE:EB:EC:A6:FF:D7:6D
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a346630303a3a2f34302d3438203d3e20323131373437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:4f00::/40
Signature Algorithm: sha256WithRSAEncryption
3e:49:09:83:86:fc:5f:22:43:ce:03:42:a9:cf:09:e8:dd:22:
3c:d1:36:c9:c3:4b:3b:2c:dc:c8:56:d4:4a:2a:7b:cf:9a:2f:
4c:45:f9:ee:52:62:1e:a7:b8:4c:f6:c2:6e:27:78:f8:c4:4e:
52:dd:fd:9f:10:8b:11:75:21:52:1a:7c:5d:97:43:00:e8:0a:
fb:52:de:ee:9a:40:c6:18:6b:3e:20:b6:4c:b9:6c:94:b2:0e:
9e:af:c0:15:3b:f2:f7:a0:af:82:04:ee:58:66:96:15:45:e4:
b8:bd:75:25:39:ef:4a:0b:83:e9:fe:62:6f:2b:d4:41:94:49:
79:ee:3f:b7:fd:ca:a1:dc:1a:7b:5a:8f:f6:b3:ac:be:d4:50:
24:e5:8d:d7:18:05:c2:22:d0:ca:9f:6e:9b:64:79:e1:f6:ac:
05:43:ef:26:39:ad:ce:f1:73:86:51:52:93:e5:5f:e9:a3:94:
5c:7f:15:59:bf:71:94:d5:73:11:82:78:54:51:ec:4d:21:b3:
38:4a:40:7a:fa:7f:0b:61:4b:6d:fe:18:3f:97:cf:af:d4:45:
71:cb:35:a3:fc:27:20:03:ee:40:c4:3c:92:e5:64:76:1f:53:
b4:e0:c2:b9:8e:80:81:23:a7:97:d1:8e:64:4a:d0:a4:3e:6e:
9c:34:ce:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:26:34 2025 by rpki-client