Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963373a3a2f33322d3438203d3e203530333931.roa
File: 326131313a323963373a3a2f33322d3438203d3e203530333931.roa (raw, json)
Hash identifier: 3u09Ku5vRSwZT7xrJfEaXE/H3KBLU3/QJ4WmB8vMBzI=
Subject key identifier: C0:DC:92:79:65:4F:57:19:0F:6C:DD:20:BE:15:C2:48:8C:9C:11:92
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 7E8FEB3DEFE07D8F87266014D8B87B6BC4A53874
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963373a3a2f33322d3438203d3e203530333931.roa
Signing time: Mon 14 Apr 2025 21:01:28 +0000
ROA not before: Mon 14 Apr 2025 20:56:28 +0000
ROA not after: Mon 13 Apr 2026 21:01:28 +0000
asID: 50391
IP address blocks: 2a11:29c7::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:8f:eb:3d:ef:e0:7d:8f:87:26:60:14:d8:b8:7b:6b:c4:a5:38:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Apr 14 20:56:28 2025 GMT
Not After : Apr 13 21:01:28 2026 GMT
Subject: CN=C0DC9279654F57190F6CDD20BE15C2488C9C1192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7e:99:9e:67:24:fa:9c:c5:7e:b4:22:88:19:
ad:a9:8b:56:7f:a1:eb:26:dd:98:8a:ca:d1:ef:ab:
b3:7e:7d:3a:9b:46:b8:e7:dd:af:c5:8c:85:96:fe:
e2:6d:a6:13:b8:15:8c:b7:d6:46:f8:1c:ce:be:e0:
6c:c4:72:4a:5d:01:f6:59:b1:6e:10:6d:2f:62:2a:
57:c0:9e:e2:28:db:25:9e:14:29:bc:13:ea:af:e8:
72:dd:6e:08:83:e3:42:d5:81:4f:46:50:20:04:07:
9a:4d:75:71:af:bf:b8:75:3e:2f:77:b8:19:f4:b6:
ca:55:fc:b5:00:8c:0d:4d:e4:31:8e:83:55:23:48:
05:32:43:d3:b0:ab:bd:04:7f:b6:a4:76:fd:ce:6f:
74:bb:54:f1:7f:d8:86:7c:6b:ba:81:07:ea:14:4e:
dd:36:94:97:54:78:97:0c:91:f1:d4:58:4f:76:9f:
fe:d9:3e:26:26:5a:f9:be:e5:74:a1:c5:c9:0e:1a:
64:38:d9:d6:14:11:55:d4:ec:cc:ed:c8:dc:8a:0a:
8d:7a:ca:6d:02:86:ad:e2:94:54:87:67:50:33:8d:
ee:0e:aa:b8:e4:52:85:f7:66:b0:17:98:7a:76:9b:
a6:94:38:9e:b1:ae:41:13:f9:00:4d:03:e4:72:3e:
cb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DC:92:79:65:4F:57:19:0F:6C:DD:20:BE:15:C2:48:8C:9C:11:92
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963373a3a2f33322d3438203d3e203530333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
3d:59:c3:20:84:81:f7:ec:e3:4c:72:fd:4f:05:72:16:35:b0:
97:81:81:ae:c9:b4:62:60:af:2d:e0:e2:73:1a:7e:67:65:b5:
ee:5d:35:94:7d:24:5e:ba:02:4a:26:8d:49:3a:24:d1:6f:03:
36:84:f3:6a:d7:c0:91:9a:9b:af:65:22:14:63:26:aa:8d:d1:
7d:a9:e1:0a:d5:c3:5a:23:9d:b6:c6:2f:90:d1:95:e3:20:da:
5d:80:57:af:d6:06:6b:0f:52:01:02:c8:f0:cc:42:19:8c:21:
2a:ec:fa:dd:7a:3d:60:ac:90:0b:19:35:2b:19:71:2d:78:cb:
c9:1a:a9:c2:65:d4:9a:f2:44:ab:f6:c4:9c:c7:2a:a5:c3:39:
63:5f:9c:b4:b7:f1:e7:9f:c0:92:a3:6b:15:1d:59:1f:47:ed:
ef:1e:ff:37:59:2e:8f:b0:e9:7d:b7:8c:11:8f:b1:e5:93:ef:
18:fb:53:01:af:9b:03:d0:5a:cf:d6:0e:e7:90:ee:77:70:45:
3c:6e:56:5c:39:18:f8:8f:c3:90:25:9b:54:4e:72:92:54:92:
08:59:71:72:77:39:4c:de:26:8c:2c:23:c7:4c:93:51:f7:8c:
21:b3:86:79:e0:44:80:dc:36:2e:e2:12:f7:79:45:53:9a:65:
23:e3:a6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:30:26 2025 by rpki-client