Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a6265643a3a2f34382d3438203d3e20323035303336.roa
File: 326130663a356663303a6265643a3a2f34382d3438203d3e20323035303336.roa (raw, json)
Hash identifier: YFG6ctXco/zlIckvwV44sl9xZi5Idpya0FOC566CvXA=
Subject key identifier: 7A:83:6B:F6:72:24:DC:11:50:CF:13:CE:FF:06:6B:07:B1:68:F2:C8
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 2835D0140894BE8D95138E80A1AC63708CEFEB34
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a6265643a3a2f34382d3438203d3e20323035303336.roa
Signing time: Wed 07 Oct 2026 11:49:35 +0000
ROA not before: Wed 07 Oct 2026 11:44:35 +0000
ROA not after: Wed 06 Oct 2027 11:49:35 +0000
asID: 205036
IP address blocks: 2a0f:5fc0:bed::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 11:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:35:d0:14:08:94:be:8d:95:13:8e:80:a1:ac:63:70:8c:ef:eb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Oct 7 11:44:35 2026 GMT
Not After : Oct 6 11:49:35 2027 GMT
Subject: CN=7A836BF67224DC1150CF13CEFF066B07B168F2C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2d:f4:51:f9:3f:43:a4:c7:32:89:13:7b:3f:
69:99:3a:33:53:41:3b:68:9a:ae:4c:c5:bf:59:e9:
de:ce:d0:16:e4:2d:75:37:77:14:79:11:c7:0c:73:
15:e7:e9:54:b3:03:50:55:a7:28:9b:ba:05:5e:1c:
af:16:32:2c:ea:21:02:5e:0f:46:2b:67:1e:dd:ff:
f4:37:79:a1:78:94:ff:be:ca:7a:c4:4c:3e:35:1a:
7b:59:0e:1b:c1:ee:a2:22:62:f7:54:78:4a:9d:c0:
32:fd:37:09:c0:48:3c:8c:a7:07:22:47:d0:66:73:
08:cf:40:e3:4c:89:75:db:9f:7f:9c:0b:cb:07:f9:
49:84:de:94:e7:ad:c8:d2:cb:f5:4f:19:ce:6c:ab:
d5:cf:cf:b0:43:7f:c3:21:f6:1f:7b:83:12:52:3c:
24:8a:1b:35:ab:c8:20:d0:4d:c5:f9:d9:84:7c:30:
62:7b:0f:09:33:bb:14:3e:16:74:84:5b:be:5b:36:
a7:ff:a7:52:e4:3b:a5:1d:fc:63:98:14:30:aa:fc:
a5:78:fb:69:13:4f:59:b4:77:8e:4f:61:2e:bb:52:
7c:17:cf:61:3d:14:a8:15:d1:6c:50:78:97:f6:e5:
4e:40:0c:50:50:36:81:17:d7:3c:cf:d6:c2:f8:ed:
52:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:83:6B:F6:72:24:DC:11:50:CF:13:CE:FF:06:6B:07:B1:68:F2:C8
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a6265643a3a2f34382d3438203d3e20323035303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5fc0:bed::/48
Signature Algorithm: sha256WithRSAEncryption
6b:f7:5f:a4:c9:9f:1c:7c:72:5c:ed:61:0c:3e:ce:97:9b:10:
10:1d:4f:6e:d8:b8:41:b4:4a:07:13:3d:83:fd:89:6c:27:98:
5b:7b:a6:8e:b3:5c:b0:d8:05:45:4b:21:8b:57:c9:0a:da:5d:
1d:dc:40:de:bc:08:13:dd:da:95:79:69:97:93:d6:e0:93:37:
52:4f:d7:c6:31:f2:d0:fc:b5:9a:eb:27:7f:78:64:9a:ad:4a:
76:ea:e0:b8:8f:d8:fa:92:e4:1d:cc:a0:88:41:76:2b:35:36:
21:c5:36:c9:26:ba:cf:5e:c3:e1:8c:b9:0a:ea:40:fe:48:b2:
de:8c:07:27:52:e3:57:1f:cc:96:1f:bb:ba:34:93:c0:f8:7d:
fb:42:1e:34:e7:fd:ce:88:20:19:14:bd:3a:e1:a2:b5:49:aa:
5f:3d:5f:6d:cc:9c:ae:25:34:2d:9b:84:8c:88:b1:c3:d0:4e:
dd:32:ab:25:7a:55:93:1a:81:73:a0:62:a7:02:ad:ae:fa:29:
80:50:0d:e8:b1:14:ab:f6:05:9b:a1:e1:44:c2:94:9f:3a:68:
73:26:b6:23:c3:84:d6:43:00:f2:8b:e3:cd:6d:a9:8d:52:36:
eb:03:0e:10:96:d7:20:3b:6d:42:c2:0f:77:98:df:b9:7d:80:
50:d1:1c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 03:37:41 2026 by rpki-client