Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a636166653a3a2f34382d3438203d3e20323035303336.roa
File: 326130663a356663303a636166653a3a2f34382d3438203d3e20323035303336.roa (raw, json)
Hash identifier: rDG7iBwEjamNngmGb6UbrgWqxFcsssZTJ3Q5Zd5niv8=
Subject key identifier: 00:BA:0D:28:30:D7:32:85:7D:47:E8:08:60:BD:53:6F:39:A7:42:42
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 3121CBA1DA1A8E86E4D904BE92AC2219EC1F196B
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a636166653a3a2f34382d3438203d3e20323035303336.roa
Signing time: Wed 07 Oct 2026 11:49:35 +0000
ROA not before: Wed 07 Oct 2026 11:44:35 +0000
ROA not after: Wed 06 Oct 2027 11:49:35 +0000
asID: 205036
IP address blocks: 2a0f:5fc0:cafe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 01:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:21:cb:a1:da:1a:8e:86:e4:d9:04:be:92:ac:22:19:ec:1f:19:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Oct 7 11:44:35 2026 GMT
Not After : Oct 6 11:49:35 2027 GMT
Subject: CN=00BA0D2830D732857D47E80860BD536F39A74242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ba:cb:89:2a:c5:d4:61:1d:38:e9:56:79:87:
a1:83:10:84:15:f8:17:40:2f:fc:33:77:6e:9b:21:
3e:c7:88:b3:74:63:e4:39:76:8a:82:f7:04:0a:8a:
aa:94:08:49:34:d7:69:3c:fc:8c:4c:2b:72:74:aa:
fd:72:f4:ba:00:3a:a6:ec:36:54:ed:b1:aa:48:19:
ca:f0:bb:79:00:0e:b0:dc:d5:54:fe:ed:12:b4:b0:
70:a3:8b:03:19:8c:ae:96:de:a2:c8:be:85:2c:e3:
59:6c:de:1d:8d:5f:78:76:e7:c0:ae:11:18:81:6f:
a2:1e:6d:fc:9a:00:e3:a8:95:c9:70:e8:2e:08:0d:
b3:8a:c7:c8:05:1d:cb:e3:12:6c:01:2c:95:de:20:
d7:99:a8:8b:2e:a6:e1:a8:b5:40:ee:c2:90:35:8c:
9f:5a:54:6d:3c:0f:2a:56:89:22:66:7b:22:b8:6e:
70:70:ab:fa:5c:68:35:53:26:07:65:af:f9:ad:98:
92:cb:fa:6d:b6:de:e2:39:f3:18:b9:08:5b:89:b5:
81:c4:d2:31:6f:42:ca:4a:64:6d:6a:54:b6:de:52:
e9:12:1a:2e:87:ec:53:8b:91:32:e6:fb:f5:e4:96:
0d:6a:45:b1:e5:c1:44:8a:4b:92:19:f1:e2:2c:d8:
19:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BA:0D:28:30:D7:32:85:7D:47:E8:08:60:BD:53:6F:39:A7:42:42
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a636166653a3a2f34382d3438203d3e20323035303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5fc0:cafe::/48
Signature Algorithm: sha256WithRSAEncryption
bc:18:17:ed:bb:a5:1c:85:82:98:08:e9:75:99:5b:00:1c:70:
a0:0a:5a:76:6a:ad:75:9f:8f:ba:cb:34:8d:0d:c0:94:ee:f7:
0b:d2:ef:fd:1b:22:ae:00:39:c9:b3:4f:e8:1d:9a:47:90:3e:
3c:88:2e:5e:41:96:36:e1:31:58:0e:d3:8f:d1:54:de:c0:1e:
87:37:e6:3d:e2:57:ad:94:a6:05:08:2b:70:d8:3f:37:13:1a:
c2:9d:a2:9e:ab:1d:d6:20:41:50:4b:0d:37:e1:d4:ec:66:1e:
91:d7:c0:df:29:59:17:59:7c:11:8a:9b:5c:a1:41:d5:77:fa:
ab:7b:63:2a:51:9d:e1:2e:6e:ec:e0:64:e1:d5:0c:9b:93:ac:
0c:48:c9:c2:c7:bb:37:1a:46:7c:1d:53:33:b3:25:d9:47:74:
56:61:f7:19:ad:47:e2:f5:81:92:eb:3d:df:66:14:68:19:d3:
45:4f:18:9f:f0:b7:87:44:cc:1e:06:94:d5:00:8a:54:08:3f:
2b:63:15:83:1c:d0:24:f6:c1:34:8a:de:0d:f2:16:7b:ce:b7:
1b:dd:4b:39:33:0f:bd:a3:bf:29:51:ec:7a:7d:b2:ba:ad:b6:
97:6a:d8:c3:a0:4b:f3:e5:19:6f:39:bb:00:f2:93:f5:b8:a8:
aa:a8:40:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 11:26:09 2026 by rpki-client