Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a6461643a3a2f34382d3438203d3e20323035303336.roa
File: 326130663a356663303a6461643a3a2f34382d3438203d3e20323035303336.roa (raw, json)
Hash identifier: KBRrK7qwdJ0ckhlw1Sdxc5DgQIMKCeaye9JMuQ9NqHk=
Subject key identifier: C4:7B:98:F9:B1:F8:29:44:61:38:C3:D7:70:AA:C8:3C:FF:89:8B:1C
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 68F2725C37F90083B38828FDC090B17D593AED16
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a6461643a3a2f34382d3438203d3e20323035303336.roa
Signing time: Wed 07 Oct 2026 11:49:35 +0000
ROA not before: Wed 07 Oct 2026 11:44:35 +0000
ROA not after: Wed 06 Oct 2027 11:49:35 +0000
asID: 205036
IP address blocks: 2a0f:5fc0:dad::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 05:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:f2:72:5c:37:f9:00:83:b3:88:28:fd:c0:90:b1:7d:59:3a:ed:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Oct 7 11:44:35 2026 GMT
Not After : Oct 6 11:49:35 2027 GMT
Subject: CN=C47B98F9B1F829446138C3D770AAC83CFF898B1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1c:fc:df:19:02:28:c0:5b:86:ba:20:3a:15:
e1:04:9d:d0:a3:2f:2b:34:6b:d8:4d:ed:31:29:35:
cf:e0:89:1e:31:6a:0c:c8:58:79:5d:46:00:07:40:
12:b0:d6:76:59:68:d6:c6:7b:8c:58:46:49:c9:f0:
d2:8b:1e:6b:90:de:ba:f1:9f:5f:90:07:54:25:1e:
7d:94:79:71:ca:7c:ff:cf:c9:da:e1:43:07:d8:0f:
37:f8:82:f0:11:f4:94:2d:1e:6c:0c:cf:50:34:cb:
63:27:25:cb:ba:46:10:22:bc:77:18:62:9c:b8:52:
4a:9a:2c:39:22:18:08:b4:72:8a:52:a5:e3:8c:63:
17:6f:a9:77:00:19:75:cf:54:e3:27:3d:83:b6:19:
de:a4:80:a2:80:fb:61:df:65:77:8e:da:2a:25:d8:
f1:a3:55:65:c0:38:0d:69:77:a4:3e:82:1a:4c:84:
ab:d9:1a:77:a4:20:83:1e:dc:df:cc:80:01:64:f1:
8a:62:37:d5:24:2d:b7:d9:fd:95:b6:ad:ab:99:6d:
38:43:c1:4c:5f:d5:54:03:2d:4e:b3:8b:b7:c3:8f:
19:6e:6c:a2:e4:b2:76:e7:cd:ed:5b:b0:84:e8:f5:
4f:b5:0b:48:8b:e3:72:ce:77:8f:7e:1b:aa:66:0a:
d2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7B:98:F9:B1:F8:29:44:61:38:C3:D7:70:AA:C8:3C:FF:89:8B:1C
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a6461643a3a2f34382d3438203d3e20323035303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5fc0:dad::/48
Signature Algorithm: sha256WithRSAEncryption
90:3e:bf:7f:1b:69:a0:c9:03:bc:88:a4:b1:b3:63:60:ca:1e:
00:79:7a:5d:c0:83:c0:de:af:64:c4:0c:03:28:dd:2a:2b:ff:
71:c5:bc:ae:b3:b6:05:8f:9c:ef:ca:9f:37:6f:45:98:ef:33:
17:64:48:dd:bb:5d:82:35:32:a6:bb:c4:4d:40:f9:5a:2a:63:
d0:50:17:d7:b7:cd:69:de:24:17:95:49:fe:c8:e4:e2:ef:b3:
4f:44:c7:33:66:fc:fa:52:b2:f2:75:c1:cc:1b:57:7d:45:1b:
5b:e6:cd:e1:e0:48:f2:8e:91:03:46:d1:45:38:c2:44:a9:cd:
e6:66:b9:75:13:5a:fb:28:08:c6:af:82:3c:fb:a3:e0:d9:c2:
d9:54:a8:59:18:20:1d:8f:62:cd:28:2d:07:ae:17:f9:72:7d:
d4:19:54:fc:e0:f3:d5:a2:12:3b:d7:e9:a4:30:c4:34:9e:6c:
52:6b:bc:35:a5:0d:09:8e:23:11:96:76:3c:01:47:2b:32:79:
8c:00:75:64:56:ca:af:ef:81:16:3b:32:9d:96:4f:a7:d9:68:
77:fd:96:45:04:02:bb:1b:e2:51:09:8f:b0:d4:f9:26:dc:6a:
51:62:c7:5c:3e:17:e2:f8:53:58:25:12:81:e9:e9:87:28:25:
5d:d3:78:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:53:24 2026 by rpki-client