Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a646561663a3a2f34382d3438203d3e20323035303336.roa
File: 326130663a356663303a646561663a3a2f34382d3438203d3e20323035303336.roa (raw, json)
Hash identifier: tKa0vwG3lPHv89HRJkObWohe1GDQ32pXns0rmjo6QEY=
Subject key identifier: 5B:2C:FA:AB:6D:7A:AD:2D:A9:29:10:A5:42:06:AE:35:50:C9:B3:2C
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 77E6CA5F02997BC1642D73A854C83069F2D0E27F
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a646561663a3a2f34382d3438203d3e20323035303336.roa
Signing time: Wed 07 Oct 2026 11:49:35 +0000
ROA not before: Wed 07 Oct 2026 11:44:35 +0000
ROA not after: Wed 06 Oct 2027 11:49:35 +0000
asID: 205036
IP address blocks: 2a0f:5fc0:deaf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 11:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:e6:ca:5f:02:99:7b:c1:64:2d:73:a8:54:c8:30:69:f2:d0:e2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Oct 7 11:44:35 2026 GMT
Not After : Oct 6 11:49:35 2027 GMT
Subject: CN=5B2CFAAB6D7AAD2DA92910A54206AE3550C9B32C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:13:82:9c:e0:09:8e:37:3d:b3:1b:47:64:05:
7a:e3:f7:2f:61:66:28:00:d2:fd:02:20:7e:83:bf:
ae:f3:f5:e5:a6:42:20:e9:7e:b4:2f:42:3c:36:01:
32:b2:c8:89:c2:ff:c2:32:c1:c0:93:e0:8e:6a:06:
94:20:13:db:cc:06:fb:b3:39:6d:68:e7:15:14:23:
b6:ee:43:d2:a4:c2:06:e1:b8:8f:5e:88:90:8c:59:
d6:06:ac:24:41:95:47:45:af:f6:4a:b3:ca:84:5c:
7f:db:e0:df:45:e2:51:84:be:5d:e9:e2:59:cc:dd:
0e:7a:2a:7e:41:d7:96:12:47:62:09:19:61:ef:bc:
2e:9b:c8:46:74:95:6b:1c:0d:e0:30:e3:ee:12:b4:
aa:2f:5b:c3:6f:66:50:f7:97:db:10:f3:0f:6f:c5:
f2:c6:d9:1d:63:73:6d:92:c2:d6:8a:4e:9e:bc:6f:
25:fc:a5:3c:30:10:eb:46:64:45:1e:84:81:8e:e6:
6f:7d:22:8c:b6:c8:b3:9f:5a:2f:3b:ea:2b:01:5a:
f3:ab:f0:cd:df:a2:c6:a1:d4:d4:13:79:d5:fb:f7:
58:25:a0:3e:2e:e1:00:f8:2d:cc:37:f4:e9:76:cf:
dd:cf:04:59:8d:e0:28:d1:b2:85:67:ac:6c:8d:2d:
d2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2C:FA:AB:6D:7A:AD:2D:A9:29:10:A5:42:06:AE:35:50:C9:B3:2C
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a646561663a3a2f34382d3438203d3e20323035303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5fc0:deaf::/48
Signature Algorithm: sha256WithRSAEncryption
1d:bf:22:09:1b:14:4c:2e:4b:88:b8:38:55:45:4a:3c:8e:88:
e2:88:2a:3f:7b:25:9e:55:8a:e8:68:9f:8f:e0:80:01:58:55:
2a:6b:a9:19:91:ee:cc:e5:c9:fd:f6:ed:4a:c3:4a:46:6a:12:
6d:b1:d0:3a:92:22:6f:2c:3a:30:b7:a7:11:70:ff:bb:65:d7:
fd:ba:f0:7f:81:39:8c:e4:d1:7d:18:1e:c6:f4:fa:e6:84:57:
c3:21:98:52:c0:ba:6c:e9:9a:56:41:cd:8c:c1:d6:ae:d7:57:
0a:b9:52:52:0f:e9:84:bb:1e:dc:d8:de:61:73:e1:dd:f4:b1:
6b:26:1f:da:b3:88:97:36:6c:4b:10:75:4c:f5:e7:31:cd:40:
5f:59:e6:92:e7:e2:03:70:78:bb:04:f9:a7:a3:09:1b:77:00:
78:d0:b3:e8:b2:66:11:05:6d:f0:58:b2:bf:17:41:74:d7:d7:
a2:c6:5f:db:a0:2b:d5:d7:a9:3c:92:6b:66:1a:95:c0:ac:b1:
73:ff:60:83:2f:47:e6:8c:f1:d6:9f:d5:8a:47:8e:51:23:3b:
43:eb:c6:7a:2e:9a:69:56:6a:8e:79:70:c8:84:63:b5:0e:75:
ee:c2:51:4b:54:e4:5d:52:fd:87:6c:0a:42:34:ae:f6:1a:61:
25:94:02:83
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUd+bKXwKZe8FkLXOoVMgwafLQ4n8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTIwNWViZjA2NWZjNDkyOWYxODAyNjYyYWU2MmQ3Zjk3
NjI2MDBlNjAeFw0yNjEwMDcxMTQ0MzVaFw0yNzEwMDYxMTQ5MzVaMDMxMTAvBgNV
BAMTKDVCMkNGQUFCNkQ3QUFEMkRBOTI5MTBBNTQyMDZBRTM1NTBDOUIzMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUE4Kc4AmONz2zG0dkBXrj9y9h
ZigA0v0CIH6Dv67z9eWmQiDpfrQvQjw2ATKyyInC/8IywcCT4I5qBpQgE9vMBvuz
OW1o5xUUI7buQ9KkwgbhuI9eiJCMWdYGrCRBlUdFr/ZKs8qEXH/b4N9F4lGEvl3p
4lnM3Q56Kn5B15YSR2IJGWHvvC6byEZ0lWscDeAw4+4StKovW8NvZlD3l9sQ8w9v
xfLG2R1jc22SwtaKTp68byX8pTwwEOtGZEUehIGO5m99Ioy2yLOfWi876isBWvOr
8M3fosah1NQTedX791gloD4u4QD4Lcw39Ol2z93PBFmN4CjRsoVnrGyNLdIzAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUWyz6q216rS2pKRClQgauNVDJsywwHwYDVR0j
BBgwFoAU4gXr8GX8SSnxgCZirmLX+XYmAOYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEtODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1
N2ZlLzAvRTIwNUVCRjA2NUZDNDkyOUYxODAyNjYyQUU2MkQ3Rjk3NjI2MDBFNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRnWHI4R1g4U1NueGdDWmlybUxYLVhZ
bUFPWS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEt
ODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1N2ZlLzAvMzI2MTMwNjYzYTM1NjY2MzMw
M2E2NDY1NjE2NjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzNTMwMzMzNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoPX8DerzANBgkqhkiG9w0BAQsFAAOCAQEAHb8iCRsUTC5LiLg4
VUVKPI6I4ogqP3slnlWK6Gifj+CAAVhVKmupGZHuzOXJ/fbtSsNKRmoSbbHQOpIi
byw6MLenEXD/u2XX/brwf4E5jOTRfRgexvT65oRXwyGYUsC6bOmaVkHNjMHWrtdX
CrlSUg/phLse3NjeYXPh3fSxayYf2rOIlzZsSxB1TPXnMc1AX1nmkufiA3B4uwT5
p6MJG3cAeNCz6LJmEQVt8FiyvxdBdNfXosZf26Ar1depPJJrZhqVwKyxc/9ggy9H
5ozx1p/VikeOUSM7Q+vGei6aaVZqjnlwyIRjtQ517sJRS1TkXVL9h2wKQjSu9hph
JZQCgw==
-----END CERTIFICATE-----
Generated at Wed Nov 4 05:16:41 2026 by rpki-client