Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a6465623a3a2f34382d3438203d3e20323035303336.roa
File: 326130663a356663303a6465623a3a2f34382d3438203d3e20323035303336.roa (raw, json)
Hash identifier: HBIQ7XNX92WAzQJhCdL8BqTB0HFuoxrBe2hDP/YX2cM=
Subject key identifier: 0C:39:7C:E7:F1:7A:93:2E:54:BF:C6:77:3B:5B:35:14:BD:63:98:EA
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 407459CC82FB16B6109F930FC49EC5BDCCD349B0
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a6465623a3a2f34382d3438203d3e20323035303336.roa
Signing time: Wed 07 Oct 2026 11:49:35 +0000
ROA not before: Wed 07 Oct 2026 11:44:35 +0000
ROA not after: Wed 06 Oct 2027 11:49:35 +0000
asID: 205036
IP address blocks: 2a0f:5fc0:deb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 05:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:74:59:cc:82:fb:16:b6:10:9f:93:0f:c4:9e:c5:bd:cc:d3:49:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Oct 7 11:44:35 2026 GMT
Not After : Oct 6 11:49:35 2027 GMT
Subject: CN=0C397CE7F17A932E54BFC6773B5B3514BD6398EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:27:fa:e1:e6:59:5c:4f:53:8c:c1:49:8e:
84:75:02:4d:fc:ee:34:57:82:c1:89:80:2c:5d:2f:
af:00:07:8f:9a:e8:00:75:ff:c1:76:ef:d9:f5:6a:
69:46:89:9d:4d:e5:32:49:2c:7a:66:38:1c:64:85:
1c:c7:03:3f:56:b1:f4:3c:ef:86:ab:85:48:22:8b:
d0:99:e8:34:74:7f:e1:03:02:09:af:ad:35:d1:c3:
3c:ab:2f:b2:7a:dc:d8:5d:fa:f7:08:eb:f1:b0:f6:
c3:13:6c:55:ac:c1:56:18:b9:62:78:ba:1d:e6:12:
62:df:9b:58:5c:31:22:9f:fe:84:04:d8:c9:e1:65:
f8:04:f5:ca:f0:83:17:a1:05:5c:75:ca:ca:f9:fa:
24:91:ea:12:cf:3f:93:b6:a9:77:8b:c1:b6:86:c5:
36:88:b0:79:61:08:22:0e:8b:aa:2b:e1:8a:b0:28:
d9:37:40:27:27:63:6f:98:18:21:c2:9e:1e:cf:97:
5f:a7:76:3f:dd:15:c0:bc:fe:90:a8:78:85:11:02:
47:03:30:02:02:4d:c4:ca:86:fa:fe:82:66:ba:bc:
80:4a:36:14:b4:f4:6e:5d:48:1d:bd:5b:aa:55:6c:
b8:eb:07:a8:f4:9b:f1:26:4d:21:9b:ec:8d:f7:d0:
57:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:39:7C:E7:F1:7A:93:2E:54:BF:C6:77:3B:5B:35:14:BD:63:98:EA
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a6465623a3a2f34382d3438203d3e20323035303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5fc0:deb::/48
Signature Algorithm: sha256WithRSAEncryption
75:90:58:dd:ce:37:d8:e8:a2:21:32:23:6f:70:c8:00:b3:0b:
88:f8:3b:d3:d4:5e:94:71:07:e5:2d:80:53:38:69:6e:43:fb:
c8:8f:30:7c:48:ca:58:37:2e:2a:08:ed:40:5c:6e:f6:fd:22:
d8:0c:6e:3b:de:25:35:16:08:86:0b:3e:69:a7:5f:a2:62:29:
47:27:8f:9d:2c:e1:68:28:12:72:42:d4:cd:f6:ba:22:08:f1:
dd:5e:2e:59:b8:62:c4:3b:82:f7:2b:23:15:40:f8:9e:d5:5e:
71:a8:52:b2:f9:e4:20:89:25:c1:b7:bf:a9:4f:37:cc:dc:2b:
9a:2e:18:be:f4:e4:b2:a0:a4:72:d6:10:d1:2a:a1:7e:0f:87:
33:64:4b:66:c1:c0:ec:98:a9:f4:5d:19:b9:ce:4e:13:06:50:
a4:86:54:4b:f9:64:71:ba:66:60:81:f3:39:ef:0f:e4:05:9e:
8f:1b:c7:08:c9:c2:01:8d:06:f3:b0:e4:7e:96:27:23:c3:bc:
02:d6:fc:76:2d:2b:f1:bb:4b:11:3f:a2:10:95:de:55:14:40:
a1:5e:f1:c4:f4:4f:92:d4:b5:c8:a9:d7:a9:3a:7c:68:74:74:
aa:f6:ea:c5:8c:ef:5d:99:6a:8b:c4:5b:de:e2:8c:87:a0:95:
a0:6f:6a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:30:28 2026 by rpki-client