Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a646565643a3a2f34382d3438203d3e20323035303336.roa
File: 326130663a356663303a646565643a3a2f34382d3438203d3e20323035303336.roa (raw, json)
Hash identifier: 8SZs8ov0sC1kRDMr8eJpWG0NtiVNfbk+KIX6ABX6Eks=
Subject key identifier: 46:E1:15:B2:D6:8E:3B:78:D5:49:61:57:AB:B4:62:49:A3:ED:A1:15
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 3E8CFF263B2D9F9A8F1EA277EB2A53692FCB05B6
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a646565643a3a2f34382d3438203d3e20323035303336.roa
Signing time: Wed 07 Oct 2026 11:49:35 +0000
ROA not before: Wed 07 Oct 2026 11:44:35 +0000
ROA not after: Wed 06 Oct 2027 11:49:35 +0000
asID: 205036
IP address blocks: 2a0f:5fc0:deed::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 11:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:8c:ff:26:3b:2d:9f:9a:8f:1e:a2:77:eb:2a:53:69:2f:cb:05:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Oct 7 11:44:35 2026 GMT
Not After : Oct 6 11:49:35 2027 GMT
Subject: CN=46E115B2D68E3B78D5496157ABB46249A3EDA115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:db:2a:71:1e:b8:3a:08:42:6d:fd:01:72:
b6:d2:f5:8d:0e:c3:9b:0f:37:ec:b4:32:c2:89:9f:
9f:7c:c3:fb:e5:bc:99:d5:79:42:c8:0f:fa:2f:41:
fb:58:63:bb:6c:5d:ed:14:6d:67:ab:38:c9:12:06:
03:0e:83:cc:00:f3:50:6b:00:9c:03:ee:93:11:c0:
b3:c4:2b:3a:58:ee:65:2b:49:7e:47:88:ab:5d:33:
34:c4:76:d9:fd:f3:2d:47:e9:4e:91:cc:41:94:43:
12:43:78:cc:90:2c:bd:33:78:a3:e2:b5:2b:e2:22:
c4:d8:27:32:62:48:b1:e9:04:e4:cf:59:cb:81:16:
a5:3e:b3:0d:81:fc:45:58:ca:a2:4d:10:0e:c9:2b:
58:2f:4b:db:3b:b3:26:7e:e8:70:b6:75:95:67:02:
25:dc:ca:3a:a9:49:94:7e:ce:59:df:5c:d3:83:9f:
f9:74:5b:be:4f:24:74:c4:af:ec:88:42:2c:13:48:
f4:2a:48:64:97:c9:1e:a1:1a:d7:f2:ba:05:54:24:
8f:d4:22:c5:d7:72:0f:51:82:01:a1:b4:93:01:b4:
86:5c:e7:7a:9b:6c:11:c6:28:23:dc:29:03:dd:74:
f8:0a:13:d1:f1:6e:65:91:5f:a3:69:65:2b:60:5e:
cd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E1:15:B2:D6:8E:3B:78:D5:49:61:57:AB:B4:62:49:A3:ED:A1:15
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a646565643a3a2f34382d3438203d3e20323035303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5fc0:deed::/48
Signature Algorithm: sha256WithRSAEncryption
93:d0:9b:71:8b:c4:d8:49:5e:3d:4c:b7:96:0e:3d:31:89:e7:
07:c1:30:ed:fe:dd:e2:b0:a8:cd:43:3f:ee:cf:ed:c7:ab:ca:
58:10:db:3e:70:09:4b:20:ec:e7:19:7a:4c:1e:95:e2:5d:e3:
6c:ce:b9:89:f9:cd:91:28:c3:7c:27:be:93:bc:a5:9a:67:b9:
b6:33:45:ff:b7:8c:08:1e:08:95:00:e2:fa:68:9e:9e:67:69:
d8:4f:af:fd:78:8b:b4:81:93:fa:fd:f5:b5:17:4e:12:1a:91:
4c:3d:57:20:8f:c1:b5:7b:06:2b:90:89:82:0d:19:a7:ce:65:
52:5b:13:27:87:a2:eb:81:49:21:50:ea:c1:1c:e2:e5:eb:d7:
77:d1:01:87:51:96:37:7d:2a:0f:c6:38:62:d3:96:ad:3e:0d:
2a:41:d8:39:93:d1:7d:d6:58:3b:78:fd:bf:c8:56:16:66:0f:
29:f7:b6:5e:9b:e3:7b:4a:0f:f1:7e:54:c8:f0:50:b6:4a:d6:
de:79:ec:91:54:5f:11:44:23:98:cc:73:ac:81:2b:b7:bb:54:
07:40:e6:e3:fc:88:68:51:40:c4:a1:d6:b3:da:54:57:3e:ad:
12:cc:03:4c:59:53:46:8e:34:3c:25:d9:56:f3:f3:bc:66:98:
2b:5b:aa:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:17:03 2026 by rpki-client