Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a6164643a3a2f34382d3438203d3e20323035303336.roa
File: 326130663a356663303a6164643a3a2f34382d3438203d3e20323035303336.roa (raw, json)
Hash identifier: iDaXCSsTmvfoTmC+YV9NzGtXkFfUIZ1KTbR90hlREWI=
Subject key identifier: 63:89:84:A7:04:0B:B8:38:29:46:0C:4D:73:60:3D:F2:AD:0F:31:8F
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 3B8BB42C4D9F3857B5AC5188561E85CC6D761F33
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a6164643a3a2f34382d3438203d3e20323035303336.roa
Signing time: Wed 07 Oct 2026 11:49:35 +0000
ROA not before: Wed 07 Oct 2026 11:44:35 +0000
ROA not after: Wed 06 Oct 2027 11:49:35 +0000
asID: 205036
IP address blocks: 2a0f:5fc0:add::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:8b:b4:2c:4d:9f:38:57:b5:ac:51:88:56:1e:85:cc:6d:76:1f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Oct 7 11:44:35 2026 GMT
Not After : Oct 6 11:49:35 2027 GMT
Subject: CN=638984A7040BB83829460C4D73603DF2AD0F318F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b1:61:f6:c2:69:fd:bc:ff:ea:b2:41:1c:83:
be:cd:ed:97:82:57:ff:a3:06:ae:fd:21:4e:d0:07:
05:2d:a5:04:a6:d2:f7:6b:82:a8:76:00:8b:9c:4e:
b2:80:ea:3a:59:45:96:53:d9:ca:d9:c5:f3:dd:70:
c9:59:5d:6d:de:41:d1:fa:4d:a0:c3:e4:15:ba:13:
32:e0:6e:92:a8:57:7c:b9:a5:c4:de:e6:6c:82:09:
57:8b:d2:c5:4d:f0:07:3a:8e:99:74:f6:78:58:18:
d3:ca:32:bf:f3:bb:4d:f7:ef:52:d4:50:09:b0:92:
97:f6:65:65:b2:0f:47:25:1c:d1:c1:23:99:5a:8e:
ac:87:53:ca:36:b9:8a:e1:db:74:b1:2e:18:83:3a:
ed:15:c7:29:b9:d0:19:14:85:52:6d:77:d4:65:3d:
10:73:1e:bb:2b:8d:e1:a3:40:ef:13:32:fa:e1:21:
c1:7c:1d:f1:bb:c2:99:91:73:b9:b8:a3:97:63:77:
d6:5b:8b:ab:d6:73:1b:b0:a6:d1:d3:4b:c0:06:87:
9d:82:0c:a0:d8:78:16:11:0f:4c:3f:d3:78:91:6a:
19:18:77:2e:b8:8f:b1:e8:6b:44:0e:d1:d3:bd:89:
39:9c:5a:1b:ac:41:5f:9f:a3:4f:86:ed:2b:35:0e:
c9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:89:84:A7:04:0B:B8:38:29:46:0C:4D:73:60:3D:F2:AD:0F:31:8F
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a6164643a3a2f34382d3438203d3e20323035303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5fc0:add::/48
Signature Algorithm: sha256WithRSAEncryption
4e:e9:9e:d8:03:e6:6a:23:13:90:e5:fe:4a:68:24:70:f8:24:
78:2c:c0:48:1a:de:fd:85:a9:ea:19:51:a6:fc:3d:0a:05:9f:
f5:9d:3c:e9:de:90:d9:23:36:7d:8d:15:50:48:a6:aa:73:1f:
ab:9e:c3:4e:81:82:4c:0a:61:76:a9:1e:d8:ff:d1:43:c5:53:
4a:50:e1:27:b9:2a:13:f2:67:c8:84:96:57:fa:9d:68:00:9f:
af:b3:b8:7d:4b:12:e4:36:3f:83:f8:56:98:89:8b:c7:4c:ec:
46:b2:2c:20:43:66:e1:5a:03:d2:48:f3:53:8f:2c:30:55:c6:
17:e3:c9:d4:3a:5e:2e:a8:75:e8:85:9a:c6:76:b8:43:98:c6:
62:8a:e9:f9:4c:b2:26:62:1e:7b:d9:b3:3a:e7:3b:e0:60:d6:
5c:1a:7d:73:03:40:94:d8:34:d6:24:b9:8c:90:2d:45:05:b4:
08:7f:4a:92:9b:cb:e4:1d:7d:c9:78:66:0a:a5:0e:97:48:7c:
85:ff:fb:94:a2:ab:ca:f7:3c:50:53:b0:83:6b:0a:23:dc:a9:
3d:1f:de:8a:d7:c6:80:15:ff:7c:f5:cc:67:b2:c1:c4:66:22:
94:54:4b:c4:00:07:30:c1:e1:95:57:6a:e5:db:0d:14:e3:e4:
45:d0:c5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:48:18 2026 by rpki-client