Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a6164643a3a2f34382d3438203d3e20323035303336.roa
File: 326130663a356663303a6164643a3a2f34382d3438203d3e20323035303336.roa (raw, json)
Hash identifier: N543k0DcGiJuxubeGma9GZg+VhMwbPVS9ShNVwfZl30=
Subject key identifier: 47:98:60:04:7B:B0:A4:9F:4A:EC:06:8D:37:B4:94:C5:ED:67:5A:D9
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 7656E41FFFA5CF3E809BEFA15A769A0805874EC7
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a6164643a3a2f34382d3438203d3e20323035303336.roa
Signing time: Wed 05 Nov 2025 11:03:59 +0000
ROA not before: Wed 05 Nov 2025 10:58:59 +0000
ROA not after: Wed 04 Nov 2026 11:03:59 +0000
asID: 205036
IP address blocks: 2a0f:5fc0:add::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 14:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:56:e4:1f:ff:a5:cf:3e:80:9b:ef:a1:5a:76:9a:08:05:87:4e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Nov 5 10:58:59 2025 GMT
Not After : Nov 4 11:03:59 2026 GMT
Subject: CN=479860047BB0A49F4AEC068D37B494C5ED675AD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:55:54:12:ec:a4:5e:d8:d4:21:0c:b1:1b:14:
7b:11:80:b5:ff:03:8c:70:a3:96:c3:76:7d:88:59:
52:a2:d7:17:93:81:0a:74:55:72:43:20:01:d7:29:
11:83:14:dd:84:3d:67:4e:c2:bb:ef:43:01:4f:8d:
7f:d1:b7:9f:91:a6:0b:1b:28:80:31:bf:fc:13:a2:
02:19:67:ed:6f:3b:d9:97:30:d1:5f:61:83:8a:e9:
24:e1:7c:5b:34:73:a7:45:d4:c0:fc:8d:60:1f:6d:
b2:42:1c:44:ec:7b:25:34:5e:8c:4c:fa:1d:db:d7:
60:0f:8b:26:b7:90:f2:c3:50:36:c8:e3:62:b9:f9:
be:d2:b3:7e:c2:80:f4:80:e7:97:20:2c:cd:22:d3:
f3:44:a5:e3:0d:5c:29:47:48:ac:c2:0f:79:94:5e:
a2:6c:e4:34:de:9d:9d:a1:ac:de:84:a3:22:d5:d2:
77:02:0e:6c:86:ad:45:4f:27:51:a2:69:e6:d3:33:
e0:67:8f:b8:38:80:19:b9:2b:38:ff:92:96:7b:5f:
cd:59:6e:14:a9:a8:48:a9:88:65:df:7f:94:4d:1a:
5b:b2:33:9b:13:55:68:ad:54:f6:a4:30:e4:48:a4:
6c:2d:85:14:bf:ef:e7:b5:8e:43:65:46:a3:98:cf:
a8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:98:60:04:7B:B0:A4:9F:4A:EC:06:8D:37:B4:94:C5:ED:67:5A:D9
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a6164643a3a2f34382d3438203d3e20323035303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5fc0:add::/48
Signature Algorithm: sha256WithRSAEncryption
40:81:42:d0:da:d3:5b:30:d2:45:a1:06:49:10:41:c9:5b:7d:
a8:cc:93:8d:66:87:36:4c:6a:06:75:3a:c3:cf:3b:7f:03:aa:
56:ba:15:ac:3c:08:c5:39:ce:1f:7d:84:ae:85:cc:68:97:e9:
13:1b:0e:2c:2a:f6:44:8c:eb:c3:30:1e:13:52:53:4a:db:77:
55:4b:90:01:99:96:8e:ea:f8:8c:df:64:6b:9d:4c:93:c3:1e:
b3:ab:a9:21:32:20:16:b6:87:85:f8:33:ff:22:f3:6f:16:a8:
d3:45:5c:5f:bd:d5:de:b3:f0:de:e8:97:cb:16:61:7d:e6:d5:
e5:6b:39:e6:4c:72:4e:55:32:6e:12:dc:15:1a:97:ca:18:37:
a3:fc:8e:33:57:bc:d1:49:67:01:15:00:10:44:bf:c4:da:19:
5f:e3:05:c8:7c:cf:41:92:0a:a2:6c:a7:aa:20:f3:28:de:6e:
3f:76:d0:ba:71:01:f4:1c:8b:31:68:98:fd:a3:c4:5f:3e:d1:
7d:8e:40:31:ae:ae:2e:7f:8f:60:79:85:34:37:32:93:e4:72:
c3:bd:75:47:b5:4f:9c:ed:0f:1e:16:f1:2d:6f:2f:de:1c:93:
26:4d:4f:e0:1f:3b:45:36:27:7a:81:fb:d7:5a:2e:6d:04:c0:
61:c6:09:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:20:55 2025 by rpki-client