Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a623030623a3a2f34382d3438203d3e20323035303336.roa
File: 326130663a356663303a623030623a3a2f34382d3438203d3e20323035303336.roa (raw, json)
Hash identifier: Lq7GXZd29If1iO+feMtLfBSO5L7jQQs93/zp1lBKHJM=
Subject key identifier: E1:14:C5:E2:12:50:2A:42:F8:D4:06:8C:B9:D0:BF:0E:FE:CD:BB:38
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 5238530E842E87E6B6120105B736B11F4B202761
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a623030623a3a2f34382d3438203d3e20323035303336.roa
Signing time: Wed 07 Oct 2026 11:49:35 +0000
ROA not before: Wed 07 Oct 2026 11:44:35 +0000
ROA not after: Wed 06 Oct 2027 11:49:35 +0000
asID: 205036
IP address blocks: 2a0f:5fc0:b00b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 13:47:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:38:53:0e:84:2e:87:e6:b6:12:01:05:b7:36:b1:1f:4b:20:27:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Oct 7 11:44:35 2026 GMT
Not After : Oct 6 11:49:35 2027 GMT
Subject: CN=E114C5E212502A42F8D4068CB9D0BF0EFECDBB38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:02:73:e2:23:aa:75:10:cf:ef:c6:80:99:
b8:a8:e7:62:33:11:ec:61:1a:e5:a6:f3:dd:70:d4:
fd:52:26:34:e7:33:b5:28:d0:39:03:b7:de:fd:ef:
35:40:71:01:9f:d0:e4:7f:46:19:a9:17:e2:b0:50:
dd:f9:03:4c:b3:ea:7d:f6:c3:20:84:0b:d2:3d:1a:
16:e2:e2:58:c6:37:93:86:0b:d6:06:ab:75:70:1a:
27:10:e5:d6:70:64:ed:6a:3b:6f:a6:3e:06:67:38:
45:42:c3:68:c0:e8:56:1d:dc:22:d9:81:e5:8b:4e:
05:95:4a:52:83:81:4c:8f:ed:e5:e5:c6:3b:f5:1d:
fd:0b:88:c9:19:6d:b3:b9:97:97:c9:cd:51:cf:7a:
ef:17:eb:fd:aa:32:30:a3:fe:1f:a2:dc:6f:b2:d3:
3c:c7:12:c9:bc:d4:0a:b5:13:13:a6:6e:31:aa:ff:
e9:af:88:f4:b5:0e:75:78:a8:fa:67:30:d9:27:3f:
bc:a1:4b:8b:ab:d5:29:e5:26:57:44:50:7c:2c:6d:
9f:11:ee:5b:57:c1:4f:94:f5:26:da:da:e5:4d:2e:
7c:ea:e9:4b:8c:15:be:a7:6c:f2:c1:ba:92:9f:f1:
a4:0e:fb:16:5b:ca:1d:5a:4f:ba:a6:53:31:b0:47:
85:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:14:C5:E2:12:50:2A:42:F8:D4:06:8C:B9:D0:BF:0E:FE:CD:BB:38
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a623030623a3a2f34382d3438203d3e20323035303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5fc0:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
0f:9c:ed:a1:7d:ff:3a:47:a3:8d:61:8f:f8:0d:0a:ca:3d:2a:
6f:1f:00:e1:40:a5:a0:2b:98:94:eb:5a:ca:d7:61:c5:6a:55:
7b:ee:ca:6c:8d:fc:ef:21:4e:04:7e:23:21:85:3e:98:86:59:
b7:da:97:41:69:15:c4:69:69:fc:37:0f:18:d7:a1:85:c2:43:
d7:9e:7f:73:07:0b:23:0e:e0:12:3d:88:2a:cf:46:aa:c3:56:
96:74:95:09:c7:8e:c1:19:f9:21:99:30:f9:59:f8:ab:5e:f1:
9a:e2:8e:a9:82:89:af:bb:ef:bd:c9:1a:ba:ec:08:02:16:91:
9b:b5:8f:9e:13:d6:70:ca:1b:d0:49:d6:17:3f:1d:73:df:03:
06:d3:c5:10:3f:f3:e2:87:19:c7:98:8d:bc:e1:3a:3d:cd:84:
45:b5:82:3d:e9:63:d3:fe:9f:48:0e:3b:f8:79:6f:89:fa:0d:
b3:41:af:82:04:2f:81:09:8e:aa:68:d2:87:53:c8:a2:67:90:
8f:20:68:8f:e1:e1:15:ea:78:48:b6:37:e1:cb:de:87:f7:de:
0f:13:86:bc:ef:f3:eb:30:b0:ba:93:62:c1:be:31:1b:fe:f1:
d9:ec:fa:ec:1f:84:54:9d:e5:d6:17:42:0d:58:77:53:dd:f8:
e3:7c:30:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:10:56 2026 by rpki-client