Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a626162653a3a2f34382d3438203d3e20323035303336.roa
File: 326130663a356663303a626162653a3a2f34382d3438203d3e20323035303336.roa (raw, json)
Hash identifier: BEzvo1oTT3h/yITGofAX+DfQt9t+mraGyg3xFdVKM2I=
Subject key identifier: 1B:72:AB:BC:7C:13:76:47:1B:ED:B7:97:24:39:3C:B9:C3:0A:A1:E8
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 2C4DF2D67925C86F0B27E4627A48FC7D65AFDE16
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a626162653a3a2f34382d3438203d3e20323035303336.roa
Signing time: Wed 05 Nov 2025 11:03:52 +0000
ROA not before: Wed 05 Nov 2025 10:58:52 +0000
ROA not after: Wed 04 Nov 2026 11:03:52 +0000
asID: 205036
IP address blocks: 2a0f:5fc0:babe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:4d:f2:d6:79:25:c8:6f:0b:27:e4:62:7a:48:fc:7d:65:af:de:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Nov 5 10:58:52 2025 GMT
Not After : Nov 4 11:03:52 2026 GMT
Subject: CN=1B72ABBC7C1376471BEDB79724393CB9C30AA1E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:43:6c:2e:c3:e5:82:d1:51:d3:37:79:ec:96:
b3:7e:81:09:1f:8b:fe:1d:ec:ec:da:71:84:ad:dc:
93:da:47:58:88:de:a3:b2:75:39:b8:e1:cb:c9:e4:
79:cf:6a:29:66:e9:5a:c1:a7:88:b7:85:6f:fb:3a:
05:85:cd:74:92:3e:a8:6d:ba:6e:3a:97:dd:25:2b:
7b:5b:87:54:5a:83:fe:9f:1e:d1:54:99:a5:a9:17:
b3:ba:90:db:73:f1:e3:74:92:68:f9:cf:e7:fe:17:
8c:80:fe:c6:29:57:12:0b:c1:19:f9:17:cf:dc:3d:
3c:4e:7b:0e:cd:50:aa:c4:63:c5:44:68:b1:b0:71:
ef:57:7d:60:79:80:66:49:01:a8:70:be:75:a0:c6:
ae:b0:66:16:82:82:07:46:4b:f5:93:47:e7:2b:a6:
23:e1:55:4d:81:17:b0:a2:9a:ec:e9:9c:9c:8f:b2:
5e:38:51:c4:d4:61:b1:ba:3f:51:00:30:5a:57:54:
a3:78:ad:f4:39:69:4b:4c:c5:7e:32:d8:e1:4c:c5:
62:c6:bf:95:ee:85:45:17:ba:54:21:b0:77:32:79:
21:db:42:47:c0:a1:0a:95:23:3d:93:f4:69:06:44:
a0:7b:c6:fb:46:70:dc:3f:44:38:99:b9:71:df:c8:
e2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:72:AB:BC:7C:13:76:47:1B:ED:B7:97:24:39:3C:B9:C3:0A:A1:E8
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a626162653a3a2f34382d3438203d3e20323035303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5fc0:babe::/48
Signature Algorithm: sha256WithRSAEncryption
ae:74:7a:69:48:56:9a:4c:cc:01:72:2b:ba:1c:53:83:65:67:
46:15:53:5c:ce:17:28:51:fb:df:7f:b0:75:64:96:02:81:a3:
14:b4:f5:12:2a:b8:fd:3c:6b:59:62:47:14:04:0c:2d:7e:1d:
d9:ca:2b:7a:16:f1:ac:77:2e:00:ca:73:5d:ce:39:cd:7c:9d:
ca:41:3e:23:80:1f:f7:72:3d:7f:5c:e1:ff:84:02:4b:87:4f:
5f:27:96:be:85:11:f0:6c:05:dc:60:6a:f2:cf:59:80:e5:ed:
7b:6f:1e:e3:44:02:b5:31:50:21:85:05:86:d8:ff:1e:0b:10:
18:18:77:04:fa:23:36:4c:60:ef:3b:61:4b:d0:58:0b:3a:7d:
1d:9c:cc:d2:4f:1f:c2:98:d0:cf:f1:80:29:d9:cb:88:95:f4:
03:b5:b4:b1:c6:e5:30:cb:a1:7a:e8:f8:75:56:40:07:2c:43:
41:0a:97:81:b4:e9:67:08:8d:53:0d:16:98:1e:a4:c6:c8:6b:
de:14:94:b2:e1:82:d9:0c:2d:1c:d9:58:8b:2e:72:b4:21:a0:
ff:0f:b9:ce:c0:7e:bc:60:c7:2f:a6:d2:ac:ec:6f:eb:0f:26:
79:da:fc:df:08:5c:40:78:86:e1:1c:96:1e:7d:89:98:f5:ad:
13:35:1c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:19:50 2025 by rpki-client