Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a626162653a3a2f34382d3438203d3e20323035303336.roa
File: 326130663a356663303a626162653a3a2f34382d3438203d3e20323035303336.roa (raw, json)
Hash identifier: sHKt3Hs5YyZg4ePXicldq6VZoIITxxqpIwyiyKVVN2A=
Subject key identifier: 31:89:A4:2A:CA:A8:24:16:92:7D:CC:3A:77:6D:E9:0A:65:83:57:C9
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 546D58B4137F1501C8811CD0993D4484636AEFDB
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a626162653a3a2f34382d3438203d3e20323035303336.roa
Signing time: Wed 07 Oct 2026 11:49:35 +0000
ROA not before: Wed 07 Oct 2026 11:44:35 +0000
ROA not after: Wed 06 Oct 2027 11:49:35 +0000
asID: 205036
IP address blocks: 2a0f:5fc0:babe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:6d:58:b4:13:7f:15:01:c8:81:1c:d0:99:3d:44:84:63:6a:ef:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Oct 7 11:44:35 2026 GMT
Not After : Oct 6 11:49:35 2027 GMT
Subject: CN=3189A42ACAA82416927DCC3A776DE90A658357C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:bf:1a:ab:08:80:bf:84:b3:08:c7:04:36:
3c:be:e2:72:cf:d0:1a:8d:70:b2:c5:2c:5c:fc:35:
ac:3e:ab:95:b7:3b:fa:60:c9:f8:81:9b:d3:96:93:
6c:1e:c7:d8:40:81:dd:71:9c:58:ce:02:b8:68:1d:
f4:7d:3d:1e:17:a2:2a:a9:5f:0f:69:9a:0c:f6:75:
7f:35:0e:09:09:8c:aa:0b:f7:e3:de:1e:65:e6:a0:
77:d5:67:17:af:72:c9:2f:f6:5b:89:8c:59:1f:08:
28:25:f6:1e:ff:6d:a2:9d:cf:61:de:ae:5d:a0:e6:
3a:2f:db:5c:8b:aa:b5:f3:a1:95:01:66:16:55:c5:
3e:be:10:95:47:4f:78:45:c1:03:e1:4d:a2:10:04:
49:6f:a8:3a:96:c8:97:eb:cd:2e:75:3f:23:e9:99:
fd:4c:1a:0f:59:59:3b:e2:bb:d5:ca:05:8f:57:92:
83:9e:35:5a:da:f1:8e:99:ee:3e:d4:24:54:1e:e6:
6d:ef:6c:e3:4b:63:06:c6:bb:03:d9:04:8e:ca:c0:
da:3d:20:22:5a:0b:bd:49:a5:06:e1:21:19:ee:14:
01:71:33:21:c3:6c:c0:34:e1:ba:04:e6:2f:16:7b:
62:8e:aa:9b:b9:00:38:78:c8:1a:18:73:86:1d:5c:
34:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:89:A4:2A:CA:A8:24:16:92:7D:CC:3A:77:6D:E9:0A:65:83:57:C9
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a626162653a3a2f34382d3438203d3e20323035303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5fc0:babe::/48
Signature Algorithm: sha256WithRSAEncryption
0b:76:73:9e:28:4e:14:c1:44:d4:fc:f3:31:0b:0a:33:be:e9:
f0:5b:68:ca:f2:ef:ec:7b:3c:c7:b4:94:09:cb:85:7e:5c:dd:
64:fd:63:ef:20:0d:48:e5:b9:2c:2b:5e:04:d8:25:4e:1b:cb:
ea:69:a6:ff:94:a4:62:67:7d:dc:48:a2:81:2c:35:ca:d3:75:
19:5e:5a:4f:9e:bc:0b:47:9a:e8:cb:7c:32:90:b3:32:23:03:
eb:7f:b0:12:91:09:b0:25:75:de:39:19:21:de:d8:63:19:a1:
d2:e0:fe:b7:c5:3f:0c:d1:8a:58:63:34:0a:5c:0d:04:29:56:
5d:35:6e:d4:4c:f3:43:53:f5:8c:86:33:9d:59:eb:1c:5e:d1:
e5:02:20:72:0b:67:aa:06:37:20:83:03:4e:70:26:35:98:10:
01:e6:b9:6b:a1:21:98:75:50:75:f9:f7:8e:a7:11:04:9d:5d:
ad:df:53:54:80:0b:01:01:6d:ea:8a:65:33:cb:ed:f0:d2:9c:
75:75:17:c9:d1:46:c8:9d:bb:9b:89:89:35:b0:d9:da:fb:77:
94:4a:a3:6b:f4:65:7a:ec:64:e0:64:2c:04:42:31:58:20:80:
44:e2:a0:8b:d4:42:47:5f:39:67:1a:52:0f:68:00:a6:34:f9:
44:73:21:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:16:13 2026 by rpki-client