Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a6265643a3a2f34382d3438203d3e20323035303336.roa
File: 326130663a356663303a6265643a3a2f34382d3438203d3e20323035303336.roa (raw, json)
Hash identifier: Vn0tNJq84yvhpEx3djvegd0qElXvUXIj3d10CpoBDS8=
Subject key identifier: 65:9B:62:C7:9A:D1:40:2E:98:39:A3:9E:0B:39:EF:5F:75:80:B8:D5
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 6FDE672A51EEDEC84267E76804589D283A6F7F10
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a6265643a3a2f34382d3438203d3e20323035303336.roa
Signing time: Wed 05 Nov 2025 11:03:54 +0000
ROA not before: Wed 05 Nov 2025 10:58:54 +0000
ROA not after: Wed 04 Nov 2026 11:03:54 +0000
asID: 205036
IP address blocks: 2a0f:5fc0:bed::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 14:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:de:67:2a:51:ee:de:c8:42:67:e7:68:04:58:9d:28:3a:6f:7f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Nov 5 10:58:54 2025 GMT
Not After : Nov 4 11:03:54 2026 GMT
Subject: CN=659B62C79AD1402E9839A39E0B39EF5F7580B8D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:08:fd:73:d4:21:9b:96:f4:4f:e3:2f:a8:2f:
e9:af:19:7f:16:af:c4:95:3a:52:9d:1f:80:50:c0:
46:e6:55:ec:70:4b:2b:de:43:df:be:d9:73:eb:a9:
ee:43:4e:27:96:45:2f:b1:18:66:d8:f2:02:0d:ee:
73:db:82:ca:8f:ac:27:d9:bc:75:3d:01:21:6a:55:
db:34:d6:e4:c3:4a:30:da:f5:45:0c:70:cf:0f:37:
1d:00:40:62:da:20:8c:46:5a:4b:23:11:4b:e8:4c:
34:7b:c0:8c:08:19:3c:3f:43:26:84:d4:19:d5:3d:
17:96:f1:8f:7d:25:a5:f6:87:e3:f5:fe:8a:49:2a:
b8:8b:8b:82:e8:ba:8c:d7:c1:9b:8d:b6:b7:ec:29:
8f:1b:40:b8:7c:8d:5c:52:6b:bc:f9:04:c0:a8:74:
95:d0:28:95:83:52:44:81:84:57:27:48:38:75:5a:
c7:a1:79:4a:0b:a9:a3:32:5c:57:eb:b6:18:d2:52:
4c:14:fa:7c:67:61:dd:2c:e6:03:62:b9:20:48:c7:
fe:5c:4c:96:d5:a3:dd:11:ed:b3:d9:c8:02:5b:cd:
cc:aa:1a:bc:3c:a9:ed:7d:cf:df:6d:6e:1b:67:69:
01:1f:fa:1e:75:1d:39:06:2e:34:f3:bc:cc:93:a2:
e2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9B:62:C7:9A:D1:40:2E:98:39:A3:9E:0B:39:EF:5F:75:80:B8:D5
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a6265643a3a2f34382d3438203d3e20323035303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5fc0:bed::/48
Signature Algorithm: sha256WithRSAEncryption
7e:4e:ed:19:08:6f:10:8d:1a:67:09:7b:2d:24:61:c5:53:9e:
73:8d:9c:63:df:49:25:2f:3c:08:58:b8:52:59:0b:0b:e1:2b:
10:09:6a:06:2b:6e:cb:4e:41:55:01:bb:02:8f:85:8f:f1:b1:
35:7e:01:84:3a:5e:54:8f:b1:6a:25:cd:20:88:f3:66:0e:79:
45:51:57:c3:99:95:a9:68:62:27:be:2f:f9:fd:96:5d:2e:ba:
5f:fc:a6:98:07:02:60:73:d7:df:e7:a5:69:b5:09:c2:eb:e1:
25:4f:9d:cc:59:76:62:fa:81:23:5c:78:5d:07:70:a9:a6:c3:
b3:f5:14:55:b1:6f:55:1e:58:6d:29:dc:e1:1a:51:83:17:3a:
3f:75:ed:c2:4c:7d:d3:06:06:bb:95:4f:38:a4:70:9a:37:f9:
5c:63:6b:f2:63:86:5d:9c:3a:1a:2c:2d:a5:69:d8:bd:80:a4:
6f:c9:96:d2:4b:87:40:47:70:6e:99:5c:b7:c8:1d:65:4e:32:
3e:92:50:f4:77:d0:4b:37:64:b5:1d:4d:7f:0f:80:85:25:bd:
5d:75:09:c4:08:b1:ab:5c:c2:e6:c2:7a:32:d8:d0:95:79:26:
53:81:97:9d:20:7b:ef:fb:24:f8:87:91:90:d9:9f:5b:01:49:
ea:a9:ad:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:19:17 2025 by rpki-client