Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a633064653a3a2f34382d3438203d3e20323035303336.roa
File: 326130663a356663303a633064653a3a2f34382d3438203d3e20323035303336.roa (raw, json)
Hash identifier: oYDWY+/e76q2NDdVKvWRf2rk49U/wTm4yGlr9LKja5E=
Subject key identifier: 32:95:BE:5D:C4:2B:31:0E:E3:91:57:EA:5B:FA:ED:88:33:BB:48:C7
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 1567BA67690C1ECCB1406F7C97EF4349017935D5
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a633064653a3a2f34382d3438203d3e20323035303336.roa
Signing time: Wed 07 Oct 2026 11:49:35 +0000
ROA not before: Wed 07 Oct 2026 11:44:35 +0000
ROA not after: Wed 06 Oct 2027 11:49:35 +0000
asID: 205036
IP address blocks: 2a0f:5fc0:c0de::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 13:47:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:67:ba:67:69:0c:1e:cc:b1:40:6f:7c:97:ef:43:49:01:79:35:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Oct 7 11:44:35 2026 GMT
Not After : Oct 6 11:49:35 2027 GMT
Subject: CN=3295BE5DC42B310EE39157EA5BFAED8833BB48C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:36:16:51:67:44:d4:f0:62:dd:1d:34:3e:
37:a6:f6:92:09:56:9b:da:25:f9:59:0e:24:f8:1b:
12:24:e9:c1:ad:0a:53:78:aa:8b:04:b1:36:ae:4b:
06:67:e4:12:81:41:45:9c:ee:af:d8:33:6b:c2:42:
34:64:f2:95:f8:7b:82:eb:77:ed:58:be:c0:e0:46:
2e:fd:a5:4e:43:ad:58:81:d0:b3:5f:72:77:81:11:
bd:13:c5:89:91:2a:89:ce:04:fd:78:32:73:5a:a8:
87:6d:ac:64:75:08:20:2b:aa:95:c4:30:d9:54:4e:
45:e1:d2:9a:fd:14:9e:2e:87:6e:8a:c0:65:ba:08:
28:10:ca:00:51:0c:cd:6a:28:21:14:e5:8f:77:84:
73:47:8c:55:e9:48:fb:73:30:30:89:59:41:27:5b:
33:7b:07:b1:33:07:48:60:f4:14:bf:09:21:f2:19:
a2:da:bc:23:f1:28:55:8c:13:a3:2a:09:cf:70:32:
a3:67:55:de:ca:cb:e2:0e:c0:e9:18:d7:b5:b8:c1:
07:f0:eb:22:a1:c3:e5:18:7c:36:e3:7b:f7:54:c0:
c7:e9:c1:ec:26:67:42:e3:35:98:07:ff:f4:55:94:
be:71:77:c8:90:e8:e4:59:f0:94:36:2c:30:5a:e2:
fd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:95:BE:5D:C4:2B:31:0E:E3:91:57:EA:5B:FA:ED:88:33:BB:48:C7
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a633064653a3a2f34382d3438203d3e20323035303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5fc0:c0de::/48
Signature Algorithm: sha256WithRSAEncryption
17:b5:03:c3:88:00:7c:f0:d8:4d:ae:fe:a9:5d:40:16:71:ed:
93:e9:ee:a8:b9:c0:2a:b8:bc:54:7d:90:b9:27:40:aa:ab:f9:
3d:be:85:21:b5:15:77:fd:38:99:b8:73:3d:f2:8d:9c:57:62:
50:65:ef:d1:ec:31:be:86:bf:ba:27:a1:16:ad:c5:13:83:de:
33:e2:04:8f:54:75:e1:da:58:d1:29:f7:ef:72:5e:f6:dd:3c:
53:6e:85:8c:cf:b0:9d:04:bd:b2:be:ef:b4:fd:70:5a:8b:1d:
b4:b9:81:1d:78:8c:b6:59:ad:aa:7b:df:be:a5:f7:79:00:42:
e3:c3:0b:62:f5:26:ec:d1:0b:a5:de:55:7e:cc:c1:7c:49:51:
02:f3:39:df:46:1b:78:89:ad:dc:74:a9:dc:59:31:12:d2:eb:
30:d6:02:45:64:85:16:f6:94:44:59:a7:4c:14:0c:94:2a:d1:
23:cc:fe:f9:93:8c:3b:81:eb:9e:fd:b0:ea:01:ba:d3:f4:8e:
a3:c2:bf:d9:b4:03:20:1f:99:6a:46:b6:6b:ba:41:ca:31:4e:
b0:4a:94:93:28:33:f1:38:10:ff:6a:6f:bd:82:bc:94:62:5f:
99:53:79:14:2d:1e:0b:db:84:a3:31:da:c7:0b:24:f1:40:1d:
65:2a:7b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:06:44 2026 by rpki-client