Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a646561643a3a2f34382d3438203d3e20323035303336.roa
File: 326130663a356663303a646561643a3a2f34382d3438203d3e20323035303336.roa (raw, json)
Hash identifier: JrZG+GYpWwbIbm6FJIWfk6vkBuFSP8Xg3izwlMUXiJY=
Subject key identifier: 6B:17:C1:0C:0F:16:79:B1:6A:72:F8:73:C9:B0:7A:D6:24:E9:D4:71
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 1B6F1B5BBFCD81C0BD67D6F00B59F09993E30800
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a646561643a3a2f34382d3438203d3e20323035303336.roa
Signing time: Wed 07 Oct 2026 11:49:35 +0000
ROA not before: Wed 07 Oct 2026 11:44:35 +0000
ROA not after: Wed 06 Oct 2027 11:49:35 +0000
asID: 205036
IP address blocks: 2a0f:5fc0:dead::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 06:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:6f:1b:5b:bf:cd:81:c0:bd:67:d6:f0:0b:59:f0:99:93:e3:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Oct 7 11:44:35 2026 GMT
Not After : Oct 6 11:49:35 2027 GMT
Subject: CN=6B17C10C0F1679B16A72F873C9B07AD624E9D471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:43:02:9c:38:48:c6:9c:aa:77:04:fb:b5:bb:
b3:20:fb:f8:e5:b2:6b:67:46:ae:6c:e8:a4:10:91:
98:0c:f2:4f:b4:5b:89:e2:a9:c4:94:3c:d0:2c:f7:
97:f1:93:eb:33:ea:eb:12:98:3c:35:2d:5a:28:cf:
2f:66:19:e8:0f:33:30:36:55:80:ad:53:6d:34:2b:
bc:a6:af:65:98:34:93:d4:90:06:70:df:36:38:6e:
29:05:45:9f:4b:12:51:ca:60:60:6c:63:88:51:2c:
eb:4f:74:00:16:d9:8f:f6:36:88:c1:ec:77:87:73:
a7:4d:5e:2c:5d:68:05:dc:86:0f:b3:dc:73:41:c5:
e4:32:8c:da:f7:cc:bc:b2:95:63:9f:c2:cd:7f:4a:
0f:d7:8f:91:77:78:3b:bf:ec:d9:b1:bc:1d:57:37:
0a:85:bc:cb:dd:8a:cb:08:95:cf:6c:ec:83:f0:c5:
b7:59:78:e6:83:dc:04:51:7d:56:d9:b4:d3:a4:5c:
78:34:01:b5:d2:24:2d:41:0d:c9:79:48:b9:75:83:
d3:06:e6:a5:79:8e:bd:21:aa:1e:db:7c:5b:e8:f4:
0e:64:99:8d:18:c5:6e:b6:da:df:c7:a1:10:46:02:
f6:bc:c0:2c:86:93:79:4f:82:ff:57:10:97:02:72:
ee:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:17:C1:0C:0F:16:79:B1:6A:72:F8:73:C9:B0:7A:D6:24:E9:D4:71
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a646561643a3a2f34382d3438203d3e20323035303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5fc0:dead::/48
Signature Algorithm: sha256WithRSAEncryption
4b:e6:67:96:da:3b:86:95:ef:88:4c:dd:0b:56:3c:ae:de:be:
91:4c:0a:e0:73:0f:18:71:42:bb:9f:02:81:6d:f8:58:1d:c2:
b9:8a:81:c2:3f:da:2b:b8:02:cc:f1:b4:67:a4:9c:94:c4:4e:
a5:be:65:db:4c:2d:a9:9d:22:01:c7:c6:f7:78:fb:db:a8:4f:
f3:7a:3b:08:f8:56:69:6a:62:8d:7d:e6:43:c1:09:ce:d8:d4:
17:97:03:57:ce:6b:a0:89:44:d9:84:0a:1a:de:45:2c:98:4b:
2f:47:5a:94:1e:47:1f:3d:a6:59:e5:3c:74:5b:d5:e2:32:12:
9d:c9:8b:5e:37:67:43:54:34:09:d2:19:6a:37:d1:6d:8c:03:
f1:95:ea:f5:f3:51:63:4f:cf:56:6d:dd:d0:e3:f2:89:dd:82:
d5:0c:48:c8:0f:d0:dc:fd:fd:32:57:16:26:44:37:1c:c1:b7:
f5:6a:3b:27:48:5c:b9:40:49:1f:9b:81:ab:06:19:d3:6c:75:
30:7d:db:07:99:eb:80:23:4c:13:b8:12:9a:a0:72:3a:3e:c1:
a4:22:49:ae:e1:d9:af:9f:2f:1a:74:2f:89:24:36:1d:38:fd:
ba:87:d6:46:1a:6b:bb:da:e0:86:0f:53:41:ba:62:cf:92:bd:
b0:21:ca:ee
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUG28bW7/NgcC9Z9bwC1nwmZPjCAAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTIwNWViZjA2NWZjNDkyOWYxODAyNjYyYWU2MmQ3Zjk3
NjI2MDBlNjAeFw0yNjEwMDcxMTQ0MzVaFw0yNzEwMDYxMTQ5MzVaMDMxMTAvBgNV
BAMTKDZCMTdDMTBDMEYxNjc5QjE2QTcyRjg3M0M5QjA3QUQ2MjRFOUQ0NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtQwKcOEjGnKp3BPu1u7Mg+/jl
smtnRq5s6KQQkZgM8k+0W4niqcSUPNAs95fxk+sz6usSmDw1LVoozy9mGegPMzA2
VYCtU200K7ymr2WYNJPUkAZw3zY4bikFRZ9LElHKYGBsY4hRLOtPdAAW2Y/2NojB
7HeHc6dNXixdaAXchg+z3HNBxeQyjNr3zLyylWOfws1/Sg/Xj5F3eDu/7NmxvB1X
NwqFvMvdissIlc9s7IPwxbdZeOaD3ARRfVbZtNOkXHg0AbXSJC1BDcl5SLl1g9MG
5qV5jr0hqh7bfFvo9A5kmY0YxW622t/HoRBGAva8wCyGk3lPgv9XEJcCcu4TAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUaxfBDA8WebFqcvhzybB61iTp1HEwHwYDVR0j
BBgwFoAU4gXr8GX8SSnxgCZirmLX+XYmAOYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEtODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1
N2ZlLzAvRTIwNUVCRjA2NUZDNDkyOUYxODAyNjYyQUU2MkQ3Rjk3NjI2MDBFNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRnWHI4R1g4U1NueGdDWmlybUxYLVhZ
bUFPWS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEt
ODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1N2ZlLzAvMzI2MTMwNjYzYTM1NjY2MzMw
M2E2NDY1NjE2NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzNTMwMzMzNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoPX8DerTANBgkqhkiG9w0BAQsFAAOCAQEAS+Znlto7hpXviEzd
C1Y8rt6+kUwK4HMPGHFCu58CgW34WB3CuYqBwj/aK7gCzPG0Z6SclMROpb5l20wt
qZ0iAcfG93j726hP83o7CPhWaWpijX3mQ8EJztjUF5cDV85roIlE2YQKGt5FLJhL
L0dalB5HHz2mWeU8dFvV4jISncmLXjdnQ1Q0CdIZajfRbYwD8ZXq9fNRY0/PVm3d
0OPyid2C1QxIyA/Q3P39MlcWJkQ3HMG39Wo7J0hcuUBJH5uBqwYZ02x1MH3bB5nr
gCNME7gSmqByOj7BpCJJruHZr58vGnQviSQ2HTj9uofWRhpru9rghg9TQbpiz5K9
sCHK7g==
-----END CERTIFICATE-----
Generated at Thu Oct 8 20:15:52 2026 by rpki-client