Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a663030643a3a2f34382d3438203d3e20323035303336.roa
File: 326130663a356663303a663030643a3a2f34382d3438203d3e20323035303336.roa (raw, json)
Hash identifier: Xgs2aXZ2twwalLnMnwHKHrLdiNgmex+4PLid272RcXc=
Subject key identifier: 84:47:93:40:8D:CC:A6:CC:B3:E6:8A:D4:BF:5E:87:7D:F5:00:E8:A0
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 6BB0C8359510A289597CD2FD05506C49C131DB53
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a663030643a3a2f34382d3438203d3e20323035303336.roa
Signing time: Wed 05 Nov 2025 11:02:30 +0000
ROA not before: Wed 05 Nov 2025 10:57:30 +0000
ROA not after: Wed 04 Nov 2026 11:02:30 +0000
asID: 205036
IP address blocks: 2a0f:5fc0:f00d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:b0:c8:35:95:10:a2:89:59:7c:d2:fd:05:50:6c:49:c1:31:db:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Nov 5 10:57:30 2025 GMT
Not After : Nov 4 11:02:30 2026 GMT
Subject: CN=844793408DCCA6CCB3E68AD4BF5E877DF500E8A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:73:4e:72:6a:e4:40:14:e2:49:7d:d5:b9:a4:
7b:9e:d5:56:17:7e:f3:0a:7f:44:f8:85:16:b3:80:
79:58:b8:0f:79:79:69:6b:1d:b5:8d:e0:38:9c:00:
93:a6:62:d8:ec:2c:46:ca:86:25:cc:a4:c7:14:c5:
4d:b3:5d:54:8c:8b:7f:85:e0:13:80:98:12:55:92:
5d:17:19:f5:ac:39:4a:83:11:c0:a0:62:5d:91:01:
3c:d1:37:70:a4:db:71:27:f5:c6:ac:93:00:86:ae:
7c:bb:6a:6c:4a:5a:88:fc:65:64:ab:14:16:c1:19:
53:f2:d1:26:4a:2e:de:02:53:2c:2b:de:ed:62:90:
fa:30:b3:11:e0:d5:e6:33:52:db:64:1f:c4:ad:ad:
31:c8:b3:ad:98:31:4e:2a:0f:8f:8e:d6:c2:8e:32:
f6:b7:08:60:56:02:ad:07:10:10:09:9f:65:a8:59:
78:1c:b4:ec:21:42:8c:21:8e:d6:84:47:72:a1:cb:
0b:db:fb:4b:5d:22:01:53:6e:de:fc:77:4a:4e:a0:
f2:e9:e5:4d:0f:97:60:12:1a:21:09:82:8b:63:ff:
98:c4:84:94:c9:58:7e:fc:f2:13:f3:69:9f:4f:f5:
8f:79:26:35:14:04:e7:4a:d2:12:68:2d:ab:81:0e:
e3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:47:93:40:8D:CC:A6:CC:B3:E6:8A:D4:BF:5E:87:7D:F5:00:E8:A0
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a663030643a3a2f34382d3438203d3e20323035303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5fc0:f00d::/48
Signature Algorithm: sha256WithRSAEncryption
57:d7:51:2f:3e:62:39:b7:f6:06:01:35:c6:5b:07:ea:c4:a1:
4d:e2:e3:97:73:12:db:1a:42:79:67:53:e7:4a:29:e7:5b:b5:
04:25:46:cc:a1:5c:9b:7c:14:bd:c0:f6:1d:aa:c3:84:23:81:
2b:dc:fa:c2:01:22:ec:72:ab:94:f9:fb:fe:09:2e:e7:94:7c:
ea:cb:66:80:b5:e8:4d:dc:8f:6d:6b:87:4a:36:a0:7e:ab:7f:
31:f8:f6:bc:ce:e2:eb:0d:6a:c7:4e:0a:da:23:5c:0e:2a:77:
f0:d4:db:e1:cd:0e:8d:f1:ad:6a:28:1b:ad:e9:65:b9:37:70:
48:77:57:a1:1c:39:ea:74:a2:da:d4:f5:83:d1:7a:3e:91:39:
c8:eb:b6:17:bf:cd:06:92:b3:34:60:81:5e:52:45:b1:03:d6:
d0:16:fb:6c:17:2f:07:24:b6:ba:8c:3c:2d:a3:cd:3f:8b:50:
b3:e1:97:07:ad:84:b4:32:97:8c:a2:0b:12:04:f7:fb:02:41:
42:09:08:94:d3:ac:5f:d2:bc:66:1d:42:e7:3a:d8:41:31:0b:
fa:66:54:6f:86:35:07:dd:44:21:9c:ad:a0:bc:40:ef:d2:9b:
72:0a:fa:0c:c1:60:c9:38:db:50:39:d1:93:6b:e4:38:39:fa:
fa:73:ad:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:46:50 2025 by rpki-client