Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a663030643a3a2f34382d3438203d3e20323035303336.roa
File: 326130663a356663303a663030643a3a2f34382d3438203d3e20323035303336.roa (raw, json)
Hash identifier: SCI/BPtn6yW+04laYKZ7SXSJny5K/GC/UYy3z8f9J2s=
Subject key identifier: D6:69:0F:FB:BE:62:AB:93:C6:EA:D4:A7:52:E6:73:09:A3:88:D7:1B
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 4ADC37327F22E78D124664FB7273299C87B64E65
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a663030643a3a2f34382d3438203d3e20323035303336.roa
Signing time: Wed 07 Oct 2026 11:49:35 +0000
ROA not before: Wed 07 Oct 2026 11:44:35 +0000
ROA not after: Wed 06 Oct 2027 11:49:35 +0000
asID: 205036
IP address blocks: 2a0f:5fc0:f00d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:dc:37:32:7f:22:e7:8d:12:46:64:fb:72:73:29:9c:87:b6:4e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Oct 7 11:44:35 2026 GMT
Not After : Oct 6 11:49:35 2027 GMT
Subject: CN=D6690FFBBE62AB93C6EAD4A752E67309A388D71B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0e:b7:3a:51:cd:9a:20:4e:62:81:90:a4:6f:
f1:ea:14:46:e5:dd:cf:7d:e0:f2:0a:2f:ae:32:ef:
f1:02:8a:2e:d1:f3:65:17:dc:f2:ad:7c:21:6c:ce:
4b:df:73:a1:6f:b3:22:b5:d1:5b:a5:35:d5:0e:41:
97:22:de:d2:2c:7e:f9:ec:79:f7:15:f1:e8:96:53:
a6:70:eb:69:ca:fe:cf:a5:83:21:33:00:19:74:74:
ed:40:15:fc:64:aa:7a:2a:c2:a3:98:a1:cb:4b:cc:
13:63:98:d3:9a:c0:da:ba:53:d2:f1:9d:3b:e1:c0:
f2:ff:85:8d:97:ff:27:33:36:a7:4f:47:ef:60:be:
2b:2d:85:2a:94:e4:42:66:85:80:d0:98:37:d7:09:
28:89:fd:26:f6:bc:08:ab:11:ef:3d:45:a2:30:ca:
1f:a7:f5:07:1b:a0:b9:df:35:c3:5d:fa:76:95:57:
a2:b0:ff:d8:72:5b:b3:46:90:33:8e:6f:71:9e:1d:
28:35:9d:00:89:94:7a:ff:77:c2:d5:77:79:53:4f:
e0:c6:d5:5d:97:cf:b2:66:6c:c7:32:06:8e:2f:b7:
b8:18:63:56:d5:44:d8:51:35:53:44:fb:54:d8:29:
fd:69:5a:8b:b0:ba:c1:15:40:be:6d:0a:1b:1e:7d:
62:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:69:0F:FB:BE:62:AB:93:C6:EA:D4:A7:52:E6:73:09:A3:88:D7:1B
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a663030643a3a2f34382d3438203d3e20323035303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5fc0:f00d::/48
Signature Algorithm: sha256WithRSAEncryption
33:b8:5f:13:12:2a:0f:30:05:d0:9b:21:c7:96:67:ee:af:fc:
48:65:b3:22:88:ac:35:bf:8f:11:23:98:67:71:8d:e6:36:78:
34:69:46:ca:fc:ca:2d:f8:12:69:b9:2a:2c:78:67:f4:05:70:
69:be:12:c9:05:39:0a:88:17:2a:d8:9d:a7:3a:67:46:eb:ed:
14:35:d7:20:0d:32:9f:cb:05:33:dd:26:2a:00:b8:85:5f:87:
f4:48:0d:a3:ad:2d:46:c0:66:68:be:cc:bb:ae:b4:f8:ef:5e:
f2:ed:45:a6:28:67:cb:95:a6:e9:11:5d:90:22:bf:42:35:a7:
e9:dc:2d:3d:57:06:4d:cd:c1:ce:58:90:74:8c:f5:b3:f9:b6:
f1:da:4c:5a:35:47:a3:6a:b0:ab:8f:f6:cb:0b:84:dc:e6:ec:
72:50:62:b7:c2:84:69:11:81:f5:e4:fc:9b:6d:35:43:b2:99:
4e:56:65:fd:e2:e8:d2:7d:5a:c0:bc:06:05:f8:d3:2c:34:f1:
6c:45:44:94:27:42:6d:e0:59:2d:2f:2e:35:43:51:fd:3d:f5:
35:c1:41:43:5f:6f:08:bc:eb:d8:c1:85:e0:68:c9:4b:52:6e:
fb:bc:e2:a9:fb:63:3d:7e:05:2b:0a:e3:56:ad:ae:e1:f3:f7:
88:a1:01:55
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUStw3Mn8i540SRmT7cnMpnIe2TmUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTIwNWViZjA2NWZjNDkyOWYxODAyNjYyYWU2MmQ3Zjk3
NjI2MDBlNjAeFw0yNjEwMDcxMTQ0MzVaFw0yNzEwMDYxMTQ5MzVaMDMxMTAvBgNV
BAMTKEQ2NjkwRkZCQkU2MkFCOTNDNkVBRDRBNzUyRTY3MzA5QTM4OEQ3MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxDrc6Uc2aIE5igZCkb/HqFEbl
3c994PIKL64y7/ECii7R82UX3PKtfCFszkvfc6FvsyK10VulNdUOQZci3tIsfvns
efcV8eiWU6Zw62nK/s+lgyEzABl0dO1AFfxkqnoqwqOYoctLzBNjmNOawNq6U9Lx
nTvhwPL/hY2X/yczNqdPR+9gvisthSqU5EJmhYDQmDfXCSiJ/Sb2vAirEe89RaIw
yh+n9QcboLnfNcNd+naVV6Kw/9hyW7NGkDOOb3GeHSg1nQCJlHr/d8LVd3lTT+DG
1V2Xz7JmbMcyBo4vt7gYY1bVRNhRNVNE+1TYKf1pWouwusEVQL5tChsefWJlAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQU1mkP+75iq5PG6tSnUuZzCaOI1xswHwYDVR0j
BBgwFoAU4gXr8GX8SSnxgCZirmLX+XYmAOYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEtODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1
N2ZlLzAvRTIwNUVCRjA2NUZDNDkyOUYxODAyNjYyQUU2MkQ3Rjk3NjI2MDBFNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRnWHI4R1g4U1NueGdDWmlybUxYLVhZ
bUFPWS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEt
ODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1N2ZlLzAvMzI2MTMwNjYzYTM1NjY2MzMw
M2E2NjMwMzA2NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzNTMwMzMzNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoPX8DwDTANBgkqhkiG9w0BAQsFAAOCAQEAM7hfExIqDzAF0Jsh
x5Zn7q/8SGWzIoisNb+PESOYZ3GN5jZ4NGlGyvzKLfgSabkqLHhn9AVwab4SyQU5
CogXKtidpzpnRuvtFDXXIA0yn8sFM90mKgC4hV+H9EgNo60tRsBmaL7Mu660+O9e
8u1Fpihny5Wm6RFdkCK/QjWn6dwtPVcGTc3BzliQdIz1s/m28dpMWjVHo2qwq4/2
ywuE3ObsclBit8KEaRGB9eT8m201Q7KZTlZl/eLo0n1awLwGBfjTLDTxbEVElCdC
beBZLS8uNUNR/T31NcFBQ19vCLzr2MGF4GjJS1Ju+7ziqftjPX4FKwrjVq2u4fP3
iKEBVQ==
-----END CERTIFICATE-----
Generated at Sat Oct 10 15:52:53 2026 by rpki-client