Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a6665653a3a2f34382d3438203d3e20323035303336.roa
File: 326130663a356663303a6665653a3a2f34382d3438203d3e20323035303336.roa (raw, json)
Hash identifier: sgKb1dwb+yOP2QySpduAJeLZbiJJdLEfbfVpO0+8Lgg=
Subject key identifier: 50:EB:47:0A:35:7C:81:F6:69:04:D2:FC:E5:B0:38:9F:2F:51:BC:5B
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 088AF8C8DA710C0205CF22A2DC38D0B1C28779E4
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a6665653a3a2f34382d3438203d3e20323035303336.roa
Signing time: Wed 05 Nov 2025 11:03:58 +0000
ROA not before: Wed 05 Nov 2025 10:58:58 +0000
ROA not after: Wed 04 Nov 2026 11:03:58 +0000
asID: 205036
IP address blocks: 2a0f:5fc0:fee::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:8a:f8:c8:da:71:0c:02:05:cf:22:a2:dc:38:d0:b1:c2:87:79:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Nov 5 10:58:58 2025 GMT
Not After : Nov 4 11:03:58 2026 GMT
Subject: CN=50EB470A357C81F66904D2FCE5B0389F2F51BC5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:97:b4:e1:f2:df:0a:cd:34:7e:aa:d7:ab:19:
ae:c5:35:3a:05:80:e0:f1:9a:eb:27:60:45:e3:57:
64:bd:6f:7e:62:3e:3c:6b:47:ac:84:d7:a9:7f:78:
05:2f:50:fc:f8:a8:7d:f3:be:d0:19:f3:e1:fa:6d:
b5:e7:a4:49:8d:e2:15:96:b5:20:89:b6:b6:0e:06:
30:73:34:d8:2d:19:d6:3d:9e:de:e9:aa:64:58:f6:
09:a6:17:f5:52:5c:f1:c5:f1:aa:4e:6b:95:33:9a:
61:96:1a:0b:55:3b:38:6c:1c:cf:63:2b:62:aa:e4:
ab:09:9e:f9:c0:f4:00:a2:23:cf:78:ad:ab:c1:7d:
0b:93:61:86:f4:f0:2c:cf:ee:d7:81:10:e5:90:a0:
99:70:48:38:c0:08:5a:df:e3:71:2d:a6:98:ca:f3:
e5:cf:0d:c1:6c:17:88:14:03:9f:14:61:58:f4:21:
89:de:7c:e4:4a:d4:c5:30:c3:7a:9a:a1:70:1b:4c:
f3:1b:88:9d:53:69:0d:25:ea:b2:f2:92:57:24:2e:
8c:bf:bc:d2:b3:a2:a8:a5:69:a6:5f:be:17:58:e1:
d7:36:10:2d:ac:4e:f5:cd:72:c4:15:9e:56:ee:33:
65:43:a6:19:74:76:18:ff:0f:9b:24:83:2b:de:1f:
bb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EB:47:0A:35:7C:81:F6:69:04:D2:FC:E5:B0:38:9F:2F:51:BC:5B
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a6665653a3a2f34382d3438203d3e20323035303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5fc0:fee::/48
Signature Algorithm: sha256WithRSAEncryption
ad:7a:d5:c9:b4:be:6e:cd:a2:7f:ac:c8:85:60:64:c1:95:37:
a7:de:48:03:36:b8:83:ac:82:f1:4f:a0:bd:ff:71:b7:b2:f2:
3b:d6:a4:70:f0:07:82:b9:14:d1:8c:e4:36:d2:d2:1b:4a:cf:
c7:1f:4c:c9:ab:7f:f3:8a:63:c7:61:b4:8f:ed:a7:9c:60:a5:
15:59:7f:78:7f:4e:fd:04:ba:32:13:dd:70:09:c2:63:b2:91:
79:18:00:6d:9a:f4:6f:d9:cb:96:db:19:63:5e:99:b6:4b:9b:
66:b6:77:11:0e:c6:01:01:39:26:32:d0:0e:dd:0a:d5:95:de:
ed:ad:93:eb:8e:8c:d3:bd:3b:2f:f8:46:e3:31:ca:ca:c3:0e:
cc:1f:40:89:8b:b9:e1:2d:2d:cf:62:6b:63:17:a2:2b:8b:6e:
f0:f1:e7:c0:5e:b7:23:a1:17:c8:a8:86:bc:44:b1:ee:8b:ea:
f4:87:bb:d2:f2:8c:02:b2:30:1a:29:09:92:89:72:80:4a:69:
3b:d4:4a:ee:41:f9:90:5b:e4:aa:44:70:85:aa:43:ff:c6:e6:
95:1f:8d:5e:76:29:b7:35:e3:34:c4:1f:78:0a:76:ce:4f:84:
40:d0:16:d9:d2:13:f0:4d:6d:eb:61:a3:fc:c6:a8:0e:00:39:
f9:93:57:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:04:47 2025 by rpki-client