Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a6665653a3a2f34382d3438203d3e20323035303336.roa
File: 326130663a356663303a6665653a3a2f34382d3438203d3e20323035303336.roa (raw, json)
Hash identifier: XXC8dyWu4UshssZO6zCwwZoBmOEgPqZZ6HFk4GKmQe8=
Subject key identifier: FB:BA:77:40:7C:C3:87:00:F5:8A:FD:30:55:47:AE:5B:C4:02:47:62
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 0C4179FA945DF5E0A437455F99CB9B146038795B
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a6665653a3a2f34382d3438203d3e20323035303336.roa
Signing time: Wed 07 Oct 2026 11:49:35 +0000
ROA not before: Wed 07 Oct 2026 11:44:35 +0000
ROA not after: Wed 06 Oct 2027 11:49:35 +0000
asID: 205036
IP address blocks: 2a0f:5fc0:fee::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:41:79:fa:94:5d:f5:e0:a4:37:45:5f:99:cb:9b:14:60:38:79:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Oct 7 11:44:35 2026 GMT
Not After : Oct 6 11:49:35 2027 GMT
Subject: CN=FBBA77407CC38700F58AFD305547AE5BC4024762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a9:98:d1:01:68:74:71:3d:ca:35:48:21:6f:
98:b9:e8:ea:a1:03:eb:8a:14:bc:3c:9b:58:08:e2:
3e:6e:2c:9d:9d:3c:96:54:0d:60:13:6d:5e:11:5b:
e7:7a:9c:29:2e:87:e8:d6:59:e8:bf:a4:7b:e3:7a:
58:d4:9e:9a:97:0c:05:a4:07:87:bf:38:40:7a:24:
1f:10:da:0a:86:51:22:bc:47:77:15:35:84:c6:69:
b6:22:5f:15:81:bd:fe:c3:13:f9:ee:3c:ac:83:48:
84:97:a9:96:2e:85:36:da:ae:dd:a9:91:61:da:d3:
1e:c8:33:dd:df:9e:27:66:2c:0f:d7:71:81:2a:da:
a2:e7:ef:f2:c3:d0:37:dc:d6:7f:de:f4:e3:e6:16:
2c:5c:60:39:06:51:e7:5e:22:bd:ea:80:a1:35:34:
5d:5b:cb:d6:07:68:ff:36:46:d9:0e:88:e0:fd:fc:
25:d4:bf:85:23:94:99:2e:a9:e1:db:d6:cf:41:b2:
65:f5:56:0c:db:0b:0e:64:dc:c7:9f:b0:5f:35:7c:
2b:2f:eb:61:53:42:5a:53:9a:f7:cf:4e:20:17:b0:
9e:b1:e4:89:b4:e1:aa:db:45:c7:ee:3e:06:d0:1a:
8d:2a:ae:78:fe:68:62:14:4d:fb:d7:85:43:e5:53:
44:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BA:77:40:7C:C3:87:00:F5:8A:FD:30:55:47:AE:5B:C4:02:47:62
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a6665653a3a2f34382d3438203d3e20323035303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5fc0:fee::/48
Signature Algorithm: sha256WithRSAEncryption
79:83:20:4e:20:bf:ca:0a:a7:ab:25:c8:f5:d4:90:f1:0f:a7:
65:d3:33:db:7b:a7:d7:ec:2a:af:04:4f:a8:01:54:56:f7:90:
28:08:92:23:c8:0d:de:8f:ca:d9:02:f9:ac:ad:53:1f:68:e3:
db:06:33:10:fc:b3:70:43:d0:a3:6e:20:8f:61:49:92:75:64:
d7:14:c4:d7:cb:e9:c0:bc:a3:15:68:56:f4:dc:1e:a6:38:cf:
d6:8c:7d:d1:a2:2b:27:58:d5:36:9b:b4:60:92:f2:8a:bb:80:
95:60:e2:11:55:4a:3e:16:79:c6:11:20:7e:0a:98:60:42:1e:
8a:c7:0d:15:a4:7d:a9:53:68:d4:df:7d:e6:42:3f:a9:a4:e8:
c5:c2:68:a3:84:06:f9:63:29:fd:fd:17:88:15:71:a6:84:86:
4b:30:aa:53:d5:e5:b4:1c:ef:9c:df:06:fe:5e:40:c7:97:e0:
ad:82:e6:49:11:30:43:32:de:a6:66:2d:cb:c8:f6:70:20:37:
3d:54:18:cb:82:ab:29:fc:6e:dc:d7:85:86:98:b9:e6:7e:49:
9c:ad:b0:1e:20:ec:67:d2:a1:04:0d:8b:bd:f2:97:15:58:42:
7e:18:86:2e:5a:c4:72:63:e8:1f:8f:d5:31:56:f1:e5:c7:d2:
3e:e2:48:e2
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUDEF5+pRd9eCkN0VfmcubFGA4eVswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTIwNWViZjA2NWZjNDkyOWYxODAyNjYyYWU2MmQ3Zjk3
NjI2MDBlNjAeFw0yNjEwMDcxMTQ0MzVaFw0yNzEwMDYxMTQ5MzVaMDMxMTAvBgNV
BAMTKEZCQkE3NzQwN0NDMzg3MDBGNThBRkQzMDU1NDdBRTVCQzQwMjQ3NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwqZjRAWh0cT3KNUghb5i56Oqh
A+uKFLw8m1gI4j5uLJ2dPJZUDWATbV4RW+d6nCkuh+jWWei/pHvjeljUnpqXDAWk
B4e/OEB6JB8Q2gqGUSK8R3cVNYTGabYiXxWBvf7DE/nuPKyDSISXqZYuhTbart2p
kWHa0x7IM93fnidmLA/XcYEq2qLn7/LD0Dfc1n/e9OPmFixcYDkGUedeIr3qgKE1
NF1by9YHaP82RtkOiOD9/CXUv4UjlJkuqeHb1s9BsmX1VgzbCw5k3MefsF81fCsv
62FTQlpTmvfPTiAXsJ6x5Im04arbRcfuPgbQGo0qrnj+aGIUTfvXhUPlU0TBAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQU+7p3QHzDhwD1iv0wVUeuW8QCR2IwHwYDVR0j
BBgwFoAU4gXr8GX8SSnxgCZirmLX+XYmAOYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEtODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1
N2ZlLzAvRTIwNUVCRjA2NUZDNDkyOUYxODAyNjYyQUU2MkQ3Rjk3NjI2MDBFNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRnWHI4R1g4U1NueGdDWmlybUxYLVhZ
bUFPWS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEt
ODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1N2ZlLzAvMzI2MTMwNjYzYTM1NjY2MzMw
M2E2NjY1NjUzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzUzMDMzMzYucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqD1/AD+4wDQYJKoZIhvcNAQELBQADggEBAHmDIE4gv8oKp6slyPXU
kPEPp2XTM9t7p9fsKq8ET6gBVFb3kCgIkiPIDd6PytkC+aytUx9o49sGMxD8s3BD
0KNuII9hSZJ1ZNcUxNfL6cC8oxVoVvTcHqY4z9aMfdGiKydY1TabtGCS8oq7gJVg
4hFVSj4WecYRIH4KmGBCHorHDRWkfalTaNTffeZCP6mk6MXCaKOEBvljKf39F4gV
caaEhkswqlPV5bQc75zfBv5eQMeX4K2C5kkRMEMy3qZmLcvI9nAgNz1UGMuCqyn8
btzXhYaYueZ+SZytsB4g7GfSoQQNi73ylxVYQn4Yhi5axHJj6B+P1TFW8eXH0j7i
SOI=
-----END CERTIFICATE-----
Generated at Mon Oct 12 00:42:24 2026 by rpki-client