Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a666565643a3a2f34382d3438203d3e20323035303336.roa
File: 326130663a356663303a666565643a3a2f34382d3438203d3e20323035303336.roa (raw, json)
Hash identifier: xpwIwfTkmJ6MVFD7/8ThvhoBcV+rx30IkMkw3EnowGM=
Subject key identifier: 33:42:3F:86:B7:8E:6E:F3:8F:46:B1:A1:28:4A:AA:CC:14:FB:BA:9E
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 447B819828D79315E0E6AC75C0985BA56D73164B
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a666565643a3a2f34382d3438203d3e20323035303336.roa
Signing time: Mon 06 Apr 2026 18:47:02 +0000
ROA not before: Mon 06 Apr 2026 18:42:02 +0000
ROA not after: Mon 05 Apr 2027 18:47:02 +0000
asID: 205036
IP address blocks: 2a0f:5fc0:feed::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:7b:81:98:28:d7:93:15:e0:e6:ac:75:c0:98:5b:a5:6d:73:16:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Apr 6 18:42:02 2026 GMT
Not After : Apr 5 18:47:02 2027 GMT
Subject: CN=33423F86B78E6EF38F46B1A1284AAACC14FBBA9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2c:d6:11:be:a4:d0:ea:83:4c:4c:13:e4:91:
7c:21:3f:c9:51:24:af:df:e4:6b:79:3e:03:fb:a6:
d7:37:45:bd:07:31:5c:c4:6c:e3:6c:b3:39:1b:3e:
ec:cb:ee:cc:38:7c:d5:3b:15:aa:f7:1a:9d:10:eb:
c8:9a:64:6d:4b:3e:05:03:6b:1e:49:aa:c0:eb:0d:
10:ca:5c:16:09:38:81:bc:6b:62:90:3e:78:b8:d9:
3c:35:81:9b:16:58:be:5f:24:f2:ad:27:b8:e4:d2:
3d:57:9b:8a:e8:da:ef:17:f5:a8:32:1b:a5:15:50:
f9:55:16:51:50:20:74:02:7e:5c:32:a4:7a:99:cc:
e2:65:81:87:9c:76:16:33:f3:10:32:20:d8:29:fc:
e0:e9:94:c1:07:50:1f:df:61:66:8a:5b:55:93:27:
7c:cd:e4:ee:7f:5d:6b:28:ea:69:05:8b:31:3e:80:
bd:09:68:00:8b:2d:16:d0:53:6b:ae:69:ad:66:48:
92:1d:e7:8b:a3:26:50:08:41:3c:04:df:45:9e:b7:
33:29:ae:49:29:80:df:47:a0:20:5b:ec:6a:62:b2:
9d:55:4c:f2:c8:91:9b:1b:94:b1:2a:18:f0:bf:99:
e3:ad:9d:9d:d8:c6:e2:b7:ab:8d:fd:9b:8e:dd:36:
0b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:42:3F:86:B7:8E:6E:F3:8F:46:B1:A1:28:4A:AA:CC:14:FB:BA:9E
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a666565643a3a2f34382d3438203d3e20323035303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5fc0:feed::/48
Signature Algorithm: sha256WithRSAEncryption
12:21:b7:8f:dd:06:b8:1f:0f:69:b5:7c:ab:be:f7:60:d3:d2:
1a:10:83:4b:f3:df:8c:f9:e8:0d:63:12:c8:8f:a9:62:dc:61:
95:50:24:28:3f:b2:03:5e:8e:1c:14:7f:e9:f4:55:d7:78:82:
58:6e:8f:98:cc:2f:a6:de:5c:cc:ef:9d:a0:38:30:98:87:2f:
61:ac:a2:0e:fd:49:b3:2a:e9:a6:88:f8:0a:19:ee:05:4b:27:
03:1d:6e:1a:6f:a8:73:08:fc:a6:b9:33:1d:37:32:c6:42:39:
67:1e:18:5a:0f:f2:9f:c5:09:e5:10:71:8e:2a:62:11:fd:5e:
24:aa:83:d6:32:23:f5:eb:16:7b:32:6a:17:2a:1b:9d:03:73:
82:c1:bf:90:4e:49:dc:00:bc:7c:f1:a0:35:06:c7:6f:eb:19:
ee:f6:9f:18:1d:3d:72:04:58:d6:95:80:04:e3:72:62:74:da:
6d:2e:37:81:a0:99:c1:1a:21:58:10:59:93:93:e6:22:d3:11:
fc:57:15:11:71:b5:8e:8c:14:b0:0b:ac:7b:27:03:0b:70:27:
aa:07:9f:5b:e9:c6:db:49:00:0b:5b:3e:c8:c1:d3:dd:d8:9f:
97:da:25:48:d0:a6:7f:db:a7:c8:52:6b:d8:f0:0d:b5:ff:22:
04:cf:39:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:58:45 2026 by rpki-client