Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a626162613a3a2f34382d3438203d3e20323035303336.roa
File: 326130663a356663303a626162613a3a2f34382d3438203d3e20323035303336.roa (raw, json)
Hash identifier: r5Z0Bf1x67r5DY6qq++iPUsfEYuPIgEsoR10j2scyqA=
Subject key identifier: 5F:92:2C:84:EF:0E:30:C6:F7:B5:72:AB:5C:55:EF:98:42:4B:19:55
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 62412691B170C0C4EF0C7153BCDD63225BE1FFA2
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a626162613a3a2f34382d3438203d3e20323035303336.roa
Signing time: Wed 07 Oct 2026 11:49:35 +0000
ROA not before: Wed 07 Oct 2026 11:44:35 +0000
ROA not after: Wed 06 Oct 2027 11:49:35 +0000
asID: 205036
IP address blocks: 2a0f:5fc0:baba::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 06:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:41:26:91:b1:70:c0:c4:ef:0c:71:53:bc:dd:63:22:5b:e1:ff:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Oct 7 11:44:35 2026 GMT
Not After : Oct 6 11:49:35 2027 GMT
Subject: CN=5F922C84EF0E30C6F7B572AB5C55EF98424B1955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2c:ef:81:f9:5d:d6:54:0b:90:e1:c6:67:e4:
a3:cb:56:e1:c5:b0:34:06:b9:27:44:0f:cb:8c:9a:
fc:cb:1f:3d:c6:18:c5:aa:59:d7:6c:e5:d8:18:a8:
90:d6:e4:24:a9:58:40:56:eb:db:c6:9d:7c:b9:89:
be:f5:6b:24:33:c2:c9:3f:d3:23:d5:e6:94:6d:d5:
e5:83:a4:36:bf:f4:16:b5:cc:d5:b5:63:e0:64:d8:
61:4a:4a:1a:8e:b1:69:25:11:b9:c0:54:4e:b0:34:
05:e1:4e:bf:f7:73:22:df:49:cf:8a:09:be:dc:51:
51:6a:ee:e2:79:4d:f5:3d:a8:b7:67:37:e7:e9:90:
64:21:fa:ab:12:75:91:46:4f:04:b6:eb:57:f6:ec:
9a:f2:a2:03:e5:ca:4e:6b:ad:de:4f:84:6d:8c:ec:
bc:9a:e4:c7:24:56:6b:3c:03:f7:84:ee:9b:4f:1d:
aa:89:25:3e:15:a6:b6:d7:7d:27:97:07:a2:00:4c:
65:60:9c:b6:94:3c:dd:92:e4:57:1e:bb:58:d3:6a:
45:c3:58:66:8d:f5:4b:53:a8:a0:42:48:67:e8:24:
a1:dd:e8:6e:7b:ef:5f:13:30:79:4b:6b:9c:19:10:
06:9d:7f:50:2b:75:14:ea:8e:b9:18:85:4b:eb:7e:
b5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:92:2C:84:EF:0E:30:C6:F7:B5:72:AB:5C:55:EF:98:42:4B:19:55
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a626162613a3a2f34382d3438203d3e20323035303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5fc0:baba::/48
Signature Algorithm: sha256WithRSAEncryption
19:c4:8a:7a:2e:fb:51:25:d4:87:e7:4f:f0:34:d8:1a:47:6b:
6b:74:e3:e4:cf:80:d6:a7:53:94:e4:ed:d4:f1:b1:5a:48:b0:
80:33:cd:33:60:aa:e4:e1:45:3a:63:f1:a5:e9:93:1e:ce:ea:
88:cf:da:24:34:fa:c6:1e:dd:69:41:48:46:e0:f8:f8:60:35:
fe:6e:d9:a7:46:38:5d:00:38:1c:2f:9d:dc:aa:ac:72:79:a3:
b8:5d:69:89:8c:43:e0:b2:1e:64:86:1a:b4:c0:cf:ab:02:48:
c0:f9:12:37:bd:b4:d4:7a:27:96:fe:b0:da:45:ad:3a:ec:e3:
6f:4e:3f:c4:3b:b4:22:36:ad:f6:10:d5:2e:69:a0:83:96:b0:
5a:36:e5:3b:87:e6:d2:7b:80:76:7a:91:a4:cc:f6:d0:0c:34:
da:4a:0d:23:d5:f1:f6:54:d8:3d:2f:c2:2b:cb:99:3f:33:07:
d3:56:f8:64:c6:de:03:48:6f:21:bc:96:98:d6:0e:cf:8e:5c:
1b:d3:2e:01:d2:c3:a2:a3:34:09:cf:18:c1:57:1c:65:36:19:
0b:54:34:4a:8a:e1:19:f1:a3:cb:b0:ee:49:76:e7:84:a7:bb:
00:ac:12:a4:cf:2a:51:81:87:76:25:49:45:77:0d:22:6c:63:
dc:87:63:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:44:02 2026 by rpki-client