Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a313130303a3a2f34302d3430203d3e20323036323135.roa
File: 326130653a386630323a313130303a3a2f34302d3430203d3e20323036323135.roa (raw, json)
Hash identifier: yEpzi0kGTaM1644lWu0Fw+i1Sqxk5OAN1D6JeTVTUCY=
Subject key identifier: BA:C4:8F:51:52:F8:4E:94:32:74:B1:17:14:AF:44:BA:36:ED:1B:D1
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 30B72E7ED7E50224C4361D3354632927F0040C14
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a313130303a3a2f34302d3430203d3e20323036323135.roa
Signing time: Thu 22 Oct 2026 19:49:56 +0000
ROA not before: Thu 22 Oct 2026 19:44:56 +0000
ROA not after: Thu 21 Oct 2027 19:49:56 +0000
asID: 206215
IP address blocks: 2a0e:8f02:1100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:b7:2e:7e:d7:e5:02:24:c4:36:1d:33:54:63:29:27:f0:04:0c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Oct 22 19:44:56 2026 GMT
Not After : Oct 21 19:49:56 2027 GMT
Subject: CN=BAC48F5152F84E943274B11714AF44BA36ED1BD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:94:04:01:1e:5f:ae:8a:8e:d1:59:aa:b3:
b0:80:5d:29:58:23:52:77:cd:0c:da:e8:df:69:eb:
e8:ec:3a:41:0b:4c:2e:4d:3e:89:03:54:fd:1e:9f:
23:c5:73:f7:7b:c6:f9:28:df:cd:04:c3:b4:1f:ff:
49:11:a1:48:f6:f2:54:02:fb:44:b5:74:df:ba:4d:
a6:4e:af:30:1a:18:e8:84:0e:10:40:e7:e9:0f:2a:
a4:5c:01:ce:b4:4a:8a:73:be:d2:58:3e:b9:9c:b3:
52:2b:40:86:0b:6a:96:30:11:97:f1:b9:d8:32:09:
34:fe:c6:5e:9d:61:5c:ec:fc:5e:64:0c:60:1a:94:
8f:9c:9f:3c:06:f9:2a:f5:84:ab:fe:1f:77:80:54:
5b:95:7f:23:98:c3:c2:cf:1e:06:fb:6a:0b:e1:a0:
a0:ce:ed:e6:62:d2:e4:43:3f:5d:90:5c:20:9e:48:
f8:20:a0:57:67:1f:4d:ef:a5:fc:74:e3:3e:ca:fa:
d1:69:ae:be:97:14:4d:61:04:e9:fe:a3:ac:79:fb:
a1:a0:e7:f2:58:cb:02:f5:bb:83:67:9a:60:a4:15:
a0:87:54:b7:2e:25:5c:3a:a4:1e:2b:81:35:61:2b:
01:71:cc:2f:b5:e3:a8:78:6c:0e:24:87:5f:41:55:
82:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C4:8F:51:52:F8:4E:94:32:74:B1:17:14:AF:44:BA:36:ED:1B:D1
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a313130303a3a2f34302d3430203d3e20323036323135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:1100::/40
Signature Algorithm: sha256WithRSAEncryption
37:f1:c6:b3:e7:64:f9:b2:c7:8c:e8:c3:93:51:85:4b:76:7c:
3c:dd:70:82:b7:28:ec:81:e0:59:a7:c8:4d:c7:e0:65:c1:21:
2f:87:bb:48:92:b8:e8:cf:3e:f3:c0:83:d2:36:30:b4:a0:a0:
a1:b9:c0:2b:5e:c1:c4:da:b8:76:33:63:ee:52:cb:55:ed:01:
3b:c4:a6:76:62:a1:0d:97:39:b5:7f:de:c2:98:2b:48:d4:3c:
94:d6:a9:85:60:e4:93:25:42:c7:90:e6:3c:74:2c:92:64:52:
99:6b:48:18:f8:d2:ae:76:a1:70:d5:99:60:44:82:20:da:5d:
24:4c:bc:0a:15:fd:15:f6:a2:00:0a:15:57:d9:6f:2d:00:23:
15:65:a2:68:63:e0:72:a9:3f:67:ae:39:26:ce:59:e3:40:4e:
41:b3:78:d1:13:4e:28:eb:a2:dd:49:f4:ba:c3:d5:0e:f9:44:
20:47:95:8e:c6:d6:26:07:79:43:f2:b3:66:e5:50:3b:78:64:
33:b9:6c:18:d7:8d:b7:9a:4d:45:af:b1:ff:4d:43:94:83:d8:
0b:25:58:be:22:90:e2:ba:d2:ad:ae:a8:ce:a7:c9:89:6e:ad:
9d:14:a4:86:5a:79:75:f5:70:f3:17:08:b4:76:c4:8b:9d:e7:
9a:dd:ec:af
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUMLcuftflAiTENh0zVGMpJ/AEDBQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3
ZjQ4YjQ4NDAeFw0yNjEwMjIxOTQ0NTZaFw0yNzEwMjExOTQ5NTZaMDMxMTAvBgNV
BAMTKEJBQzQ4RjUxNTJGODRFOTQzMjc0QjExNzE0QUY0NEJBMzZFRDFCRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC22pQEAR5froqO0Vmqs7CAXSlY
I1J3zQza6N9p6+jsOkELTC5NPokDVP0enyPFc/d7xvko380Ew7Qf/0kRoUj28lQC
+0S1dN+6TaZOrzAaGOiEDhBA5+kPKqRcAc60SopzvtJYPrmcs1IrQIYLapYwEZfx
udgyCTT+xl6dYVzs/F5kDGAalI+cnzwG+Sr1hKv+H3eAVFuVfyOYw8LPHgb7agvh
oKDO7eZi0uRDP12QXCCeSPggoFdnH03vpfx04z7K+tFprr6XFE1hBOn+o6x5+6Gg
5/JYywL1u4NnmmCkFaCHVLcuJVw6pB4rgTVhKwFxzC+146h4bA4kh19BVYI3AgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUusSPUVL4TpQydLEXFK9EujbtG9EwHwYDVR0j
BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5
MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI
OUl0SVEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu
YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2
LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz
MjNhMzEzMTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjMwMzYzMjMxMzUu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ
MA4EAgACMAgDBgAqDo8CETANBgkqhkiG9w0BAQsFAAOCAQEAN/HGs+dk+bLHjOjD
k1GFS3Z8PN1wgrco7IHgWafITcfgZcEhL4e7SJK46M8+88CD0jYwtKCgobnAK17B
xNq4djNj7lLLVe0BO8SmdmKhDZc5tX/ewpgrSNQ8lNaphWDkkyVCx5DmPHQskmRS
mWtIGPjSrnahcNWZYESCINpdJEy8ChX9FfaiAAoVV9lvLQAjFWWiaGPgcqk/Z645
Js5Z40BOQbN40RNOKOui3Un0usPVDvlEIEeVjsbWJgd5Q/KzZuVQO3hkM7lsGNeN
t5pNRa+x/01DlIPYCyVYviKQ4rrSra6ozqfJiW6tnRSkhlp5dfVw8xcItHbEi53n
mt3srw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 20:58:49 2026 by rpki-client