Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323030303a3a2f34342d3434203d3e20323133303435.roa
File: 326130653a386630323a323030303a3a2f34342d3434203d3e20323133303435.roa (raw, json)
Hash identifier: N4c/41tZVXqPwsNIfSch5EH6a5wr/AsBhPqdRP+udlE=
Subject key identifier: 6F:99:9E:A5:73:19:4D:88:F6:01:3E:C5:C4:17:2D:02:D4:3C:84:63
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 05DECAA06C338860DE2F92AD607188DF10668764
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323030303a3a2f34342d3434203d3e20323133303435.roa
Signing time: Thu 22 Oct 2026 19:49:53 +0000
ROA not before: Thu 22 Oct 2026 19:44:53 +0000
ROA not after: Thu 21 Oct 2027 19:49:53 +0000
asID: 213045
IP address blocks: 2a0e:8f02:2000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:de:ca:a0:6c:33:88:60:de:2f:92:ad:60:71:88:df:10:66:87:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Oct 22 19:44:53 2026 GMT
Not After : Oct 21 19:49:53 2027 GMT
Subject: CN=6F999EA573194D88F6013EC5C4172D02D43C8463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:74:65:88:40:a4:b2:a9:20:f8:0d:87:83:f6:
d9:d0:66:56:30:66:2e:26:65:72:61:e7:f1:bd:2b:
57:0d:e4:2c:35:6c:80:32:98:b4:9c:16:4f:b2:bb:
aa:79:1e:d8:96:c4:bd:65:1d:8f:79:b4:fa:1b:1f:
1b:6f:93:ee:98:c9:e0:44:6b:db:72:1a:18:ac:d0:
01:a5:4a:ac:73:6f:24:8c:e6:ad:e9:dc:23:69:7b:
46:76:ce:77:75:6e:0b:ac:82:5d:d8:ad:eb:b8:dc:
d6:43:15:1c:f6:4f:0f:f7:b5:be:d2:ce:e9:54:68:
ee:1b:d4:24:41:15:96:df:d9:22:8f:8e:7a:7c:92:
bc:6e:7d:ac:53:47:68:f2:9b:89:3a:16:b4:b6:db:
17:d8:14:98:24:0f:2f:74:d0:79:11:7a:ea:f2:d1:
12:bd:9c:1c:0c:55:04:f3:ee:f6:27:ea:09:f1:74:
b9:6c:e6:5f:e9:97:14:26:06:b0:69:ab:78:46:76:
39:aa:06:d1:7b:48:56:73:55:58:39:06:1e:c5:aa:
15:49:26:d1:75:a2:5f:d8:dc:13:49:b6:b6:da:52:
25:30:86:20:9c:c4:a2:e8:0e:28:53:4a:63:9a:ee:
fb:a3:70:6d:de:eb:a3:60:d2:3e:5c:b3:1b:59:e4:
fc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:99:9E:A5:73:19:4D:88:F6:01:3E:C5:C4:17:2D:02:D4:3C:84:63
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323030303a3a2f34342d3434203d3e20323133303435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2000::/44
Signature Algorithm: sha256WithRSAEncryption
2c:91:54:cd:54:76:80:c5:9a:52:f8:59:7f:1a:7e:56:52:22:
9b:43:e6:09:7d:58:cb:33:03:8d:56:60:01:c3:31:f5:cd:61:
11:6b:0e:51:d1:ea:a3:8a:14:b4:a9:83:9d:9e:cc:c7:5e:5c:
56:20:d3:9a:c8:78:ae:ec:40:6c:19:b1:78:5c:8f:72:86:97:
19:f8:74:59:3b:42:5a:87:73:28:87:60:4a:e9:0f:0f:7c:57:
4a:cf:b1:1c:d6:5c:6f:0d:18:43:26:e0:be:0e:05:93:12:a7:
ca:81:1c:c6:78:29:68:43:e6:7c:95:7e:df:44:68:e7:63:29:
32:bd:c7:6e:6d:73:88:6a:72:49:cb:83:88:b0:aa:23:42:df:
7b:8f:4c:99:43:b8:bb:02:20:f0:ec:27:89:5c:21:5e:d1:0e:
24:5a:70:b0:75:d7:db:47:db:75:25:39:fc:c2:8f:d0:7d:7b:
b1:4c:2e:8f:a8:cc:c8:aa:52:f3:55:02:11:f2:99:24:d2:c1:
6e:c0:98:91:05:73:a3:ed:c3:36:04:fd:50:af:8e:87:9f:57:
9f:67:7d:23:ef:f6:5b:64:f4:d5:18:40:5e:aa:c3:dd:e4:83:
58:1f:ac:e0:3c:ee:11:08:eb:44:b5:df:95:47:bb:89:32:bd:
50:bf:0c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 10:10:03 2026 by rpki-client