Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323032303a3a2f34342d3434203d3e20323133343637.roa
File: 326130653a386630323a323032303a3a2f34342d3434203d3e20323133343637.roa (raw, json)
Hash identifier: iXV+IUXDm75X8NXWr1e+qoSx6TEURdAKgEHYZ98ZB3Q=
Subject key identifier: E6:80:47:D3:2C:29:78:05:AE:FE:AB:BB:60:C3:BA:F5:D2:D3:9E:75
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 0C980CE08EA454DBF0FAAB12E986A4242E0186A2
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323032303a3a2f34342d3434203d3e20323133343637.roa
Signing time: Thu 22 Oct 2026 19:49:57 +0000
ROA not before: Thu 22 Oct 2026 19:44:57 +0000
ROA not after: Thu 21 Oct 2027 19:49:57 +0000
asID: 213467
IP address blocks: 2a0e:8f02:2020::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:27:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:98:0c:e0:8e:a4:54:db:f0:fa:ab:12:e9:86:a4:24:2e:01:86:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Oct 22 19:44:57 2026 GMT
Not After : Oct 21 19:49:57 2027 GMT
Subject: CN=E68047D32C297805AEFEABBB60C3BAF5D2D39E75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:9a:0f:55:0f:c5:5c:ea:6b:85:8c:ab:92:
85:5f:e7:09:4c:bc:24:06:7e:c7:37:d4:a8:ee:54:
82:cf:5b:44:f6:e2:bf:75:57:1a:32:81:bf:74:28:
c6:60:9a:20:df:19:ff:41:6d:1c:16:17:55:c9:7b:
1b:26:d9:e9:72:d5:2d:6a:9b:d3:68:b5:83:cf:3a:
97:80:c7:51:be:83:89:f8:d5:54:13:f2:ad:ab:e7:
19:34:74:c4:33:a3:4b:4c:e7:69:c2:23:d8:d0:e4:
8d:42:81:e5:d1:be:af:25:ed:ed:78:2c:29:62:dc:
17:94:27:e4:f2:5f:e4:be:22:53:75:5b:ec:c2:91:
be:63:2f:ef:d5:fb:a1:3d:0c:fc:95:1b:24:1e:96:
97:9e:b5:b3:f5:df:90:d8:7f:f8:cf:ec:5c:dd:bb:
2d:83:d4:c7:57:2d:a9:be:ad:bf:1a:61:19:bd:78:
7d:b6:37:22:58:b0:3e:b8:74:46:93:8b:c3:04:1b:
cf:03:56:3c:93:7a:c0:95:13:5f:d4:de:e0:7e:ad:
78:7e:82:8a:ba:12:1d:bf:c1:f3:7e:42:67:96:a3:
51:57:2d:0a:3a:2c:9a:fe:b6:76:db:39:78:49:31:
6a:8c:88:21:f9:57:c9:cf:79:a1:4a:cb:32:ec:9a:
f9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:80:47:D3:2C:29:78:05:AE:FE:AB:BB:60:C3:BA:F5:D2:D3:9E:75
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323032303a3a2f34342d3434203d3e20323133343637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2020::/44
Signature Algorithm: sha256WithRSAEncryption
19:f5:f7:5d:65:9a:45:0a:c2:d4:19:3d:e0:8d:7c:da:ff:47:
a4:83:4e:82:f3:42:68:c9:c2:8f:54:12:3f:20:0b:a6:85:ee:
a5:40:e9:1e:04:5c:3e:95:be:9e:76:61:24:4c:a9:55:75:1a:
a2:7a:0f:cf:e2:f5:31:fb:40:f8:de:af:50:75:8c:39:ea:92:
8b:56:55:f5:9d:e0:57:b6:99:ad:96:79:49:d2:42:f3:82:4a:
22:63:97:3e:82:87:df:df:c5:21:30:8f:ca:ac:06:a2:c9:ff:
fb:f5:56:72:d0:a2:fb:83:f2:d8:f9:c8:9d:ee:77:f4:ac:8c:
d8:ef:19:e3:d2:0e:0c:23:de:71:ad:df:40:c3:42:9c:de:96:
bd:2d:b8:44:1f:b7:a2:c9:ca:01:a8:a4:a5:28:21:99:12:f7:
e4:3e:77:40:77:da:8e:d4:1a:b4:4d:11:e2:a9:19:9c:26:3a:
ef:61:f8:95:f3:66:43:b3:5f:5b:54:b6:c3:2c:99:21:40:be:
50:73:db:73:ea:f3:d9:df:9e:4c:6d:55:be:54:46:c1:c2:0b:
71:36:ee:a5:e9:4c:ea:15:f6:a7:a2:2b:26:a3:03:7e:2c:81:
00:a7:90:c8:5c:07:6e:40:3a:c1:75:56:3b:60:98:0e:5c:8c:
5f:b5:4e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:06:43 2026 by rpki-client