Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323039303a3a2f34342d3438203d3e20323030383237.roa
File: 326130653a386630323a323039303a3a2f34342d3438203d3e20323030383237.roa (raw, json)
Hash identifier: TycAqrbe1fhLs9Co0Y3QZ4gj18e1s3rU9pVOYaH3+b8=
Subject key identifier: A1:FE:02:A2:37:BA:F5:F0:DF:55:49:6A:FD:39:9E:B3:29:FF:2F:63
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 2197FE905828482A609718D40894328BE4B60FED
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323039303a3a2f34342d3438203d3e20323030383237.roa
Signing time: Tue 13 Oct 2026 15:50:17 +0000
ROA not before: Tue 13 Oct 2026 15:45:17 +0000
ROA not after: Tue 12 Oct 2027 15:50:17 +0000
asID: 200827
IP address blocks: 2a0e:8f02:2090::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:97:fe:90:58:28:48:2a:60:97:18:d4:08:94:32:8b:e4:b6:0f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Oct 13 15:45:17 2026 GMT
Not After : Oct 12 15:50:17 2027 GMT
Subject: CN=A1FE02A237BAF5F0DF55496AFD399EB329FF2F63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8a:bd:cd:75:eb:af:d3:ac:12:4b:d4:d0:cd:
87:3f:84:a9:11:32:8f:4a:c7:50:f7:d7:81:58:2c:
f6:ef:9f:b3:71:19:5d:59:d1:d8:0f:29:f5:61:5b:
3a:34:10:d1:6b:9b:1f:5b:7d:7c:e1:84:b2:53:52:
13:22:84:2a:da:17:a2:b8:63:c4:30:3e:e2:56:6a:
70:23:c5:6f:68:32:24:b6:25:3f:7b:ad:a6:21:2d:
06:b1:cb:11:de:30:55:92:62:50:1d:6d:4f:ab:c6:
c8:b1:82:78:bf:bd:f2:b9:d8:38:b8:12:70:c1:83:
4e:4f:ec:48:33:d3:48:ac:0f:78:d6:9c:fd:0a:91:
15:af:3f:63:bf:3d:02:3a:12:cb:b5:6c:74:27:23:
ff:2c:6b:63:21:48:71:82:86:d2:76:db:4b:08:b5:
85:6a:b0:d9:dd:87:9a:5a:06:43:1f:c0:2b:15:ca:
b7:bd:db:45:e6:b9:bb:b1:ea:f7:29:3c:7a:e7:2e:
1f:f2:d3:56:f8:6c:78:7b:b3:00:73:3d:e6:64:07:
8d:f9:68:e8:3b:e8:7b:89:33:af:47:04:e8:2e:8e:
9e:c4:54:69:50:be:16:76:fc:09:5e:4f:dd:53:03:
a2:17:5a:c4:11:dc:60:e7:ad:d6:d5:61:bb:61:57:
48:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FE:02:A2:37:BA:F5:F0:DF:55:49:6A:FD:39:9E:B3:29:FF:2F:63
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323039303a3a2f34342d3438203d3e20323030383237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2090::/44
Signature Algorithm: sha256WithRSAEncryption
77:2a:55:52:3e:25:b4:db:a7:33:e1:fa:d5:d6:be:da:31:e0:
4e:79:86:9a:35:fd:8c:23:d3:0b:b6:b3:fa:8b:36:a7:62:8f:
29:71:86:db:87:cc:b2:d5:14:f6:7f:58:80:b9:cb:a0:47:b4:
93:47:1a:fa:28:e4:e0:08:85:10:42:98:ae:be:d6:27:ad:8f:
65:c5:40:75:4c:67:87:1d:6c:2d:5a:3e:a6:e7:7f:9d:1b:1c:
1e:d6:f4:80:ba:b7:5d:26:b6:37:fd:bd:0d:0e:19:86:8c:d6:
d9:6e:4c:af:83:f9:17:e3:d0:7b:12:4c:d0:d2:90:30:e8:d0:
45:2b:51:58:30:15:e3:d2:16:2a:f5:4f:b0:b1:d3:69:79:5a:
c6:db:64:10:32:10:ce:63:61:ab:ac:0b:a2:fd:87:47:ee:39:
27:7e:a0:5e:51:f7:05:25:a4:d2:c2:49:29:3c:bd:0e:a2:13:
a8:51:8a:15:d8:1f:85:32:1a:b8:5d:b1:dc:7d:ca:ff:e6:ea:
ba:b6:43:88:31:79:54:37:c7:83:71:09:e9:06:6a:1f:40:7e:
26:9a:80:51:c4:86:fb:d4:0d:a4:0d:60:5f:e4:21:b2:96:3d:
24:fc:59:d7:aa:e3:96:d1:d5:18:99:38:4b:2f:73:26:1f:9d:
65:69:4d:86
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUIZf+kFgoSCpglxjUCJQyi+S2D+0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3
ZjQ4YjQ4NDAeFw0yNjEwMTMxNTQ1MTdaFw0yNzEwMTIxNTUwMTdaMDMxMTAvBgNV
BAMTKEExRkUwMkEyMzdCQUY1RjBERjU1NDk2QUZEMzk5RUIzMjlGRjJGNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOir3Ndeuv06wSS9TQzYc/hKkR
Mo9Kx1D314FYLPbvn7NxGV1Z0dgPKfVhWzo0ENFrmx9bfXzhhLJTUhMihCraF6K4
Y8QwPuJWanAjxW9oMiS2JT97raYhLQaxyxHeMFWSYlAdbU+rxsixgni/vfK52Di4
EnDBg05P7Egz00isD3jWnP0KkRWvP2O/PQI6Esu1bHQnI/8sa2MhSHGChtJ220sI
tYVqsNndh5paBkMfwCsVyre920Xmubux6vcpPHrnLh/y01b4bHh7swBzPeZkB435
aOg76HuJM69HBOgujp7EVGlQvhZ2/AleT91TA6IXWsQR3GDnrdbVYbthV0gFAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUof4Coje69fDfVUlq/Tmesyn/L2MwHwYDVR0j
BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5
MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI
OUl0SVEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu
YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2
LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz
MjNhMzIzMDM5MzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMjMwMzAzODMyMzcu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwQqDo8CIJAwDQYJKoZIhvcNAQELBQADggEBAHcqVVI+JbTbpzPh
+tXWvtox4E55hpo1/Ywj0wu2s/qLNqdijylxhtuHzLLVFPZ/WIC5y6BHtJNHGvoo
5OAIhRBCmK6+1ietj2XFQHVMZ4cdbC1aPqbnf50bHB7W9IC6t10mtjf9vQ0OGYaM
1tluTK+D+Rfj0HsSTNDSkDDo0EUrUVgwFePSFir1T7Cx02l5WsbbZBAyEM5jYaus
C6L9h0fuOSd+oF5R9wUlpNLCSSk8vQ6iE6hRihXYH4UyGrhdsdx9yv/m6rq2Q4gx
eVQ3x4NxCekGah9AfiaagFHEhvvUDaQNYF/kIbKWPST8Wdeq45bR1RiZOEsvcyYf
nWVpTYY=
-----END CERTIFICATE-----
Generated at Mon Oct 26 22:58:44 2026 by rpki-client