Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323138303a3a2f34342d3438203d3e20323030373238.roa
File: 326130653a386630323a323138303a3a2f34342d3438203d3e20323030373238.roa (raw, json)
Hash identifier: rgLjPrXaPFMOxA9cqHCHxA7GzUvgcL1jtYtwsmzulTw=
Subject key identifier: 5F:92:8B:6E:3C:EB:56:AA:3B:1D:51:E2:54:F8:2C:86:8F:41:25:59
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 188007B0BA7A3033045610AAC288B810761E5478
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323138303a3a2f34342d3438203d3e20323030373238.roa
Signing time: Fri 20 Feb 2026 14:22:19 +0000
ROA not before: Fri 20 Feb 2026 14:17:19 +0000
ROA not after: Fri 19 Feb 2027 14:22:19 +0000
asID: 200728
IP address blocks: 2a0e:8f02:2180::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 19:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:80:07:b0:ba:7a:30:33:04:56:10:aa:c2:88:b8:10:76:1e:54:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Feb 20 14:17:19 2026 GMT
Not After : Feb 19 14:22:19 2027 GMT
Subject: CN=5F928B6E3CEB56AA3B1D51E254F82C868F412559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:cc:51:32:55:b8:16:72:55:2c:c6:30:a0:
4c:0b:af:91:5b:da:96:30:5b:6e:62:c0:11:48:42:
93:87:88:ba:af:e3:56:5e:99:6e:e8:44:40:35:19:
ee:7e:66:68:b9:5c:19:91:f3:ef:40:f1:05:b7:50:
7a:1b:19:7b:b3:3d:ba:31:75:8f:71:88:f2:0a:b3:
cf:01:ec:49:c7:e6:8a:9c:b5:d8:e0:79:a0:84:46:
76:c5:63:8c:44:74:4f:27:64:fc:04:99:78:3e:59:
3e:12:d5:3e:e4:5f:9c:d4:c1:66:a4:d7:4d:b9:44:
79:a8:30:72:14:89:67:ac:13:91:4f:c5:22:b5:49:
27:65:33:3e:2e:0d:aa:c0:34:a7:e0:ce:e5:f2:84:
65:11:d0:dd:5e:23:71:5c:32:ca:8f:8d:3c:a9:fb:
87:58:aa:46:4c:73:46:d2:5d:24:4f:5a:df:ab:77:
73:c9:cd:60:f2:91:23:35:d8:6f:6f:33:74:f9:2e:
f2:55:1d:51:9c:88:04:95:52:2a:62:46:72:08:7c:
c9:b3:a1:95:dc:67:d7:0f:4c:a6:29:d7:2a:cb:e9:
c7:4e:a5:d6:f0:fb:9f:f8:e0:4e:9a:5b:44:2b:ca:
66:fe:a2:63:e0:33:c1:9b:a2:50:18:8d:00:47:13:
a4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:92:8B:6E:3C:EB:56:AA:3B:1D:51:E2:54:F8:2C:86:8F:41:25:59
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323138303a3a2f34342d3438203d3e20323030373238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2180::/44
Signature Algorithm: sha256WithRSAEncryption
3d:82:90:bc:b4:c4:63:f9:31:ee:54:d4:23:fe:24:ad:3f:db:
77:41:b3:53:5b:2c:58:4f:d8:78:b6:b7:9e:df:14:c0:8e:64:
d2:0d:86:a7:ff:52:cd:aa:8e:9d:16:fe:37:90:1f:a0:17:f9:
96:5a:53:92:1f:af:53:98:69:ca:ce:61:46:16:99:f9:9b:e2:
17:b4:49:cf:bb:78:5d:12:af:7e:35:b9:19:39:f8:ff:ed:e7:
e3:fc:b7:60:af:10:fa:a7:70:51:77:2f:d3:85:a2:fd:a3:1d:
49:88:0d:ab:ca:60:03:b2:ec:db:a7:4d:7e:84:1f:48:05:e6:
3d:6f:65:f3:af:44:bb:f2:84:46:ec:dd:31:2e:f3:e4:08:c8:
63:11:41:b8:39:34:cc:57:c7:af:00:fc:e9:bd:69:fe:bb:3f:
a3:45:ab:5a:22:a5:18:a5:fd:96:d4:36:34:44:e2:51:04:bd:
c4:da:4d:b8:a9:3b:86:98:60:0b:4e:c5:01:e0:d3:26:41:18:
0e:d5:3c:34:14:a0:0e:7f:c8:29:58:c5:f7:df:ec:5f:72:31:
a2:40:26:dd:16:1e:34:48:2d:62:25:59:3d:e2:0f:5b:06:2d:
ff:05:b0:82:7d:71:ea:d8:b6:e6:94:a0:5d:73:60:8a:8e:59:
d3:57:fd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 14:39:25 2026 by rpki-client