Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323230303a3a2f34342d3438203d3e203439313932.roa
File: 326130653a386630323a323230303a3a2f34342d3438203d3e203439313932.roa (raw, json)
Hash identifier: fygoHKFH3B9oJLCDBaHNocmx1NB8Cx4MHSlIpzSl0vo=
Subject key identifier: 2E:8C:79:CC:13:AF:D1:43:F5:EB:F0:1B:5F:A6:7B:C7:15:5C:A6:24
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 45126B931A637FA9586B4232EA23F66E46640359
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323230303a3a2f34342d3438203d3e203439313932.roa
Signing time: Thu 23 Apr 2026 20:36:52 +0000
ROA not before: Thu 23 Apr 2026 20:31:52 +0000
ROA not after: Thu 22 Apr 2027 20:36:52 +0000
asID: 49192
IP address blocks: 2a0e:8f02:2200::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:39:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:12:6b:93:1a:63:7f:a9:58:6b:42:32:ea:23:f6:6e:46:64:03:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Apr 23 20:31:52 2026 GMT
Not After : Apr 22 20:36:52 2027 GMT
Subject: CN=2E8C79CC13AFD143F5EBF01B5FA67BC7155CA624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b8:7d:4a:1c:6c:a9:52:df:8b:c2:3f:8a:cb:
bb:8c:b8:8d:f9:5b:86:7e:66:bc:9d:1b:85:48:eb:
12:b2:2a:cf:dc:b0:70:c2:67:79:f9:41:95:5e:99:
b2:78:c6:39:7b:40:be:29:a7:de:21:e7:ca:21:8c:
54:48:7c:2a:e2:cb:e5:50:fe:7a:a3:40:1b:b3:c6:
e8:3c:c4:14:cd:c7:92:da:28:4a:82:b1:86:5a:11:
a7:ba:9f:53:cf:f3:81:1a:e6:49:88:e2:e7:aa:80:
ed:70:ee:21:82:c2:4d:ad:c9:28:f2:73:18:31:90:
bc:55:ab:33:eb:df:d9:c6:62:4c:82:b8:fb:e0:dd:
6a:aa:89:1f:71:11:67:06:0d:c5:bc:f1:9b:25:d3:
b7:77:e4:10:aa:18:fa:29:fa:ef:69:6f:81:99:9f:
ee:6f:6e:2f:0b:c0:73:1f:53:85:56:c3:9f:f7:8d:
89:32:e8:3a:3b:f8:e2:55:cf:15:16:a9:f7:0e:f5:
bb:84:11:e4:a8:5a:ae:59:df:c0:59:a3:f1:c7:f0:
dc:49:3b:9d:2e:0f:da:51:16:fa:29:88:3f:c9:5b:
18:16:c3:80:42:02:3f:dd:d2:58:7c:91:0e:0b:69:
bd:02:7a:1a:71:26:c3:01:f8:e1:6b:46:3c:41:16:
ce:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8C:79:CC:13:AF:D1:43:F5:EB:F0:1B:5F:A6:7B:C7:15:5C:A6:24
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323230303a3a2f34342d3438203d3e203439313932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2200::/44
Signature Algorithm: sha256WithRSAEncryption
88:6d:d2:c0:f5:15:41:c3:ea:21:b1:89:83:0d:6d:b6:d2:a6:
b2:f5:a7:a5:f1:d9:ff:8b:45:65:f4:1f:e7:3a:08:54:99:a3:
02:d5:e1:ba:e1:b3:3d:55:50:15:64:b6:e8:03:18:a7:79:3a:
07:f3:db:19:81:62:69:5b:d8:ec:f3:47:90:55:9b:9a:10:40:
19:1a:9d:c1:e3:de:6e:ec:6e:a6:04:0d:3b:db:9a:9b:d5:82:
86:69:99:14:ce:88:e6:d0:5f:ad:2c:c9:6c:a8:8e:cf:0e:26:
3b:62:13:5f:ef:33:04:da:a1:5f:67:0a:ae:4e:06:0a:d8:df:
5e:03:df:c4:61:f6:c1:ad:fb:81:99:a6:e1:96:1c:b8:ac:ab:
91:19:1e:b5:3b:bf:9f:be:cb:d7:45:e3:dc:b5:ad:44:4b:d6:
d1:7b:c3:50:ae:7c:e8:e5:44:24:4f:8b:64:32:ab:09:39:ee:
b5:dc:e3:fb:6b:cd:83:29:fc:8f:59:81:3e:7a:9e:ca:1b:70:
be:a5:02:57:6f:0e:e0:94:6d:55:a6:2d:6f:eb:e3:de:96:85:
97:2e:ab:e9:8b:d9:d5:cb:7d:60:c5:0c:7a:1f:54:ee:b0:1c:
23:ed:75:93:c0:49:b4:84:31:ac:60:3e:3a:db:86:ac:79:bb:
61:15:fb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 05:44:49 2026 by rpki-client