Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323231303a3a2f34342d3434203d3e20323033383037.roa
File: 326130653a386630323a323231303a3a2f34342d3434203d3e20323033383037.roa (raw, json)
Hash identifier: eC+QLjV9BQ+2OBZhrS9rlDocLuGUnC9nH2aENXNWa+k=
Subject key identifier: 62:FE:92:7C:44:EC:97:8F:B3:22:DE:B4:1D:09:F6:2E:1E:E9:62:6D
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 11DC1C42226332656BBFE6AF723AD283BB8A92FE
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323231303a3a2f34342d3434203d3e20323033383037.roa
Signing time: Thu 22 Oct 2026 19:50:00 +0000
ROA not before: Thu 22 Oct 2026 19:45:00 +0000
ROA not after: Thu 21 Oct 2027 19:50:00 +0000
asID: 203807
IP address blocks: 2a0e:8f02:2210::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:dc:1c:42:22:63:32:65:6b:bf:e6:af:72:3a:d2:83:bb:8a:92:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Oct 22 19:45:00 2026 GMT
Not After : Oct 21 19:50:00 2027 GMT
Subject: CN=62FE927C44EC978FB322DEB41D09F62E1EE9626D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:81:58:a0:63:2c:3c:5f:85:ac:78:32:81:28:
79:d6:6f:62:a9:6e:ff:af:66:49:c9:7d:fc:97:74:
65:96:5c:9e:02:a2:50:7c:36:02:f6:da:9a:68:8a:
3b:fe:64:89:1f:bb:60:3a:38:9b:ac:47:17:be:c3:
c6:6a:3c:5a:a3:43:14:ee:5a:f8:a1:9a:e7:47:f8:
db:32:af:d8:c8:ae:e8:5b:d6:b2:04:b5:86:da:81:
3a:45:bd:98:ff:8a:13:4b:87:45:fc:f4:46:85:54:
a7:3e:d8:18:fb:d2:03:3c:0d:99:61:d4:86:64:9b:
22:85:a1:75:72:28:8f:34:f7:5c:e3:27:7c:72:5d:
87:50:68:6a:d9:62:1e:b7:d7:67:81:91:0d:8b:a2:
57:14:ce:81:8e:f2:3e:89:1f:a1:ef:d0:2d:f1:98:
cf:5f:4c:ec:01:a4:f5:4f:91:69:d8:62:02:6b:16:
e6:fd:e8:aa:46:18:94:3c:e3:3d:50:2f:39:fa:57:
24:9a:1a:25:11:7b:de:02:1c:7b:a8:06:73:83:a7:
bf:a9:73:49:95:aa:2d:7f:81:dd:fc:c5:d1:94:75:
e0:7d:4a:c4:3e:e8:5e:4e:3e:c4:95:33:d1:d0:cc:
9d:f0:f5:c2:9b:ea:a9:3b:81:25:7c:7e:ee:bc:72:
08:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FE:92:7C:44:EC:97:8F:B3:22:DE:B4:1D:09:F6:2E:1E:E9:62:6D
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323231303a3a2f34342d3434203d3e20323033383037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2210::/44
Signature Algorithm: sha256WithRSAEncryption
1e:a1:34:1f:b8:67:61:6c:16:7f:cd:b7:f4:c1:51:ac:94:e4:
b5:c9:e6:88:e2:24:15:85:2f:17:39:b3:9d:e7:a6:88:65:ee:
ed:62:9d:14:f1:61:61:8f:6d:0c:92:09:a6:2c:43:3a:7e:b3:
2e:50:43:9b:8f:16:9c:b8:a2:16:0b:9a:16:39:d6:42:4b:96:
0f:b3:ee:b7:80:b5:46:fd:5d:27:38:b2:5d:97:97:bd:34:e2:
b1:97:aa:c2:95:df:3f:21:68:96:23:34:7d:09:ad:02:64:a8:
69:b3:e8:ba:e2:2f:70:5e:cf:36:d9:87:20:7c:14:88:d0:73:
cf:46:b3:24:80:bb:b6:26:6e:5a:bd:25:78:58:4b:3e:b6:7d:
ae:da:b0:5c:57:31:56:37:6c:ac:e7:3b:27:4f:a4:75:6c:ee:
49:5e:e8:8e:06:c4:2e:d1:7e:df:98:e6:e6:67:cd:83:f8:4a:
13:86:82:7a:da:bc:b4:b8:f0:46:98:8c:39:7f:60:34:76:63:
40:7a:b6:8d:83:b0:c9:60:ba:7f:e6:c8:23:0d:30:d9:4f:0d:
e8:ed:ae:c1:7f:16:73:d0:02:a7:53:3d:bb:fe:0e:db:08:04:
17:8d:8d:a9:c0:61:df:ce:52:6c:07:80:83:37:c1:9d:5d:25:
84:e5:b6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:06:51 2026 by rpki-client