Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323237303a3a2f34342d3438203d3e20323135393536.roa
File: 326130653a386630323a323237303a3a2f34342d3438203d3e20323135393536.roa (raw, json)
Hash identifier: 01/z9pFEjHA/6iFMaiR5D8gFkhcnIRHxzCrCeoDsefs=
Subject key identifier: 0C:DD:BB:86:B9:9C:EE:7F:98:43:F2:3A:93:99:FF:07:F7:18:58:E1
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 7C9A3637EF61FD3A1B7B2625B099754A7C60DF3D
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323237303a3a2f34342d3438203d3e20323135393536.roa
Signing time: Wed 13 May 2026 20:24:44 +0000
ROA not before: Wed 13 May 2026 20:19:44 +0000
ROA not after: Wed 12 May 2027 20:24:44 +0000
asID: 215956
IP address blocks: 2a0e:8f02:2270::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 16:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:9a:36:37:ef:61:fd:3a:1b:7b:26:25:b0:99:75:4a:7c:60:df:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: May 13 20:19:44 2026 GMT
Not After : May 12 20:24:44 2027 GMT
Subject: CN=0CDDBB86B99CEE7F9843F23A9399FF07F71858E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1a:bd:61:a2:d1:db:e8:26:17:be:2d:b0:ca:
91:e9:20:65:e5:b1:20:07:d4:95:c8:0b:18:92:be:
f3:eb:b9:b5:f5:d9:4c:23:26:ae:34:ec:d3:f9:fa:
7f:12:7b:d1:6d:76:ef:54:60:95:52:9a:70:eb:e3:
c1:d8:ff:62:03:dc:ae:15:7a:e8:5c:a7:18:29:51:
8f:1c:30:c0:3d:ea:34:7d:08:f3:de:7e:37:ad:2d:
ab:b5:53:ce:6a:e5:bd:80:6d:0c:a7:96:9c:12:ba:
ae:38:44:c5:6a:35:c5:78:10:45:77:4f:1f:8c:f3:
90:11:27:f5:c2:8f:b0:5c:35:df:65:97:fa:e7:fd:
08:1a:ca:a1:40:68:a0:22:2b:27:1d:ca:1a:23:08:
75:6f:93:c6:11:06:28:79:2d:75:25:77:7e:f1:73:
fa:7a:80:5b:cd:cd:09:be:ad:7f:85:22:d3:0e:cc:
e7:52:6f:2d:cf:6f:56:2f:20:38:e4:10:78:1a:5b:
fa:c7:c9:96:86:03:65:20:76:95:fb:04:bd:17:77:
8c:26:a2:fd:05:fe:eb:f0:74:58:74:17:e0:99:12:
d9:7a:3b:23:b9:80:76:34:09:6b:27:fe:61:06:0b:
85:89:6f:ec:0f:94:d0:a3:c8:6f:4c:22:df:29:b9:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DD:BB:86:B9:9C:EE:7F:98:43:F2:3A:93:99:FF:07:F7:18:58:E1
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323237303a3a2f34342d3438203d3e20323135393536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2270::/44
Signature Algorithm: sha256WithRSAEncryption
70:d7:c7:bb:1b:9c:ff:c3:78:97:1e:ef:a6:79:ff:cb:ec:42:
7d:6a:fb:f6:1c:89:e9:2a:a2:87:44:b1:6c:56:87:c8:ed:d3:
70:99:18:99:42:51:9e:28:bf:0b:b2:11:55:59:a1:69:34:a0:
89:cf:ac:a2:c9:ca:78:9a:d0:23:d9:59:5d:25:2a:67:d3:89:
78:d3:5a:ca:1e:a4:79:23:61:c2:67:16:e0:84:fd:52:cc:e1:
4f:f3:48:69:da:f2:9c:f9:37:fe:87:28:ad:92:f8:b7:f4:f7:
1c:a5:58:c5:e5:21:75:9b:88:f4:7a:cc:76:e5:e3:ff:32:28:
ce:0f:57:a2:4c:ff:66:6a:b1:e1:82:a0:ea:72:28:25:b6:5f:
3f:30:d2:0e:62:a6:e7:97:f9:9c:46:ef:14:96:b4:c7:f6:8f:
94:05:24:5a:15:e5:34:82:3b:7e:b1:a3:65:97:56:0e:d0:8d:
2d:38:ac:27:44:d9:62:6e:60:ca:92:02:39:3e:74:70:ec:b8:
15:5d:2a:4c:07:0f:87:2d:b8:85:1b:27:de:76:7b:df:54:af:
25:e3:d9:ed:0e:e0:0a:0a:27:f4:20:3e:5b:c6:27:2c:87:98:
d4:42:d3:03:c4:29:dc:0e:c9:91:0a:7a:6b:88:66:74:ba:50:
bb:18:f8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:16:50 2026 by rpki-client