Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663030313a3a2f34382d3438203d3e20323133353733.roa
File: 326130653a386630323a663030313a3a2f34382d3438203d3e20323133353733.roa (raw, json)
Hash identifier: 8D4JdWolo5jxnWv/oxe3n638QB4r4VETPRipJyqxLt4=
Subject key identifier: FD:E1:52:5E:6E:DE:6D:E5:8C:CC:33:AF:FE:4B:5F:47:69:98:34:D6
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 6B8983E996B9080959D89D43BEFD7CFBC847C619
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663030313a3a2f34382d3438203d3e20323133353733.roa
Signing time: Tue 26 May 2026 14:59:12 +0000
ROA not before: Tue 26 May 2026 14:54:12 +0000
ROA not after: Tue 25 May 2027 14:59:12 +0000
asID: 213573
IP address blocks: 2a0e:8f02:f001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:89:83:e9:96:b9:08:09:59:d8:9d:43:be:fd:7c:fb:c8:47:c6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: May 26 14:54:12 2026 GMT
Not After : May 25 14:59:12 2027 GMT
Subject: CN=FDE1525E6EDE6DE58CCC33AFFE4B5F47699834D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:2f:73:e7:8b:06:29:13:c4:19:19:0d:7f:
2a:bf:8a:eb:97:9c:2a:5b:16:58:05:fb:8e:61:25:
da:60:21:75:b9:1f:91:27:25:3b:80:e1:cf:aa:56:
60:a8:26:a4:7c:f1:3e:4d:e6:18:f8:29:88:3b:8d:
0a:82:f5:a9:7c:91:84:b5:02:0e:35:ee:6b:36:cd:
ef:db:c0:02:94:ca:af:4a:a1:23:8d:b3:b0:df:35:
bf:9d:b2:a2:2d:46:37:bb:40:67:c0:4e:57:ae:ad:
01:ae:7a:ad:e3:34:89:27:7a:a4:c5:11:82:2e:80:
7b:41:b9:7b:6c:e9:7f:05:d2:3b:e1:99:87:33:7d:
33:f3:0c:d1:21:c7:a6:96:ad:7a:a4:f3:34:3e:fd:
d8:5e:76:69:cc:e1:70:2a:a2:21:4a:5b:71:41:fb:
72:82:88:7a:ee:32:73:d1:7f:c8:50:71:ca:1b:a8:
bb:af:2f:93:ff:b3:a5:22:04:68:28:cd:91:64:5b:
8f:29:b8:93:3a:06:98:4f:45:41:ce:0e:f2:fe:2e:
38:df:85:f9:4a:de:21:81:0c:5a:19:a6:28:d6:2e:
6a:0b:62:6f:70:a4:77:44:15:10:c4:90:dd:6c:ea:
d5:f6:47:6e:94:21:3c:40:c7:17:1f:a8:f6:f8:97:
4f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E1:52:5E:6E:DE:6D:E5:8C:CC:33:AF:FE:4B:5F:47:69:98:34:D6
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663030313a3a2f34382d3438203d3e20323133353733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f001::/48
Signature Algorithm: sha256WithRSAEncryption
55:b6:00:ef:73:be:93:2f:7c:31:1b:0d:ed:85:a6:e2:4b:f8:
a0:63:47:b1:3e:04:4f:0d:e3:ca:49:c7:23:73:30:24:53:ed:
f9:26:9d:bb:0b:0c:39:41:66:f9:8f:07:84:a1:cc:ad:72:b2:
43:71:b8:b9:30:c3:46:31:02:6c:37:fe:af:74:5b:0c:ab:55:
96:2c:d2:89:5c:08:5f:16:55:fd:a6:0f:13:a0:e6:70:99:2d:
b7:5c:b9:a9:2e:a0:ce:d1:82:92:a7:c2:4a:5f:f1:4d:30:ed:
66:b2:a0:32:ad:21:0b:6d:81:33:09:81:8f:ac:0a:64:c9:73:
ca:47:a6:81:ff:e4:77:5e:88:d4:47:b9:23:98:5f:e1:66:8f:
bb:4f:67:fd:ad:43:0a:4c:88:06:bc:c4:fd:93:79:96:50:e0:
a1:5c:9f:6a:db:a9:a6:e2:31:e7:1d:fb:8f:9d:94:ba:bd:93:
69:0e:ed:4a:24:d5:d1:22:ed:dc:1a:e5:39:63:cb:71:b9:db:
24:3f:3d:3f:f2:86:f6:fb:c0:91:af:9c:4f:0b:5f:22:f1:ab:
37:89:ae:f7:0d:1a:26:78:d2:6a:b0:b6:b8:38:51:c5:f2:4f:
b6:41:e5:d5:31:bf:b9:19:51:38:37:07:e6:bc:cc:2d:51:3d:
01:fb:9c:99
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUa4mD6Za5CAlZ2J1Dvv18+8hHxhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3
ZjQ4YjQ4NDAeFw0yNjA1MjYxNDU0MTJaFw0yNzA1MjUxNDU5MTJaMDMxMTAvBgNV
BAMTKEZERTE1MjVFNkVERTZERTU4Q0NDMzNBRkZFNEI1RjQ3Njk5ODM0RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0aC9z54sGKRPEGRkNfyq/iuuX
nCpbFlgF+45hJdpgIXW5H5EnJTuA4c+qVmCoJqR88T5N5hj4KYg7jQqC9al8kYS1
Ag417ms2ze/bwAKUyq9KoSONs7DfNb+dsqItRje7QGfATleurQGueq3jNIkneqTF
EYIugHtBuXts6X8F0jvhmYczfTPzDNEhx6aWrXqk8zQ+/dhedmnM4XAqoiFKW3FB
+3KCiHruMnPRf8hQccobqLuvL5P/s6UiBGgozZFkW48puJM6BphPRUHODvL+Ljjf
hflK3iGBDFoZpijWLmoLYm9wpHdEFRDEkN1s6tX2R26UITxAxxcfqPb4l0+zAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU/eFSXm7ebeWMzDOv/ktfR2mYNNYwHwYDVR0j
BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5
MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI
OUl0SVEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu
YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2
LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz
MjNhNjYzMDMwMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzMzNTM3MzMu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwAqDo8C8AEwDQYJKoZIhvcNAQELBQADggEBAFW2AO9zvpMvfDEb
De2FpuJL+KBjR7E+BE8N48pJxyNzMCRT7fkmnbsLDDlBZvmPB4ShzK1yskNxuLkw
w0YxAmw3/q90WwyrVZYs0olcCF8WVf2mDxOg5nCZLbdcuakuoM7RgpKnwkpf8U0w
7WayoDKtIQttgTMJgY+sCmTJc8pHpoH/5HdeiNRHuSOYX+Fmj7tPZ/2tQwpMiAa8
xP2TeZZQ4KFcn2rbqabiMecd+4+dlLq9k2kO7Uok1dEi7dwa5Tljy3G52yQ/PT/y
hvb7wJGvnE8LXyLxqzeJrvcNGiZ40mqwtrg4UcXyT7ZB5dUxv7kZUTg3B+a8zC1R
PQH7nJk=
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:27:30 2026 by rpki-client