Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663030333a3a2f34382d3438203d3e20323133303333.roa
File: 326130653a386630323a663030333a3a2f34382d3438203d3e20323133303333.roa (raw, json)
Hash identifier: 5ctyMAxL6z8qEnrYchTM42/Q7qzJJwKw+A+MISoAqnU=
Subject key identifier: B7:98:27:9C:F1:B6:D0:97:CD:53:7B:F6:B1:3D:49:32:CF:3B:D5:F0
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 3C81C144A0AC0BADEA98670F3F2B50D6DB6C4628
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663030333a3a2f34382d3438203d3e20323133303333.roa
Signing time: Thu 22 Oct 2026 19:50:01 +0000
ROA not before: Thu 22 Oct 2026 19:45:01 +0000
ROA not after: Thu 21 Oct 2027 19:50:01 +0000
asID: 213033
IP address blocks: 2a0e:8f02:f003::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:81:c1:44:a0:ac:0b:ad:ea:98:67:0f:3f:2b:50:d6:db:6c:46:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Oct 22 19:45:01 2026 GMT
Not After : Oct 21 19:50:01 2027 GMT
Subject: CN=B798279CF1B6D097CD537BF6B13D4932CF3BD5F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2c:95:e9:e1:82:93:b9:8c:9a:83:8e:14:01:
7f:7d:8a:a1:a2:7c:ea:e8:f8:a4:90:88:98:9b:9c:
8e:9b:0b:ae:0c:fd:37:66:2f:e6:8f:d5:e3:64:55:
4e:3e:f9:3a:53:65:47:f2:43:fd:5d:01:06:61:d4:
e8:38:46:e1:1d:9f:47:63:0e:f1:d5:2f:6e:cb:e2:
6f:96:02:88:04:b1:93:5d:97:5f:62:a6:f0:e9:6d:
d8:3c:15:e2:fc:44:2f:8d:eb:dd:cf:3b:a4:66:3a:
22:09:18:68:25:35:e3:95:2f:c9:2f:3f:0e:70:b5:
a8:ef:a3:79:3c:d3:81:39:32:a8:8a:19:6e:65:c6:
ae:07:b8:f0:09:04:02:ac:1c:57:72:56:1c:d5:38:
eb:21:c5:61:3a:ac:c5:ab:db:cf:60:e2:d5:96:57:
b1:4b:65:af:5c:68:20:9a:22:23:48:22:0e:7b:1f:
7f:34:b6:b3:52:d1:d3:f8:91:5f:78:8a:02:0a:2e:
a9:c8:38:4a:4a:c3:15:04:9e:aa:b0:c9:f2:08:ac:
9e:c9:47:21:38:19:bc:fc:2c:6f:cc:06:b3:17:e1:
2d:b8:56:ab:e2:75:d2:30:61:d6:a9:be:6f:80:a2:
75:da:f7:0c:2e:f1:99:a9:53:01:76:aa:e9:7a:21:
9d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:98:27:9C:F1:B6:D0:97:CD:53:7B:F6:B1:3D:49:32:CF:3B:D5:F0
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663030333a3a2f34382d3438203d3e20323133303333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f003::/48
Signature Algorithm: sha256WithRSAEncryption
80:ec:63:8c:7f:f8:34:7a:14:d4:b6:80:1e:d2:f3:5f:7f:8a:
af:69:76:d7:cc:25:45:fd:26:26:8d:6a:15:63:b3:65:74:0a:
4c:f7:76:af:bf:7f:70:a3:79:66:ab:bb:47:61:ca:57:68:b8:
ba:a3:ef:5f:e4:29:67:38:8d:75:1e:fa:ed:08:cc:40:a5:d3:
71:c0:12:44:12:06:0e:cd:70:f7:91:6c:1c:ee:78:e9:5d:57:
85:71:68:11:16:a6:6a:98:1f:76:85:2e:20:ec:d4:ef:8d:e5:
df:e2:09:b0:f8:cb:6c:9f:52:15:dc:24:18:fb:53:9e:70:41:
61:29:ab:06:e5:d5:90:7f:69:7a:ce:10:66:a0:08:6b:84:74:
7e:f3:d5:1f:df:4c:7a:ff:8f:8e:4c:4a:4a:a7:cd:8b:26:ba:
d8:42:f8:9f:87:cd:78:10:c6:43:da:39:b3:2f:ae:bc:b9:4c:
92:11:a9:df:00:b2:73:fb:5b:4f:ce:ee:57:b6:bd:74:e2:33:
18:90:b0:26:19:dd:ba:8e:80:93:98:c4:f1:6f:11:77:ec:36:
90:9f:96:f1:a4:d0:2e:73:80:40:8b:7e:15:4b:90:e3:38:01:
f8:64:20:29:6f:a0:ed:cf:32:0d:af:f4:f8:e3:03:c1:e1:9e:
2a:43:34:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:24:05 2026 by rpki-client