Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663030343a3a2f34382d3438203d3e20323037383834.roa
File: 326130653a386630323a663030343a3a2f34382d3438203d3e20323037383834.roa (raw, json)
Hash identifier: WuVLjleW3fZlePIUJJg6WadF6bhPU8yNlcVuR0IjqV0=
Subject key identifier: 5B:96:2B:49:D5:32:E0:A7:18:F9:90:A2:3D:37:D1:E5:2D:91:7F:B1
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 52CC7FAB5E07D866AC0C27891D4DE251B201B219
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663030343a3a2f34382d3438203d3e20323037383834.roa
Signing time: Thu 22 Oct 2026 19:49:56 +0000
ROA not before: Thu 22 Oct 2026 19:44:56 +0000
ROA not after: Thu 21 Oct 2027 19:49:56 +0000
asID: 207884
IP address blocks: 2a0e:8f02:f004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:cc:7f:ab:5e:07:d8:66:ac:0c:27:89:1d:4d:e2:51:b2:01:b2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Oct 22 19:44:56 2026 GMT
Not After : Oct 21 19:49:56 2027 GMT
Subject: CN=5B962B49D532E0A718F990A23D37D1E52D917FB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e3:76:94:b1:65:06:19:77:e0:1b:21:ad:3e:
ca:2d:1b:0b:ba:ea:e5:be:a5:0a:cf:65:8c:71:81:
27:9a:ac:ba:7b:c9:41:78:ee:5b:80:a3:9d:d7:50:
0f:8b:bc:e4:60:9e:73:c3:e9:86:b9:93:83:b9:09:
74:2d:d7:5f:18:82:3d:75:35:78:f6:0b:2e:e0:9d:
5d:cd:e9:73:34:cb:bb:6e:10:d5:5d:fe:df:4c:f4:
18:a4:df:07:9d:76:71:86:06:ee:79:46:e1:e7:f2:
f3:b8:4d:50:dc:09:0e:26:d0:c6:2f:de:70:f0:13:
ce:59:be:87:d1:6d:b3:98:d3:3b:0e:f9:1b:66:3f:
f0:c8:ce:8b:c3:62:e0:f8:1a:19:8e:c1:13:71:81:
4a:22:86:0e:2f:ea:37:3b:30:2d:f2:37:fe:aa:fd:
9a:ff:1b:d8:37:0b:10:21:d2:5a:67:54:6f:4c:9d:
4c:ca:23:89:51:1e:0e:b6:03:7a:e4:14:02:28:3d:
47:10:23:c3:da:6f:95:94:55:d7:c7:68:26:01:f1:
2e:d9:aa:38:0b:70:b8:70:28:7f:8a:77:99:c2:18:
08:46:60:45:25:ef:d2:04:ce:76:51:94:04:ad:46:
12:f9:8a:d7:06:3a:21:43:8d:7c:cf:67:bb:38:0b:
79:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:96:2B:49:D5:32:E0:A7:18:F9:90:A2:3D:37:D1:E5:2D:91:7F:B1
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663030343a3a2f34382d3438203d3e20323037383834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f004::/48
Signature Algorithm: sha256WithRSAEncryption
47:16:5f:bc:d5:41:44:d5:10:2a:6b:b7:4c:4e:1e:0b:00:93:
21:c2:c7:2b:a0:f3:2c:4e:75:ed:61:1c:fa:5c:69:53:6f:02:
4c:80:d3:8f:a8:14:b7:be:40:e8:2e:f9:14:bf:9e:6b:2b:4d:
96:ff:97:91:ed:d0:32:fa:9e:43:68:be:f3:31:20:73:80:fd:
5c:51:6d:e9:8d:6a:81:76:e1:dd:b1:3f:14:dd:16:0d:a7:bf:
89:46:06:e6:83:ec:c7:c8:df:eb:d5:90:dd:cd:31:eb:fb:8a:
7d:cc:28:90:53:53:8b:88:c2:6b:5e:8c:72:fc:51:ba:ee:0f:
f1:09:f6:33:79:dd:af:d9:1a:28:a3:96:65:40:54:50:b7:fe:
9c:12:66:ae:8a:af:97:bf:b8:f2:51:78:eb:68:ee:bd:0b:5b:
c6:b4:f9:d2:98:f4:ff:73:61:f6:a5:7d:3d:32:95:b9:9d:2e:
33:f1:42:3d:36:d4:a1:80:49:78:27:bf:af:2a:bf:c6:ef:1c:
23:73:fe:b2:0f:13:9a:54:da:21:ba:5b:dd:d9:e7:bf:42:ba:
3a:bb:01:12:4b:51:08:73:3a:de:b4:76:ab:cb:c3:74:14:11:
eb:39:5c:5e:f3:d0:01:16:b4:c5:9d:1c:b4:d8:0a:8b:86:43:
d1:1f:de:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:23:49 2026 by rpki-client