Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663030643a3a2f34382d3438203d3e20323132333630.roa
File: 326130653a386630323a663030643a3a2f34382d3438203d3e20323132333630.roa (raw, json)
Hash identifier: k2bcKQVQUJvToPUPexQNA/atA9hraij8TZ0xBK4Gs04=
Subject key identifier: 01:1F:3E:98:9F:13:D6:A9:6C:BA:E4:5A:DD:22:04:66:7C:93:38:6E
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 3C32D3D0906DDB735C0CD93AFD74AA627DF72183
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663030643a3a2f34382d3438203d3e20323132333630.roa
Signing time: Thu 22 Oct 2026 19:49:54 +0000
ROA not before: Thu 22 Oct 2026 19:44:54 +0000
ROA not after: Thu 21 Oct 2027 19:49:54 +0000
asID: 212360
IP address blocks: 2a0e:8f02:f00d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:32:d3:d0:90:6d:db:73:5c:0c:d9:3a:fd:74:aa:62:7d:f7:21:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Oct 22 19:44:54 2026 GMT
Not After : Oct 21 19:49:54 2027 GMT
Subject: CN=011F3E989F13D6A96CBAE45ADD2204667C93386E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:cd:7a:5d:2f:4a:df:9a:73:7c:a4:b5:20:1d:
2f:67:80:87:74:83:f8:d3:ca:70:95:87:1f:fe:17:
13:46:bf:6f:df:91:a0:6e:6f:e9:fc:1f:74:91:ce:
d4:16:08:20:8f:7e:f1:38:40:e4:d1:fa:d2:8b:66:
04:24:e2:a6:1d:ff:03:e7:34:8e:53:88:5d:e5:60:
75:ef:1c:5d:ae:6d:90:ce:ec:fe:e3:c5:2b:97:66:
39:07:5f:fd:86:81:26:81:d2:6c:c9:18:bf:48:8d:
77:73:8b:62:40:cd:29:6a:65:6e:0e:7f:32:db:07:
19:66:e4:ce:fa:f4:a4:62:df:d5:c0:ad:cc:01:e1:
61:4a:b1:38:59:b0:d8:88:b9:ed:fd:de:64:40:3c:
f3:7a:a7:50:b5:3a:bf:79:b5:36:3d:63:d4:26:8e:
fb:61:5c:2b:37:18:f8:26:79:19:d6:88:c0:0c:a0:
65:89:64:67:80:da:2f:cf:40:78:30:43:43:2a:14:
13:41:94:90:cf:69:43:e7:fc:9d:5e:b6:e9:af:6c:
af:11:18:c1:b9:c6:6e:45:8b:71:f2:be:c7:f0:e1:
d1:6f:20:36:f1:32:de:90:56:2f:8b:fe:59:78:74:
bb:45:53:84:e2:b0:9f:ac:ba:3c:f9:76:63:27:2d:
e5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1F:3E:98:9F:13:D6:A9:6C:BA:E4:5A:DD:22:04:66:7C:93:38:6E
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663030643a3a2f34382d3438203d3e20323132333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f00d::/48
Signature Algorithm: sha256WithRSAEncryption
75:8f:d8:a5:79:be:b6:fc:b5:04:83:59:35:dc:e3:1b:36:c4:
86:f0:c0:c9:b9:48:f9:95:2f:d1:b4:ee:75:09:d1:1c:b4:19:
18:54:82:f4:06:a4:1b:3e:37:22:a8:a8:ef:0f:ec:5b:ba:c7:
79:de:fa:4a:6b:e4:08:ce:5e:6e:57:1f:ee:4c:70:6e:45:c6:
56:e9:6d:ae:30:28:d7:68:b8:f7:41:3c:74:45:a4:f7:9c:50:
76:c0:a2:76:28:a7:fa:33:bc:62:2b:26:e4:89:ee:1d:ae:56:
9f:9d:59:9a:c0:0d:ba:4b:90:90:69:e0:1f:7c:41:d3:97:76:
d5:ce:e7:5f:c1:e0:fb:e1:35:6f:58:e7:7a:6e:85:02:fa:ab:
c8:bc:3c:da:80:1d:64:c7:05:32:50:a7:5c:ad:b9:0b:c8:2b:
5b:14:43:b8:02:ff:27:54:fa:2a:25:80:55:bf:4d:01:67:7f:
d5:23:13:7e:38:c5:e6:66:53:00:c2:53:b2:b0:b3:26:f2:84:
61:11:a2:f6:7f:7f:db:11:b9:d5:9e:1c:a7:10:39:3b:d0:0f:
18:9e:43:66:af:72:2b:d6:b8:d4:55:20:2f:72:05:57:9e:a8:
52:41:11:7a:a1:ee:df:b2:71:24:29:d7:e2:de:30:00:32:6d:
73:f2:e2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:59:46 2026 by rpki-client