Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663030653a3a2f34382d3438203d3e20323132333539.roa
File: 326130653a386630323a663030653a3a2f34382d3438203d3e20323132333539.roa (raw, json)
Hash identifier: wo9PuL5re+or1ioKM0+7ccKZdaY60kc0cohfoNX6Aow=
Subject key identifier: E0:EF:49:2C:C9:85:FC:E9:2C:73:25:2D:83:DC:04:46:12:9B:A3:F2
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 401077D4DAF77CA2EF209B550CA63855901B61C9
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663030653a3a2f34382d3438203d3e20323132333539.roa
Signing time: Thu 22 Oct 2026 19:49:54 +0000
ROA not before: Thu 22 Oct 2026 19:44:54 +0000
ROA not after: Thu 21 Oct 2027 19:49:54 +0000
asID: 212359
IP address blocks: 2a0e:8f02:f00e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:10:77:d4:da:f7:7c:a2:ef:20:9b:55:0c:a6:38:55:90:1b:61:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Oct 22 19:44:54 2026 GMT
Not After : Oct 21 19:49:54 2027 GMT
Subject: CN=E0EF492CC985FCE92C73252D83DC0446129BA3F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6f:7b:76:d8:aa:44:21:17:97:77:16:b3:59:
cc:54:34:dc:5a:e4:d4:67:77:f6:0e:d1:30:23:5d:
59:5a:cf:8e:29:71:90:bc:0c:e0:8c:cb:bd:b6:c8:
43:4d:c2:25:1b:a2:4f:68:20:e3:07:51:25:b4:9f:
5b:cc:a0:5c:db:f6:52:fe:08:ac:a7:10:1b:d9:a0:
aa:7f:bb:ce:20:a2:8b:3e:1e:38:fe:d0:84:1f:53:
d9:33:83:f2:f1:5e:b7:47:d0:f7:ca:52:e2:75:6a:
53:0b:80:13:5d:51:f2:ad:36:5c:ae:67:cc:75:4b:
df:df:03:23:ae:4a:cf:b5:66:d6:6d:00:b9:d0:17:
41:69:1e:0b:95:3e:f9:47:20:ff:d5:25:3b:16:f1:
ba:06:df:a0:da:ec:cc:e4:3e:59:67:d7:01:1f:ff:
5c:4f:64:ac:ff:ec:7d:85:b2:b1:5c:cc:af:9a:46:
7a:aa:87:5c:65:a6:0c:70:03:1e:49:b2:6d:15:04:
35:c3:ab:52:3c:88:aa:e8:1b:15:f3:73:74:49:ba:
14:75:11:7a:58:1b:3f:d6:fb:7c:12:a1:20:4c:eb:
84:9f:72:05:db:4a:01:8b:ee:b2:ac:1a:ad:75:2e:
64:36:12:32:c8:25:b4:d0:3c:c8:44:b3:81:85:0f:
1e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EF:49:2C:C9:85:FC:E9:2C:73:25:2D:83:DC:04:46:12:9B:A3:F2
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663030653a3a2f34382d3438203d3e20323132333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f00e::/48
Signature Algorithm: sha256WithRSAEncryption
70:3d:48:54:73:f0:55:1d:1c:30:b2:ff:9a:6c:3b:0b:1c:ca:
79:fd:75:07:5a:d3:ae:d8:5b:78:f4:b1:97:24:00:31:b4:b8:
b2:03:89:b0:be:72:9b:06:9d:bd:5e:b0:4e:f7:e4:1a:92:f4:
31:fb:89:42:b6:74:f5:d7:97:f3:88:73:6c:44:43:6b:23:b8:
7d:f0:1e:2b:08:1c:68:86:bd:df:69:73:7b:0a:b5:44:f4:fc:
13:02:bf:b3:bf:ca:5d:cb:c4:e5:f8:10:cf:3a:2b:1b:8e:ee:
3b:22:5d:5b:f2:5d:84:38:7f:3f:8c:b9:a3:1a:d3:14:d0:e9:
a1:a9:34:de:73:60:69:4c:71:45:4e:c4:d5:8e:9c:03:b4:f7:
3f:b0:c4:bb:1b:19:ea:a9:c8:d3:ed:a5:96:17:ed:bb:a3:2b:
0e:d5:88:96:f1:90:4b:21:70:e4:ad:c6:2f:16:86:5e:af:b2:
08:37:5c:b3:16:8d:1a:b2:b3:2e:92:19:82:8c:bd:71:f7:59:
47:cf:6f:64:a5:c0:92:5f:6f:1f:f1:74:f9:5f:28:ed:68:ed:
80:e7:9b:fd:6b:df:6c:47:78:d0:51:73:1b:71:1d:53:91:0b:
6e:91:59:35:43:ae:15:5e:df:98:b3:68:f9:ec:20:78:bb:47:
e5:03:ea:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:23:54 2026 by rpki-client