Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663031303a3a2f34382d3438203d3e20323132333331.roa
File: 326130653a386630323a663031303a3a2f34382d3438203d3e20323132333331.roa (raw, json)
Hash identifier: DcuMRjOmXHlp9M1tBkB+jxUWAANquBrY3pZLoTcKvlQ=
Subject key identifier: 87:36:30:87:BC:98:DB:33:0C:59:AB:26:5F:49:1F:C8:37:DA:D9:7D
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 1067AD6BE35B66DEC1DA54C77D028D8A57A338DB
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663031303a3a2f34382d3438203d3e20323132333331.roa
Signing time: Thu 22 Oct 2026 19:49:59 +0000
ROA not before: Thu 22 Oct 2026 19:44:59 +0000
ROA not after: Thu 21 Oct 2027 19:49:59 +0000
asID: 212331
IP address blocks: 2a0e:8f02:f010::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:16:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:67:ad:6b:e3:5b:66:de:c1:da:54:c7:7d:02:8d:8a:57:a3:38:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Oct 22 19:44:59 2026 GMT
Not After : Oct 21 19:49:59 2027 GMT
Subject: CN=87363087BC98DB330C59AB265F491FC837DAD97D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:af:f4:37:3c:41:b9:ec:68:6f:dd:09:fb:32:
21:8d:6a:94:89:80:e4:09:28:f6:ce:f1:17:ae:0d:
bb:a3:82:d6:a1:68:44:70:f5:c9:3b:b4:88:1c:47:
e6:0c:d6:d1:33:3b:48:2d:8a:56:70:79:8b:fd:ec:
69:6a:1f:4c:84:9a:4a:0e:ba:4d:e2:60:ba:78:fb:
2f:33:f7:10:49:3d:a3:20:d4:d5:7c:ba:a0:17:04:
71:a8:62:94:f1:14:89:ea:1d:8b:d1:b1:da:db:2e:
a3:9d:d6:03:db:f5:58:de:24:3c:c7:c3:29:9b:ef:
27:eb:c1:14:7b:a5:7f:ab:11:3a:46:ef:43:a7:57:
52:e2:01:4f:f9:69:d8:e8:84:32:f9:77:8f:68:91:
b0:91:49:2c:c9:af:73:69:e1:40:e8:be:57:59:c1:
49:fe:78:0f:aa:f8:86:09:be:75:43:d7:81:45:b7:
06:8d:d6:4a:74:e2:ea:60:6e:0d:d3:d7:13:1f:ad:
b1:ed:01:45:25:35:29:a9:5c:4a:de:ec:16:32:1f:
ba:bd:0f:69:c7:71:34:76:31:b7:17:66:9b:5e:73:
b8:8a:03:7c:85:b4:ba:73:9b:33:a1:86:a1:3e:63:
5d:7a:d1:82:ad:d6:09:6b:8d:7a:fa:9b:eb:d9:02:
6e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:36:30:87:BC:98:DB:33:0C:59:AB:26:5F:49:1F:C8:37:DA:D9:7D
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663031303a3a2f34382d3438203d3e20323132333331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f010::/48
Signature Algorithm: sha256WithRSAEncryption
65:40:81:e4:a7:8b:4b:f5:0f:3c:a4:3a:b2:74:d8:7d:a9:68:
8c:4a:fb:3c:8a:b9:86:e4:4c:13:bb:da:db:f9:1f:ca:18:a2:
9e:1a:fe:f3:4c:c4:11:d7:fc:12:91:1d:40:79:3c:23:84:8a:
27:81:29:67:f6:0d:40:8a:fe:12:96:fe:d1:47:84:b0:a6:27:
6e:6b:0e:d6:b0:17:14:f3:b8:44:f4:88:81:04:78:84:65:2d:
7b:d0:de:07:4f:bf:6d:20:30:2e:0a:c2:d2:03:02:cd:18:1c:
d2:46:4b:46:3b:93:6e:77:a1:7c:3d:c1:90:65:19:6f:7a:cf:
37:1b:73:b2:1d:82:45:9d:54:4c:2d:44:92:75:72:cb:03:c8:
93:dc:80:25:e2:1d:72:4b:61:7b:56:60:55:f5:d2:cc:b1:6b:
07:66:49:4c:0c:69:31:c7:82:54:30:2e:88:6d:92:e5:96:08:
25:c4:2a:ae:62:12:88:ba:30:84:dc:5d:65:3a:a1:f7:18:2e:
f7:c0:cd:1d:8e:5e:d1:5d:48:fc:aa:87:6e:99:6b:ca:29:30:
e6:14:91:2a:5f:56:94:69:de:2b:50:b3:7d:8f:a0:81:5e:07:
64:2d:92:0f:f8:98:f6:3b:44:53:05:84:c3:65:e2:58:17:2f:
52:b0:ee:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:51:57 2026 by rpki-client