Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663031373a3a2f34382d3438203d3e20323134393538.roa
File: 326130653a386630323a663031373a3a2f34382d3438203d3e20323134393538.roa (raw, json)
Hash identifier: QfdaLvcYArG517O7S6HQGSRP8JtcPEadZ41nEWnOQJs=
Subject key identifier: 62:F3:04:E9:B3:51:43:DD:C1:BD:4E:58:C7:7A:2D:CB:01:10:AC:06
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 3D2A6E4E9E3AC7BA8A9E087CC4680B8A349A1B26
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663031373a3a2f34382d3438203d3e20323134393538.roa
Signing time: Thu 22 Oct 2026 19:49:57 +0000
ROA not before: Thu 22 Oct 2026 19:44:57 +0000
ROA not after: Thu 21 Oct 2027 19:49:57 +0000
asID: 214958
IP address blocks: 2a0e:8f02:f017::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:16:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:2a:6e:4e:9e:3a:c7:ba:8a:9e:08:7c:c4:68:0b:8a:34:9a:1b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Oct 22 19:44:57 2026 GMT
Not After : Oct 21 19:49:57 2027 GMT
Subject: CN=62F304E9B35143DDC1BD4E58C77A2DCB0110AC06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:be:be:62:08:74:e2:c2:e2:51:30:72:ac:
cd:93:f9:29:1c:5e:55:9c:1d:5e:00:eb:6f:76:cb:
19:84:81:49:7f:67:ae:4d:d1:66:dd:b4:83:09:ee:
95:3a:a2:b2:bf:09:c4:d6:14:e1:a6:19:50:9c:16:
b5:a7:92:da:7c:47:57:4d:44:19:1c:e6:77:58:eb:
29:34:cb:92:cf:2e:59:eb:12:b4:8e:78:a4:e8:45:
69:a6:c6:dd:3f:e7:c9:0b:c7:63:50:77:64:28:9c:
7f:b5:32:70:f4:5e:6b:45:29:e3:78:16:44:23:2a:
80:af:ce:02:e6:4a:c5:91:1c:5d:ab:4d:46:be:df:
c0:d4:56:06:db:30:19:19:d6:01:b3:e1:1c:b8:4f:
e6:81:99:2a:6d:cb:29:33:72:45:59:81:85:32:b4:
3e:2d:18:51:cf:f5:4b:ae:99:99:5e:9f:44:6f:53:
ea:8a:1b:e6:d6:9c:52:a5:f2:12:45:e2:84:47:da:
57:2a:8a:74:2f:65:60:13:7a:36:f0:87:fe:e3:4d:
13:2a:f5:2a:b9:4a:45:50:a6:fa:5e:7a:e9:af:b4:
d7:4b:b6:e0:56:62:20:d0:9a:16:16:db:75:98:59:
f8:b1:c3:44:4d:06:9f:4d:e8:8c:30:40:d1:04:95:
51:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F3:04:E9:B3:51:43:DD:C1:BD:4E:58:C7:7A:2D:CB:01:10:AC:06
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663031373a3a2f34382d3438203d3e20323134393538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f017::/48
Signature Algorithm: sha256WithRSAEncryption
b3:a0:72:b5:ed:ce:c7:b1:1a:7d:42:32:e8:05:be:e7:f2:5e:
79:75:61:30:e9:8a:f6:54:6f:f0:fd:41:ce:e0:f8:87:d7:78:
f8:21:73:c1:6a:f8:aa:6a:ce:06:bd:b3:c9:34:66:a8:31:ff:
1a:e1:83:50:b1:dd:3c:5b:58:b2:52:0b:a5:d1:20:f3:9e:1b:
62:d1:82:1b:eb:84:f9:38:74:4d:58:9d:19:a6:f1:61:84:96:
6c:5e:62:56:41:1c:a7:54:43:6d:b4:ad:d6:b1:4c:4f:53:d1:
95:32:04:f1:cc:2c:37:f5:5f:9c:4c:74:ce:d9:17:28:7e:c1:
de:90:27:25:d8:8f:a9:00:0d:93:de:11:c4:1c:82:1c:aa:ba:
b6:19:b8:2f:9a:83:d7:59:27:c6:2b:06:e1:00:75:15:0c:20:
c7:2c:74:1d:ae:cc:c5:df:eb:2b:e5:90:63:31:5f:fa:9b:bd:
5b:1e:96:d0:17:1d:8f:e5:41:ff:c3:f2:1b:b8:eb:ab:4f:c3:
49:b8:30:f7:c8:34:93:48:2e:19:be:37:8b:3d:f6:3e:4b:71:
a5:17:00:00:a1:02:95:71:d7:8b:f9:8f:8d:fd:b7:c1:b2:12:
ec:7a:c0:12:fd:7c:ef:15:0f:75:be:de:93:65:0a:fe:06:28:
bb:7f:eb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:52:00 2026 by rpki-client